Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: 32pvAAxobp6vwh4OKziPu97tbSVMdfpaFvBt+DOu/00=
Subject key identifier: 0B:BA:8F:11:4B:CC:BD:33:B7:16:06:77:03:82:94:CD:70:0F:79:80
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 0199FAD7F6DBEB921381D0F40C94D1C0AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: L3/K+ZaDQQ11+T2U37eHivEWShY9BGjKqKyzEG3K5B8=)
2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f6:db:eb:92:13:81:d0:f4:0c:94:d1:c0:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=0bba8f114bccbd33b7160677038294cd700f7980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:33:53:f1:05:30:84:f3:eb:60:44:00:ce:
f0:ad:d0:f7:d4:68:0a:dd:06:10:da:8d:5f:e0:86:
0e:49:85:2a:41:c0:f3:54:fe:1e:f1:38:81:e5:d4:
4d:c9:82:19:08:4d:ce:42:b0:b7:e1:b3:62:79:6d:
29:81:18:e7:29:87:58:ce:c0:58:d8:92:0f:55:bc:
8d:af:bb:9d:3b:9f:8e:1a:85:b7:09:83:80:13:6b:
d8:b0:53:5f:ee:75:bd:bd:c1:ab:45:a5:2d:73:48:
fe:41:5d:cb:ad:60:d4:6c:77:35:45:57:f5:b6:57:
4a:51:33:26:ac:9e:ea:60:17:7e:18:84:52:04:e6:
24:29:b2:e6:e4:6b:63:fe:6b:fd:f6:bb:e9:da:79:
d0:89:33:df:3f:87:1e:c9:f0:5a:aa:97:38:c6:49:
e5:1b:03:14:95:93:44:6c:8c:12:5c:78:57:b5:d8:
49:50:47:47:32:fe:24:2f:19:72:3b:35:81:da:de:
8d:d5:fc:7a:8f:52:57:73:b9:47:7e:b3:90:dc:d6:
86:5d:7d:3e:d5:0d:5a:45:ef:d1:a2:39:8f:4e:ba:
55:0e:1a:42:bb:8e:6b:a2:a8:e4:90:4a:c3:2f:ee:
f3:e1:6f:27:85:f8:48:5a:78:4a:34:0b:1c:07:7c:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:8F:11:4B:CC:BD:33:B7:16:06:77:03:82:94:CD:70:0F:79:80
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:d6:26:51:e5:4a:ab:31:b2:6f:00:6c:ae:19:c4:2a:96:
bf:aa:90:f8:d0:d8:f5:cc:5f:58:65:2b:bc:83:91:34:ff:7b:
c8:10:bc:fe:d3:7e:c0:54:4b:b1:3b:6e:5a:8a:dd:c3:d9:a9:
2a:94:30:09:a8:29:b0:2f:7c:6a:60:ae:85:1b:ce:c4:40:ee:
64:0f:cd:7f:f6:84:56:85:54:7b:12:67:98:5b:06:c5:4d:59:
a0:d1:39:9b:5f:31:04:18:2e:82:e4:e7:bf:2f:ba:cc:64:b1:
99:31:8d:84:f4:b2:b5:36:45:7d:17:bc:5e:48:2f:e6:c2:ac:
62:93:5f:d4:f2:6d:22:fe:d6:54:03:2c:7f:20:94:6b:cd:53:
c9:52:93:7d:dd:e1:47:62:af:89:f9:44:fa:d6:9f:84:bd:b5:
cf:f0:4d:7a:b6:e3:d1:6e:16:c9:0b:ac:c2:1c:c2:0e:72:91:
c7:72:4a:b5:64:e8:5d:c2:0b:2a:13:6d:5b:29:84:71:17:93:
bc:2b:ad:25:5b:56:87:1a:97:2a:8d:9f:2e:8b:42:02:0d:f8:
8c:94:9c:88:a9:37:b8:17:2c:aa:27:5b:cc:92:23:99:96:5e:
a1:1b:2b:bb:d1:6c:f3:47:83:c1:1c:89:6a:ad:66:70:06:e8:
e2:b4:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:32 2025 by rpki-client