Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: O/K+IOZXxYcLE4UD5PNRnGjIsu3sV9LsIcz5UcVGe2I=
Subject key identifier: 5F:65:4D:1D:21:38:40:8F:02:3E:89:9A:B8:88:CA:30:E1:FC:F0:C6
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0199FCFD85F8902CD7A8ACEC67A314E65676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: n8FdV6CjqAQt4NR9piAnmFqG2WZpnuTsmNW8bQTHI9M=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:85:f8:90:2c:d7:a8:ac:ec:67:a3:14:e6:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=5f654d1d2138408f023e899ab888ca30e1fcf0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:0e:a9:fe:cb:1f:7b:65:20:3e:11:7e:3e:
e3:70:bd:f1:51:df:33:dd:7e:0e:01:07:c7:63:24:
7c:3e:55:ec:22:fe:82:86:16:c6:b6:cc:fd:a8:5e:
d6:4b:07:98:ac:ca:80:c5:1b:d4:1a:0e:a8:d7:c1:
9f:f8:15:37:aa:2c:99:bd:8f:7b:0d:db:66:88:ff:
41:e0:d4:d3:19:c7:80:bd:1e:90:cb:e8:6a:fc:ff:
56:95:0d:49:5c:df:9f:a5:96:df:9a:ed:f9:48:86:
ec:8a:61:18:b5:3f:b4:2c:45:cc:75:85:8b:6b:42:
9f:16:e0:4e:5a:37:78:ed:62:6e:29:e8:2e:ca:ed:
11:9f:15:e0:99:f5:8f:f2:e1:4c:fb:2c:7c:b5:a8:
25:e7:46:f7:d2:26:78:30:77:7f:d8:e2:fa:82:8f:
98:39:57:77:04:55:93:5f:27:34:0c:8b:ec:a0:95:
8c:a6:cf:81:8a:24:22:a1:c7:fc:55:3f:b8:1a:41:
a9:22:ed:eb:40:91:0a:db:90:3a:b9:4c:54:5f:36:
0b:60:0b:9a:4e:78:00:32:ae:87:81:cf:c3:d4:e2:
c8:be:34:71:ea:31:1b:31:74:78:14:6e:f9:f1:4e:
76:fa:d1:3c:58:3c:cc:29:38:e8:ef:a6:9b:0c:36:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:4D:1D:21:38:40:8F:02:3E:89:9A:B8:88:CA:30:E1:FC:F0:C6
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:a7:da:62:9a:4b:e8:a1:cc:1c:4f:70:6d:92:20:14:16:
86:b1:a8:60:13:5d:a9:f3:98:58:2c:e2:84:d6:d7:74:d5:90:
16:96:ee:9f:36:37:59:3d:80:e9:48:0a:b7:b3:4a:79:8c:60:
a4:79:c1:f0:4e:91:3a:69:88:24:64:80:ab:8f:e1:ac:f1:13:
ec:32:7b:66:94:4a:c7:e6:57:ad:c7:7d:52:48:53:9a:b7:35:
9e:9b:05:04:6c:f2:af:d5:d3:e2:bf:de:b8:15:29:78:f8:8e:
15:64:be:ad:7d:3c:4b:df:c7:46:39:a8:03:f7:71:76:5a:f8:
17:02:7f:2e:c6:68:4e:3e:c1:62:6c:f2:61:74:4e:e2:49:77:
bc:ca:28:8a:91:72:d8:13:f1:1b:16:d6:7f:04:d6:fd:bb:e9:
cc:82:ad:24:7c:b6:6a:ff:b6:cc:25:09:0d:44:b2:19:48:e2:
dd:d0:2e:5e:f7:22:dd:b1:5d:bd:a8:04:2e:4c:9d:7f:bc:15:
a5:ec:7d:e5:d4:ba:a3:4f:5a:1c:99:05:5d:bb:ad:6b:eb:2d:
e5:60:ab:26:14:4f:09:9b:33:7c:12:d2:63:1c:43:89:b9:52:
fe:aa:3f:37:58:4f:e3:1a:a3:f8:c7:15:64:54:b9:8a:c4:34:
75:01:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:42 2025 by rpki-client