Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: TublH9Idt7+T0fvImBohAL032Vnwo5Uh/YLxwxYvWw0=
Subject key identifier: 3F:DE:5B:4D:B9:87:76:16:AB:59:22:3E:48:EC:85:E7:14:B2:A5:CE
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 0199FF22B5E9D2FE6C1108672E59281BE221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 088B
Signing time: Mon 20 Oct 2025 01:01:28 +0000
Manifest this update: Mon 20 Oct 2025 01:01:28 +0000
Manifest next update: Tue 21 Oct 2025 01:01:28 +0000
Files and hashes: 1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: IeS2pO6wzd1OYl9CpOS7sNd+JgFh1G0dosMF2MbSHeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b5:e9:d2:fe:6c:11:08:67:2e:59:28:1b:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Oct 20 01:01:28 2025 GMT
Not After : Oct 21 01:01:28 2025 GMT
Subject: CN=3fde5b4db9877616ab59223e48ec85e714b2a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:c1:6f:01:07:77:6f:60:82:5b:eb:2c:e0:
5e:a9:fe:a4:ca:37:49:e1:57:ee:ff:ad:da:62:4b:
4a:c0:b6:3e:6e:65:02:cb:ed:ab:90:cf:e8:c7:39:
19:d1:f8:dc:f9:73:44:5c:52:7e:c9:98:31:f0:d8:
51:0a:39:ed:21:cf:fd:e3:62:64:e7:81:3d:c3:a0:
c1:dc:f7:1e:73:27:ec:59:be:5a:23:f9:c2:f4:ae:
68:1a:31:55:c5:37:67:54:59:91:f5:c0:bd:d4:bd:
65:9e:66:ee:e4:a4:88:91:97:50:3a:c3:e5:eb:c8:
be:be:e5:ab:6e:37:66:9a:ab:f2:d7:53:2c:ae:d3:
a9:70:84:14:7c:ff:6c:20:e6:7a:18:b6:2b:4e:dd:
01:f2:22:7d:65:46:2f:5a:e8:a8:cf:7d:47:8a:08:
cb:a5:25:93:bc:28:d9:95:7a:fb:0b:85:16:bf:e7:
8d:6d:4e:a7:a6:99:89:a0:18:00:96:e9:91:af:be:
a4:2b:52:c6:f0:67:00:88:57:0e:c8:65:c3:46:52:
8a:99:81:e1:8a:9d:35:b4:02:8d:c3:0e:0f:93:09:
8d:51:f6:48:a4:13:5c:ec:81:02:f8:6b:34:90:55:
98:96:2d:5f:4d:64:02:d9:fb:dc:f1:0f:3c:ec:22:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:5B:4D:B9:87:76:16:AB:59:22:3E:48:EC:85:E7:14:B2:A5:CE
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:58:c4:60:54:6a:89:55:9d:2f:6a:15:a0:84:cf:b1:3e:
13:54:f4:c3:d1:73:20:87:90:32:e7:e8:7e:07:68:03:c6:40:
06:4d:69:86:ba:3c:63:84:eb:e4:92:f9:0f:0c:86:b2:ed:65:
0a:c5:bc:74:1d:1b:01:24:7a:47:ec:e6:ec:44:00:d2:c7:34:
b9:24:ef:42:36:31:03:c3:81:6f:81:09:f2:1d:e7:ef:ce:24:
99:9d:2d:d5:72:7a:af:c9:30:05:fe:e6:55:f4:db:48:9e:dc:
14:89:3a:ca:e8:38:48:d9:a6:a7:ff:ac:76:4e:b9:01:19:b6:
52:5f:1c:86:f6:8d:b7:69:b6:f1:64:2a:f0:65:7e:6d:4d:a1:
05:62:44:e8:14:57:bb:73:9f:c1:5a:b3:d4:24:0f:05:a2:4d:
1a:45:65:ec:d8:c4:69:d9:41:eb:64:57:db:c0:fd:1b:90:75:
22:ea:ba:aa:6e:cf:97:dd:43:74:c0:13:19:25:cc:6c:a4:56:
1d:63:4b:ae:f7:7a:b6:3b:bc:54:c8:e5:d7:d8:cb:ce:e5:0d:
80:33:ea:27:e0:9d:79:96:57:62:43:02:e6:1c:f3:83:a7:05:
b8:35:86:7f:6a:b3:07:fa:95:3e:4a:29:b2:e7:00:31:b1:5b:
95:b0:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:03 2025 by rpki-client