
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: eWalwLMAAoHealsm6KboXX8uMBtQ2nmxx9TlVTo/4so=
Subject key identifier: 86:B8:4D:DF:8F:06:C6:7A:3D:64:66:5A:83:F1:6E:38:B4:A8:A8:EC
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 0199FBEB0D931981833D783E2890D1C55E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 087D
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: LFARyzoD8knCy22dOlY7xyNDMV54D7tBj/H514UuKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:93:19:81:83:3d:78:3e:28:90:d1:c5:5e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=86b84ddf8f06c67a3d64665a83f16e38b4a8a8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:5d:bb:02:9c:af:af:ee:49:0c:91:a4:8d:
dc:5b:3c:ff:9a:51:b3:f0:9b:9d:b2:29:cc:4e:3a:
0f:b9:5d:c4:60:f2:95:97:41:d2:08:f9:91:b5:07:
dd:44:fd:4e:0e:43:ff:af:c1:7c:79:5f:23:b4:4a:
ce:17:6b:05:f7:cc:f7:a5:4d:b3:8a:4e:62:d5:04:
93:30:6c:70:01:3c:cc:6e:b9:2f:61:7f:30:4a:0c:
63:49:a0:62:35:63:8e:5a:0e:bd:79:9a:77:de:e3:
d6:87:e1:82:57:f9:b3:70:8a:11:f8:fe:d4:dc:46:
3f:10:35:2f:32:45:45:d5:dd:8a:41:23:e8:a5:98:
9e:9a:58:d1:12:96:18:28:c1:3f:ca:c1:5f:30:a8:
b6:92:6f:be:42:a6:c2:3b:61:56:d3:f4:8b:ff:bb:
19:da:47:18:3d:6a:a2:a8:48:2c:1b:f3:7e:1e:54:
c0:ba:e2:67:74:fb:b6:ba:e2:b9:cf:90:95:78:f4:
9b:38:52:e3:a5:61:bb:97:92:91:df:5c:56:01:08:
71:b0:68:63:74:b3:84:ac:9c:81:b0:24:77:44:1b:
49:d0:88:54:91:64:27:75:b3:aa:6e:af:1d:6a:16:
61:9b:c6:55:66:a9:43:21:eb:25:04:46:98:9e:93:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:4D:DF:8F:06:C6:7A:3D:64:66:5A:83:F1:6E:38:B4:A8:A8:EC
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a5:24:0b:bf:d9:d7:6d:ae:a1:e9:ab:d6:77:89:f9:15:c5:
db:68:81:57:45:85:ec:c2:e9:ac:cd:07:fd:b3:ff:dd:ea:fc:
10:29:40:f1:91:12:9f:5c:cb:88:40:b9:d2:a8:76:98:cf:c3:
08:e3:18:78:3a:1b:dd:18:f8:13:ea:2b:42:bb:ad:19:e5:8f:
d6:22:66:25:21:86:a3:3d:92:6a:b6:96:ad:2f:69:f4:67:28:
17:fc:7f:3a:8b:00:5d:63:52:48:b5:0a:aa:a6:98:3f:46:9e:
31:1c:11:ee:61:31:00:0b:86:e7:ae:86:82:a8:c2:a0:46:aa:
11:26:c2:79:eb:80:43:87:cc:b4:d6:18:ae:e1:22:6b:88:6d:
a5:25:39:c0:04:6f:7c:9f:5b:57:02:2f:11:39:7d:fe:43:27:
c5:15:a5:7d:52:c8:7e:da:cf:86:9e:3b:fd:09:30:81:73:7f:
63:7a:ad:20:b2:02:f6:bf:fe:50:01:56:25:55:3c:d2:06:ff:
29:44:d1:5c:57:0c:c3:c3:3d:fb:3b:0b:24:28:7a:04:2b:f1:
03:6e:08:c8:09:8c:e7:24:87:25:ee:15:14:24:7f:6d:cb:38:
f7:35:de:3a:b0:63:ca:67:a9:c9:e7:87:19:74:2f:0b:ca:a8:
30:f7:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:51 2025 by rpki-client