Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: 33VDcUmR7aMTzD60GoqMY5zxqYmTYGYemV86nk4waeA=
Subject key identifier: 88:93:CF:09:9E:51:52:38:37:BA:A0:8C:96:D1:87:5F:09:84:05:19
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0199FF59AAA0C520023AFC722D5D916EFAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0C21
Signing time: Mon 20 Oct 2025 02:01:30 +0000
Manifest this update: Mon 20 Oct 2025 02:01:30 +0000
Manifest next update: Tue 21 Oct 2025 02:01:30 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: lJ04jz1C0r3/CEiwyHTBmp5AA8bpnbY+MWRmFhoC3w0=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:aa:a0:c5:20:02:3a:fc:72:2d:5d:91:6e:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Oct 20 02:01:30 2025 GMT
Not After : Oct 21 02:01:30 2025 GMT
Subject: CN=8893cf099e51523837baa08c96d1875f09840519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:95:89:c5:ef:32:4f:02:e1:2d:ff:bc:f8:
44:e3:36:5c:3c:d8:39:ec:dd:00:e2:ce:b8:69:e2:
f0:72:36:9e:62:28:fb:bc:12:77:15:55:0a:27:6f:
2e:8c:64:2b:7a:37:c1:b8:28:6b:08:fb:a6:e7:c8:
11:8c:97:6d:5c:29:41:ff:1b:19:07:34:07:51:96:
45:1b:0b:39:0a:a8:31:31:90:73:d6:5b:ab:2a:d7:
e2:99:70:d5:d8:61:49:99:37:21:81:2b:b1:d5:27:
eb:c5:56:16:32:94:e2:f7:78:9a:d8:b2:55:e3:ec:
68:59:be:78:dc:18:61:31:01:71:0f:16:e2:e1:09:
65:c9:58:64:28:e4:0e:17:e6:93:d1:94:f9:f2:31:
0f:0a:62:0d:37:9a:48:b0:1a:a4:70:da:7d:35:7a:
5d:04:b4:a7:ad:90:b6:ee:01:7a:3c:ac:1b:94:5d:
cd:93:ba:c9:2f:ba:ee:67:c7:01:2f:14:76:ea:56:
26:6f:03:9b:80:b5:e6:f7:c3:35:d5:f6:25:7f:bc:
2d:86:2f:99:d5:cd:11:7f:6a:3f:5b:08:30:8b:27:
65:1e:db:8e:f9:3c:1e:b3:bf:a3:a3:ef:ae:11:24:
d0:db:b9:56:5a:99:80:1a:89:08:83:93:31:76:39:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:CF:09:9E:51:52:38:37:BA:A0:8C:96:D1:87:5F:09:84:05:19
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:0a:06:72:62:6b:f4:07:6e:87:e3:ee:a8:fd:87:bd:38:
28:3f:b3:e3:d6:a4:8d:4a:46:05:8c:99:d9:7a:ae:de:4b:9d:
01:a7:69:88:bb:ae:39:00:1b:fb:fd:63:8a:0e:b8:7b:f2:7d:
45:15:14:af:7f:2d:a6:e1:bc:b3:ca:0f:08:a2:48:e1:45:99:
97:76:40:52:bb:dc:32:3e:f5:d4:0a:74:6e:40:d5:a2:9b:f7:
3d:3b:0a:80:47:66:50:6d:90:98:f9:6a:88:69:3d:08:87:f1:
25:2b:9d:db:2c:bb:42:87:a2:59:a5:de:f0:d5:31:ce:22:14:
84:97:33:1c:44:a8:84:d6:5e:83:ed:a8:47:4f:57:23:0b:d7:
78:c4:b9:c1:22:a4:fc:0b:d3:ea:7b:62:ee:a9:5f:58:db:dc:
d5:03:5f:7d:76:2a:40:cb:6c:c5:7d:03:72:7c:f4:18:00:a3:
69:43:4b:3f:03:e2:df:4a:d6:56:00:e1:4b:eb:7b:b1:09:02:
9b:2e:6e:8a:ee:aa:72:e8:d5:a7:d7:41:12:7f:fb:46:d6:23:
33:89:e3:5b:98:27:61:ed:1e:11:75:9b:74:48:62:c6:6c:c0:
6a:f3:24:37:10:5a:01:26:8c:8a:7a:67:55:eb:e2:ea:bb:ab:
81:97:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client