Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: Z7cW6UNtp7+AkQNUVLWQ37G8iIdGT4CbJyi04TcWHc0=
Subject key identifier: 30:16:99:B1:1B:AC:FC:C9:DF:32:3C:E1:03:88:13:C5:99:EB:44:81
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 0199FD33F5B0BCC1B9265E477B8DD375346B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: t/Inz14Dq913sOMkQ1Qcheg5l1k1ktkNMDilVjFYy4Q=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:b0:bc:c1:b9:26:5e:47:7b:8d:d3:75:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=301699b11bacfcc9df323ce1038813c599eb4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:fc:93:71:74:a3:44:6a:d4:67:14:d3:76:
8c:f4:69:ac:5f:d2:e6:80:3f:4e:ed:a5:36:7f:55:
8a:9f:81:62:9b:39:fc:21:02:1e:5a:a4:8b:32:8d:
04:7e:93:9e:fd:2f:e3:5c:48:05:e3:4a:da:af:89:
6a:03:fd:dd:78:92:79:35:64:7f:d0:a6:c5:20:0a:
25:93:b0:ef:f8:4d:15:4e:ae:13:29:45:ca:61:da:
85:5e:c5:0d:6b:c7:7d:b0:81:6e:3b:7d:0a:1f:92:
04:c0:27:94:09:8d:09:6c:57:9b:10:a5:0f:f6:2b:
66:b7:76:bf:96:95:73:4f:d1:60:ec:aa:71:03:bc:
2b:7f:48:23:8f:3b:b7:ae:aa:71:e8:09:18:cd:fc:
70:77:b5:26:a4:20:a4:90:e1:43:b5:bc:af:04:81:
49:31:03:28:38:55:7d:4f:77:31:42:93:a5:0d:bb:
5b:d0:e7:62:46:63:f0:e1:ac:9b:d2:cb:8c:09:fb:
8a:e3:f6:b4:d3:b4:0d:9b:c3:1c:49:66:50:0d:de:
d0:b1:28:6c:64:3b:cb:8a:9b:ec:ff:fc:96:3c:3c:
21:b8:2b:30:31:34:3d:81:d0:36:fb:bc:07:51:c5:
09:c0:44:37:ed:10:9f:b7:27:6d:49:c4:44:75:a1:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:99:B1:1B:AC:FC:C9:DF:32:3C:E1:03:88:13:C5:99:EB:44:81
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:12:5f:20:a7:d3:89:b9:ff:08:3a:e2:55:0a:3f:f5:40:89:
9d:ff:1b:86:55:0d:98:c7:32:d1:fb:3e:dd:13:25:12:45:17:
a1:11:bd:dc:b1:69:92:1a:16:5d:80:7e:de:d3:41:e2:fc:05:
dd:98:2a:d1:95:63:de:c2:f1:74:e3:d6:93:09:18:2c:bf:34:
96:a9:d4:8d:a2:e2:ff:72:30:ab:5a:3f:4e:a6:b3:f3:52:d8:
f7:f4:b7:f6:90:e3:f2:15:c1:8d:ab:63:05:f7:12:91:4b:4c:
2d:10:7c:f1:f8:3f:51:0a:14:5c:1d:b9:34:5e:6d:50:69:99:
72:ff:c1:76:ac:db:eb:8d:e6:a4:b4:35:db:4f:19:97:ea:d3:
c0:eb:1e:66:f5:a0:21:f6:47:14:27:b8:10:1a:c5:f7:d9:03:
ce:89:b3:70:76:33:b6:92:5f:b8:41:dc:90:fa:67:92:8b:0b:
94:0b:54:6b:2d:e4:2c:a9:fd:68:28:29:5e:38:f0:f9:49:c9:
12:4a:26:af:4b:d5:f2:37:85:64:31:9f:bc:7a:0e:29:44:6e:
6e:97:b9:9d:0c:bf:7f:36:cf:f1:72:e8:fa:79:a5:07:e2:87:
56:2b:b4:8d:63:fb:88:9d:1a:64:28:7f:44:7b:7a:e3:a9:4a:
03:07:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:46 2025 by rpki-client