Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: FfcHpOATkN1T6ie5RX+Q2D0R39g1pln/PKMBGzJsXVI=
Subject key identifier: 6F:90:01:8F:F1:B7:0C:7D:4E:5E:31:66:E7:44:EF:C6:D1:5E:6A:1E
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 0199FBEBE9A8F1E3AB02A453F0645DBE29B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: 3jgZxNaRanzOMT9uC57QsSKxBLOp3cXVq5X4rAYIxuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e9:a8:f1:e3:ab:02:a4:53:f0:64:5d:be:29:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=6f90018ff1b70c7d4e5e3166e744efc6d15e6a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:f8:a1:8a:ac:c7:24:e6:60:e2:cb:dc:60:
08:6c:78:9d:7c:c2:a7:4d:ea:bb:59:cd:44:3b:85:
93:0a:aa:1b:8f:91:dd:b5:a4:cb:be:68:17:86:1c:
94:90:22:e5:cf:e7:46:a4:ac:2b:30:7e:b4:3d:d7:
51:0a:da:8d:2d:e9:23:de:9a:19:fe:69:08:d6:b9:
fe:fe:5d:5e:1f:07:c6:d5:93:d2:34:cb:63:07:9a:
51:4d:b5:59:28:bd:0d:17:ba:6c:fe:52:c0:bf:68:
bd:c7:5c:c7:71:19:0d:ef:48:c8:ba:7f:59:70:57:
de:a7:e3:f5:3e:6b:fb:ef:3f:99:ff:ac:ba:5c:87:
89:de:f4:00:41:5f:1d:ed:ea:dd:7f:cb:41:c5:d1:
b9:7e:7d:1e:c2:4e:2e:f9:da:e6:72:b6:67:ab:8c:
44:16:83:98:e1:aa:56:e4:ff:c0:e7:d9:27:40:fa:
bb:77:b0:1f:73:69:8d:80:a7:c5:e2:f9:a1:26:bb:
e3:0d:a1:d4:12:6d:3b:fa:1e:ec:7a:09:74:e5:9e:
02:74:80:ee:82:9d:a6:3f:fc:81:99:6e:7a:9b:f3:
37:58:45:27:80:87:bc:75:e5:13:48:cf:3e:09:b9:
74:80:0c:74:09:40:df:43:0a:8d:a0:54:d7:8b:09:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:01:8F:F1:B7:0C:7D:4E:5E:31:66:E7:44:EF:C6:D1:5E:6A:1E
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7d:08:03:36:a2:8b:5b:09:5a:3c:81:5f:7b:15:aa:b6:af:
97:c6:23:11:7d:c0:a1:97:17:d1:2f:79:6e:98:48:49:e4:47:
b9:a4:a4:3f:c9:57:fc:97:f8:88:81:2d:75:c2:7a:01:26:1a:
0d:a1:87:d5:b9:63:ba:4b:47:93:c4:bc:e7:4b:3f:82:b1:a8:
50:c7:03:36:d4:b3:3e:a1:ce:6e:ba:3e:0e:16:76:8d:9c:a6:
4a:72:d1:2e:26:44:58:07:fc:a9:08:66:09:a2:5a:33:b8:59:
e0:83:93:1b:75:f8:72:c5:58:8d:56:7e:e6:e0:7a:33:05:05:
04:04:89:b6:08:d9:13:84:65:78:c4:ff:00:3f:fa:94:9e:9d:
47:89:0f:cc:2d:81:6a:27:4f:b5:f3:70:f8:54:fb:3f:93:c7:
ff:5c:7f:74:6b:b6:85:cd:e1:57:d6:2a:05:7d:4f:95:49:d7:
0e:fc:fe:f7:c5:c1:ca:e2:6e:57:75:8c:56:3f:21:16:a1:d4:
17:77:cf:f8:41:b9:95:55:c6:3f:a5:48:9a:95:49:21:09:c3:
c9:74:44:ec:b7:60:70:2d:ad:91:e1:84:65:db:df:c5:1c:af:
c4:23:7d:2c:39:47:9c:75:44:19:b6:fa:1b:47:af:e2:2f:e4:
36:fe:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:33 2025 by rpki-client