Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: U5TOBGWNzndh2FlSNUujBisFqAMrORf+4T15JQbzqCg=
Subject key identifier: 52:33:9E:A4:73:AF:D4:07:D3:48:BC:97:CD:CD:89:28:A9:09:2D:EA
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 0199FBEAAE28BE895FC58FF23192C4D34854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 1349
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: Ogd1oHltuRTXZIAdmzPOwAOaNAOeJkW6AU5IifpP0KQ=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ae:28:be:89:5f:c5:8f:f2:31:92:c4:d3:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=52339ea473afd407d348bc97cdcd8928a9092dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:7c:4e:15:a9:ca:44:9d:aa:f2:db:37:6c:
14:7f:90:fd:5a:a1:d2:16:0c:08:d7:f4:6c:4b:3b:
51:d8:de:9c:a2:9e:bc:d0:4e:e1:cc:55:7a:a3:c9:
36:52:79:a2:7f:38:77:ae:2c:9a:fd:99:ca:65:09:
9d:71:7e:6d:2b:a1:76:c4:7f:4f:09:35:57:51:8f:
d9:5f:10:69:b5:0d:84:15:cc:03:32:51:d7:05:83:
9d:19:19:20:dc:b0:f7:ad:64:9f:ec:35:f6:21:c9:
6e:5a:c5:03:b4:a4:69:ff:d7:b0:45:5a:8e:b0:af:
82:df:b1:31:27:05:f1:02:b2:20:9f:39:6d:ee:13:
bf:53:df:96:3c:b8:11:d0:77:7d:8b:11:6a:af:34:
9f:28:46:cc:08:3a:b0:f1:40:9c:65:1a:29:99:f4:
3b:44:51:39:9d:84:f5:87:66:2f:b5:44:9e:87:ca:
47:5c:c0:68:01:64:28:3f:17:ad:e4:eb:90:58:3e:
1a:f2:c8:9e:68:bf:9e:df:30:e2:7d:ea:09:2f:8e:
32:a7:5b:78:fa:ba:8c:a9:03:43:42:23:af:8d:0c:
b7:7f:fe:4b:6e:db:ef:81:f2:f3:84:3d:0e:04:43:
45:84:c3:7b:cf:d9:13:e2:bd:d2:67:4d:9e:ce:05:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:9E:A4:73:AF:D4:07:D3:48:BC:97:CD:CD:89:28:A9:09:2D:EA
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:25:d8:42:c0:f7:22:22:3a:af:98:e8:3f:0f:3e:9d:49:
ce:97:d5:86:ef:de:82:a8:8b:d8:35:82:8d:2e:2d:40:eb:7b:
d7:67:e7:1c:4f:0a:0b:ed:68:80:03:bd:16:d5:ff:61:f4:7e:
79:0f:6e:2a:0f:ba:a2:87:a3:23:e1:4b:51:d9:e0:8e:38:d5:
e0:93:42:b1:99:ad:49:25:e9:86:5a:b1:ac:91:94:2d:de:7f:
be:ca:1c:66:bb:f5:cd:a9:3d:0f:73:fd:74:fb:9d:b6:00:15:
e4:95:94:ac:5a:a6:dc:2f:75:c8:fe:75:53:13:12:07:40:13:
f1:4b:cf:98:69:0b:65:f8:75:72:24:cc:9d:de:83:4f:dd:70:
02:f7:b0:1c:aa:9e:95:a4:bf:cc:05:b9:cb:84:f5:b7:69:02:
65:9b:e4:a5:19:7e:fc:68:13:83:f9:da:95:50:29:7c:6e:c9:
28:22:b2:2e:92:93:c5:65:3b:10:a3:49:a2:e8:cd:52:ad:e6:
11:e9:ef:e3:13:70:39:68:1a:ad:78:8a:f6:08:73:4f:e3:31:
1d:57:71:c6:e6:e2:a8:e8:6e:20:92:5e:cf:3d:87:66:26:88:
b6:7f:c5:97:ea:d0:81:77:f0:d5:7d:da:59:ed:e8:ac:eb:e6:
fc:77:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:53:58 2025 by rpki-client