Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: cND3HNKGIujsItKXCeeUqFb9xxA44CGO7qF0VMnhBuw=
Subject key identifier: D2:3D:48:C2:45:C4:8C:CE:15:55:90:9D:94:4E:DE:7F:7C:CE:87:F5
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 0199FBEA7E906A292D24DC1FD02E9B67DD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0ACD
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: gSk/+/12sovhVp7p9UOXXvYjvGWqEc5Mligofke3Hh4=)
2: tX_eiSv6b9gWuAzQ90obdliFuqM.roa (hash: ZiFHzPJvZH9N84EKs/55J2Q6VVzMS4porN9rlx3w+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7e:90:6a:29:2d:24:dc:1f:d0:2e:9b:67:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=d23d48c245c48cce1555909d944ede7f7cce87f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:b5:1e:cc:de:51:57:6a:5d:86:c0:29:f1:
f2:5b:d9:49:3a:1d:96:53:f3:63:29:c7:fb:71:8e:
a7:63:a6:90:df:6d:3c:81:4d:f4:c4:41:51:c3:64:
d5:d5:00:14:c1:aa:57:f9:3d:b2:5e:df:fb:23:5a:
11:9d:ae:f9:dd:bc:0b:8e:8b:43:8f:b4:ea:d0:6b:
a7:22:65:65:a5:6b:3f:9a:aa:de:61:42:8c:ac:86:
04:c9:04:32:08:4e:67:5e:7c:e2:d1:d8:d3:a2:89:
b7:13:44:fd:20:d2:b7:49:64:68:30:67:12:43:98:
d1:ca:a9:41:5f:1d:da:81:73:42:21:53:19:f1:4d:
a5:b5:84:55:5e:83:27:0f:16:04:45:8b:0a:ab:fe:
99:f7:01:7e:c2:a4:dc:01:95:ca:47:71:fb:c0:4f:
02:06:07:7b:f6:42:fb:a2:a2:26:d4:7e:78:78:6c:
a1:c8:db:9f:74:af:77:20:4c:df:20:20:17:89:fb:
4c:70:00:cc:6a:4d:1f:49:fe:fc:e4:8d:cd:cd:56:
0d:b2:83:03:34:5f:f3:24:ba:ef:33:d8:64:81:72:
f2:49:b2:49:59:ff:cb:6c:8f:25:a9:0c:8f:c8:f8:
f5:a2:de:dd:4e:6f:24:f8:7d:28:ad:77:36:07:d6:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:48:C2:45:C4:8C:CE:15:55:90:9D:94:4E:DE:7F:7C:CE:87:F5
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:a1:78:4a:e5:e0:77:1c:c3:7d:5c:77:24:42:09:49:43:
ec:2a:e1:47:d3:8b:bc:bc:9b:9e:62:9d:f4:80:49:78:52:8b:
3d:93:55:a7:14:34:c0:b6:bf:5e:bc:a9:57:f7:2b:2d:91:19:
d3:3d:9e:3b:35:22:6d:f1:f4:99:cf:4a:d1:d5:aa:9e:98:74:
39:56:89:fb:d8:d1:03:ce:8d:6e:03:9b:55:46:b5:8b:a3:d7:
3a:e2:a1:2a:aa:3a:f4:a3:82:1d:78:3f:15:fb:d4:87:b9:21:
11:f5:3a:76:45:d0:54:aa:18:0b:dd:d3:e3:a7:ee:72:2a:bf:
2c:e1:e8:cb:28:37:ae:00:7c:0c:9c:82:0c:ef:12:eb:ba:52:
a6:0c:28:1b:2b:77:aa:dc:31:19:11:12:46:11:72:6a:8c:b9:
3e:3a:8c:8a:28:8e:3d:6e:a1:17:1e:cd:82:8b:fd:93:25:13:
47:04:be:0c:1d:65:64:e2:0c:f6:6d:79:dc:3d:1b:75:43:a6:
b3:cd:4d:7f:57:55:3a:c3:07:21:b4:7d:9a:46:b4:53:ae:1a:
c9:14:60:ac:9a:8c:e8:0b:b0:10:58:84:3d:91:4c:51:8b:b5:
e5:42:0a:35:83:a9:b6:50:60:dc:f4:ba:65:d1:29:83:4d:a0:
d8:12:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client