Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: zAz1QcnnyY5+OxJpustPIriVVmX3xHrsyjqyKX8JJ1o=
Subject key identifier: 5F:D6:59:46:D6:2A:0A:B3:83:55:7E:3A:EC:C8:E4:3C:CB:2F:B3:0A
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 0199FD3435927AFB30DD60F6663BBE6943D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: S7bJbe/JoHJiunpH83g9NWHIkrtAcvyV7fhWk0Vh0T8=)
2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:92:7a:fb:30:dd:60:f6:66:3b:be:69:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=5fd65946d62a0ab383557e3aecc8e43ccb2fb30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:10:23:b0:d9:a3:67:6c:2a:cb:7f:c4:db:
9a:13:4e:4b:de:db:b9:28:a3:09:2f:a4:18:56:65:
1c:bf:d4:62:0b:1f:b2:41:95:f4:fd:3c:f5:f5:71:
ba:8b:89:2d:83:0f:03:fc:b7:c8:a5:85:b7:d5:c8:
a8:fc:82:d1:b2:2c:8e:cd:84:ad:2a:4d:bf:b3:d7:
27:5c:fa:a9:ba:82:f2:16:e2:06:5d:57:87:5c:4d:
74:e4:b1:05:23:24:63:54:0b:f9:c0:38:2d:a3:5e:
17:b0:2c:64:13:07:c0:bf:13:98:13:05:07:e8:8f:
e7:50:50:7b:58:fc:19:f5:a8:0a:d7:2a:6f:7a:1a:
30:c4:0c:dd:7b:93:9e:c8:fe:7c:cd:b5:e5:5a:d6:
77:40:da:e3:8e:b9:dc:c1:39:d0:98:6d:f3:d3:6f:
ba:a1:4e:41:78:91:1f:9b:52:64:ef:7d:ff:d3:fc:
00:d9:3b:8c:87:f0:4c:ca:f6:70:3c:2d:ec:10:4d:
88:13:82:5e:bb:d7:18:5a:94:6b:95:9c:e4:d5:4a:
52:bd:ce:2a:3e:eb:53:7b:5e:ce:ed:e1:d3:6e:f5:
3a:c5:a1:96:cd:5d:41:c2:27:fc:67:73:50:ff:a4:
de:fb:f0:ec:bb:1b:31:b3:f1:dd:23:5c:d4:60:5a:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:59:46:D6:2A:0A:B3:83:55:7E:3A:EC:C8:E4:3C:CB:2F:B3:0A
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:c5:bf:c6:a0:e2:00:89:3a:00:eb:2a:24:e4:67:fc:6a:
da:99:99:3b:7f:17:b7:1a:47:a3:7b:d9:8f:57:a3:54:e3:00:
1a:0e:49:f2:84:58:71:ba:6b:0d:34:b8:33:af:7e:a8:82:21:
aa:6f:a5:73:da:ad:f7:68:91:df:2f:6f:9d:bc:c8:6d:2f:28:
91:5d:df:44:c1:cb:2d:4c:16:ae:90:05:5f:ac:7d:58:73:10:
f1:af:12:a9:10:50:06:86:8c:3c:36:f2:f0:94:02:4f:5e:31:
cb:5e:d4:8d:83:6d:5a:09:c1:8a:62:e2:52:60:31:30:45:d6:
fb:a1:04:3c:a1:bb:7c:24:4f:ad:15:34:68:82:3e:cb:6e:7c:
e0:d0:ce:e2:db:5f:0e:65:8a:7c:e2:c9:c5:1f:30:f9:2a:ac:
f1:d8:cc:0e:3e:7c:82:53:be:48:38:4e:11:69:5c:0b:35:fa:
3e:cd:f9:f3:d2:e4:86:87:fa:f5:91:03:6a:51:9d:87:eb:e6:
78:c5:1c:57:18:31:41:50:9a:a5:d8:2d:ab:57:a9:1e:56:04:
ff:64:af:ab:4c:ae:00:ef:4f:d5:22:bd:6c:12:f3:be:d1:00:
c4:bf:90:d5:1f:a5:1b:31:46:91:97:3f:55:27:c4:c5:fd:76:
b8:cc:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:57 2025 by rpki-client