Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: C6deDYbZNfSEuExvkZtLeffXigDVU1QeY1Wz4u2b1n8=
Subject key identifier: 25:7C:39:3E:09:30:86:B2:35:78:17:18:C4:1C:3A:0A:60:BB:F7:DF
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 0199FB45C782A690F722DB64EB93A3EB1A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0CD3
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: W7c+MgO1GWw5BlEhFVvU3Dk38UtNz2ffc/jQNs6iFR8=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c7:82:a6:90:f7:22:db:64:eb:93:a3:eb:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=257c393e093086b235781718c41c3a0a60bbf7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:4a:72:0a:bc:bb:f0:97:4d:6a:dd:83:d7:
e6:99:f9:a5:97:bc:50:b6:6e:b7:3f:f4:3c:a6:1c:
06:cf:0c:61:64:30:b4:e1:89:9c:a3:e5:9d:43:1d:
23:46:ea:fb:f9:28:09:50:d4:3f:32:e1:40:38:d7:
58:ed:1d:3a:20:72:fc:51:9d:3f:0b:16:be:a0:81:
c6:52:ff:fc:e2:4f:04:a0:64:cb:23:8d:16:7a:73:
b5:5b:d5:c2:88:6e:3a:e6:ba:97:8c:dd:ff:f2:ec:
9a:c5:ed:82:16:ac:7f:19:3f:3f:b3:4a:c3:87:bd:
22:c6:33:35:f0:44:d3:91:c6:7e:4e:b3:41:9a:0e:
94:e2:ca:a4:3f:28:56:e9:da:f2:05:f7:0c:f6:18:
0b:eb:da:21:aa:d3:1a:92:6d:58:bd:f5:6a:f7:54:
9f:57:f2:2a:b5:72:26:d5:c4:cd:dd:3f:8f:ad:c8:
7c:3c:f1:60:e1:44:87:f5:bc:f4:9b:f8:48:28:65:
64:3d:18:4d:a4:fc:2d:cd:86:71:62:47:42:c8:37:
2a:3a:f7:fa:e1:7a:4a:30:c2:95:0a:db:b8:cb:e7:
f3:d0:ce:50:b3:06:ac:a2:08:9f:30:71:5b:eb:8b:
e3:b8:be:37:ac:d0:09:4f:31:05:b6:57:e0:b1:b7:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:39:3E:09:30:86:B2:35:78:17:18:C4:1C:3A:0A:60:BB:F7:DF
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:96:3f:a5:12:dc:d0:85:25:63:24:b7:2a:74:88:7e:57:
e9:10:37:98:f4:4d:f6:af:a8:6d:a8:5b:42:0f:0f:f7:e3:b4:
61:1c:7a:1a:da:eb:ea:9e:ca:99:92:3f:eb:1e:88:fd:75:01:
2d:72:5c:8a:aa:d9:d7:3a:59:cd:47:f2:5b:f8:79:52:52:1f:
b7:fe:02:06:a7:cd:32:9d:68:a1:51:d9:75:48:83:44:c3:ec:
e4:fb:57:e1:74:6c:29:a4:95:8a:70:59:f7:3c:7c:84:00:d6:
6b:02:4c:dd:de:77:06:99:37:b0:8f:65:9d:b5:76:88:68:4e:
28:b1:7e:4d:c8:a7:85:35:f9:b0:14:29:14:38:6b:23:3a:ba:
50:21:8b:e3:57:9b:a7:75:93:9b:f4:ff:82:15:49:13:9e:d2:
af:42:24:e7:7f:8d:d8:8c:42:6c:d1:aa:e1:dd:0b:d1:d2:9f:
33:f3:95:ce:e0:71:ab:8c:3b:34:ae:49:6f:2f:f5:76:d5:0d:
ec:66:ce:4b:d3:82:c1:cc:4a:ee:b6:10:1e:25:3a:80:62:6e:
70:cb:8a:aa:cc:a9:05:7b:3f:63:3a:f5:cb:85:80:61:8b:cb:
25:1b:4b:11:06:ac:41:a3:6b:56:5e:d5:48:a7:70:b0:3e:30:
32:88:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:23 2025 by rpki-client