Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: YTLe5RAx+9w53nGNP8W3KyRuuLYtBrjZ8ICRe5/e7j4=
Subject key identifier: DE:3C:B0:99:4F:C8:DF:C9:7C:E0:E4:CC:79:87:1C:8A:11:B8:30:12
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 0199FB7CDA69912EB049C9F3773FE096B29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0E28
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: 4dAq7M28mHbuajGU4DXMurQbV4p1092wGtghlo8mpTk=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:da:69:91:2e:b0:49:c9:f3:77:3f:e0:96:b2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=de3cb0994fc8dfc97ce0e4cc79871c8a11b83012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:38:eb:02:82:3f:11:5e:dd:b4:f3:cf:57:
8c:e5:29:1d:b7:b9:b7:be:0d:b6:83:3d:b9:9a:e7:
2a:27:37:c5:e6:b4:86:c8:2a:65:de:84:33:a2:63:
85:67:78:12:d4:ac:a0:d2:00:0a:fe:28:15:66:f2:
8b:68:70:5b:49:58:e8:50:31:f9:80:32:0b:61:23:
c8:79:16:36:91:0c:2e:eb:a5:ba:89:c5:a1:cb:2c:
76:fd:5f:f9:df:cf:81:06:32:f8:e4:96:2a:70:85:
2d:c2:bd:d8:43:fd:73:fd:99:c6:fc:1b:13:bd:4e:
aa:bd:e0:bc:2e:5a:7b:6a:66:34:ca:35:cb:7e:06:
a1:c1:6b:dd:be:d9:1e:53:1b:71:d3:0e:1f:e2:96:
99:15:bc:8c:18:d5:46:52:e3:62:98:f5:35:9e:73:
59:b0:36:92:4c:fd:cb:8c:3b:3d:5c:1c:60:96:52:
b1:f1:f0:28:c5:12:ba:85:fc:9a:eb:a9:5f:98:33:
fd:c2:93:0b:17:b8:8f:1f:4c:f5:e3:e5:0c:c6:01:
3b:b7:4e:52:45:5c:a9:01:ab:fc:e2:3d:ee:11:06:
9d:06:55:b6:a8:21:d2:b3:36:c6:2f:42:2b:67:2d:
34:00:b0:3a:33:a3:5c:60:3a:35:a8:83:3b:87:4a:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:B0:99:4F:C8:DF:C9:7C:E0:E4:CC:79:87:1C:8A:11:B8:30:12
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e1:5f:23:54:eb:d0:7f:56:87:9c:56:c7:45:10:4c:b3:f1:
05:5f:8d:06:29:3f:b3:ea:e2:c5:dd:5c:4d:cf:52:e6:80:5d:
2b:05:e2:20:68:88:05:d8:62:66:9c:92:70:f8:33:75:7a:31:
96:fc:6e:84:a1:8a:21:51:7d:1b:cb:bf:8e:12:e9:2a:d7:00:
4c:7d:25:d9:3f:e8:bf:ba:bf:50:1c:18:0c:d6:cf:39:0c:d0:
5d:41:f3:cf:2f:23:91:ef:8b:b6:82:50:8c:b3:5a:df:9d:8d:
49:c9:58:e9:ac:b8:9a:74:7e:84:99:5c:9d:91:19:77:66:b9:
4e:e4:cf:f6:1a:5d:61:40:5f:e7:69:6e:9b:eb:cb:5c:c7:cb:
2a:06:bf:d6:a9:f2:b9:2d:54:c9:06:91:26:ad:8c:cd:16:94:
74:a0:b0:ac:77:cd:37:cb:66:59:57:1f:d5:f1:b0:a8:51:3c:
7a:32:e3:01:44:17:8a:c0:0b:6d:77:9b:8c:29:88:db:ea:2c:
5e:1b:63:57:b2:74:4e:06:31:77:5b:77:22:d9:65:67:0a:3d:
bd:31:89:f4:3a:57:3c:1d:70:92:c5:6a:5a:89:b2:83:81:8d:
87:18:0f:65:1a:cb:25:9e:68:db:66:73:e9:89:54:f1:cd:b1:
48:49:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:02 2025 by rpki-client