Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: QsqYjq9LoNJBaDXsGdxOGXbqARgrQbek3FGfcq56kT0=
Subject key identifier: 4A:63:05:EB:A2:6A:AC:EE:C1:33:76:27:66:87:C2:B0:BE:69:CB:E8
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 0199FD6B22E832145AE020838C5966A6549A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0150
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: bf291pXP6Kufk6feuAFjJUNq7CkyvmzIPJcPwDf6ck8=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:22:e8:32:14:5a:e0:20:83:8c:59:66:a6:54:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=4a6305eba26aaceec13376276687c2b0be69cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:e2:f4:f5:00:89:e0:17:65:d0:28:99:42:
b1:92:d1:0f:18:e0:bd:23:27:9a:0a:58:4e:ff:e5:
7d:3b:e9:43:04:08:d5:bd:db:a4:3a:97:28:9c:9d:
ee:5a:75:2a:b1:25:0f:ea:77:79:cb:c7:52:70:0a:
b6:49:d1:56:87:0e:5d:12:ab:d1:c1:da:a4:c6:3a:
7c:9c:01:df:d0:d4:e5:23:33:04:08:1f:dd:78:37:
f4:91:a7:c3:bd:65:d4:69:62:02:ea:4b:55:fe:66:
05:ad:b1:48:5e:f1:ab:9f:2b:30:6b:a5:d6:b1:e1:
f8:d3:a3:0c:96:08:a5:82:a3:66:5e:39:9d:9d:3c:
8e:51:02:8f:03:47:a9:4d:ac:93:1f:65:fd:26:3b:
f5:fd:a9:99:0a:02:a9:39:d0:e2:d4:43:eb:1d:3f:
60:4d:65:bd:89:9c:e9:1a:5d:ac:1b:b8:63:c3:38:
0d:22:26:0c:b1:73:ae:26:ba:fe:fa:a6:a8:40:59:
96:b0:7f:9f:1e:1a:60:88:2a:53:7a:30:8c:2e:1d:
08:60:30:27:ec:03:6b:02:1d:c8:6e:c9:f8:de:6d:
17:bb:60:34:c9:76:1c:0e:f9:dd:15:76:53:22:91:
33:91:f0:83:d2:11:51:fd:23:1e:6a:e0:81:57:a1:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:05:EB:A2:6A:AC:EE:C1:33:76:27:66:87:C2:B0:BE:69:CB:E8
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:89:70:2f:de:61:ce:25:7f:4b:e3:93:34:54:4d:1f:d7:0b:
a4:8e:c6:1c:d7:dd:67:82:21:79:ce:04:4f:7e:0a:57:00:a6:
27:77:6c:01:6b:a5:c6:16:85:6c:4e:ea:4d:00:6d:8c:85:74:
ab:20:8e:39:ca:90:a1:7d:03:c8:9b:68:99:10:b6:b7:ea:11:
f0:91:eb:61:ee:68:82:de:9d:8e:4b:aa:68:58:d8:cc:29:44:
3b:98:21:01:aa:6c:a9:78:25:19:a8:f3:1d:26:df:6a:2c:82:
3b:37:c1:57:81:ef:8b:b5:1a:5f:8c:13:73:98:3f:38:78:63:
00:61:26:1a:9b:d0:2b:b4:16:16:d2:cd:28:48:0f:77:f1:8c:
ff:38:de:d2:2a:ee:e3:36:96:53:89:b9:cf:da:d5:bc:17:78:
1e:4b:60:db:d6:7d:81:97:cf:e9:65:d6:e6:2f:97:81:67:06:
b6:ad:ab:08:f1:62:df:e3:8c:68:b3:cc:34:30:e7:6f:31:e8:
5d:0b:d0:c2:8a:5f:98:c4:33:03:11:e1:a4:c9:6e:52:1b:d6:
a4:41:eb:39:86:9c:e0:48:4e:a1:b3:71:fa:65:47:c3:65:a0:
5e:2d:2e:76:2a:6a:5a:83:bc:12:a7:1d:bd:57:66:b8:8d:e6:
49:be:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:53 2025 by rpki-client