Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: e7epsFQMP8pNk/uwYwRAfC1Dp7I2Yn4LeRE/SqGmt4c=
Subject key identifier: 83:7A:D8:B9:6E:2C:91:B1:E8:94:41:B4:65:C9:B9:BE:68:2E:2E:4B
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0199FB0EF5247EE842B3E321977D50DEBFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0D6F
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: FlURRDuRF1OUFXYwjg/KCFFYALKilw146GdA1Zo1kPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f5:24:7e:e8:42:b3:e3:21:97:7d:50:de:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=837ad8b96e2c91b1e89441b465c9b9be682e2e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:f8:5b:7f:c9:c3:10:5c:1c:4a:e4:56:fc:
9c:b6:2e:f8:f9:5b:b3:47:7a:35:1f:bc:e2:37:8f:
1b:ac:1e:d3:28:65:db:bc:93:14:73:17:f6:4e:37:
da:bd:49:d4:37:31:6c:19:bc:c3:28:c3:fc:db:54:
cf:2a:ab:29:28:85:24:a1:9a:09:80:4c:07:a4:29:
c5:fa:71:5a:b0:6d:76:58:a7:12:cf:3b:d0:9b:de:
43:11:61:f9:95:54:4b:b0:f0:44:a3:ab:aa:0c:cd:
09:22:36:6b:78:74:7a:c4:a4:cd:dd:4e:cd:cc:a0:
06:75:45:d8:65:c1:9e:38:6d:09:13:e4:c2:5a:29:
e7:99:56:20:79:33:27:0c:ea:46:74:b8:03:1e:13:
78:a5:98:51:ad:03:de:80:c8:32:a9:8b:9c:94:14:
22:29:d7:d2:00:5f:6d:00:da:09:a6:03:65:55:71:
50:e1:3b:f3:69:6c:d6:84:ee:71:bd:91:55:7f:7d:
40:84:3c:ff:76:26:35:a9:05:b3:a3:e0:a9:7b:90:
74:a5:5d:13:93:03:74:d8:3b:95:a8:bb:4e:93:64:
03:0a:32:9f:91:3e:a4:29:cb:3e:24:88:0d:f4:cb:
04:05:05:a2:93:73:c4:f2:d1:14:e9:06:0b:0b:f1:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:D8:B9:6E:2C:91:B1:E8:94:41:B4:65:C9:B9:BE:68:2E:2E:4B
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f0:aa:88:9f:b2:16:c1:f8:01:7e:c3:c1:66:0e:dc:a3:2f:
58:dd:e5:ac:42:b1:d7:74:a4:92:e7:0c:82:e8:56:cb:bc:6b:
81:44:92:43:48:6d:3a:14:31:bd:22:f8:4c:67:ad:2a:fe:00:
0f:4d:e4:ae:4a:f0:76:b0:a2:2b:8f:0a:95:19:17:ce:c0:ae:
c7:c4:a7:9d:2f:c9:e1:03:01:af:16:31:26:9f:35:53:d2:01:
36:c9:d0:11:8b:74:b4:f2:5e:27:f9:42:90:f6:81:4c:5b:b1:
b2:d2:78:2b:6f:f7:33:7d:db:9e:36:72:80:72:67:6e:d9:68:
10:db:ce:93:03:4a:36:6f:0c:22:5e:a9:d7:81:89:5c:53:ac:
08:fe:68:62:4c:4d:a9:83:64:1d:9e:14:fa:30:b3:26:8e:27:
9a:a7:c8:eb:c4:19:0c:8d:9b:06:74:75:18:3a:22:02:10:fe:
30:cd:04:35:ae:1d:33:83:52:f8:58:62:35:43:7c:8c:4e:4d:
bf:f5:71:a2:d0:c5:5e:18:5f:4c:e1:d2:07:96:be:57:92:0e:
30:34:d1:75:1a:df:b9:87:dc:94:04:23:75:b6:b5:d3:f4:5c:
3d:18:d3:86:7c:5a:8f:f0:62:5c:4d:2e:bb:a9:29:ac:b0:98:
ff:2f:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:08 2025 by rpki-client