Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: ck/UsyOuAonJZWvBEGPBTnY6+fvo58DehRqJUgGQZyY=
Subject key identifier: 11:13:52:BC:D3:AD:48:1C:FD:20:F0:EA:8D:03:8E:F8:97:F6:8C:25
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0199FCFD2595EE6A26CB101CAE0562F8FEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: BoLWBoYQjqWnvXzz94/i2RAchSRadBhlnWtRvmla0P4=)
2: tb7zy4gQAH_RQZ4Nz-3NFx59Mbo.roa (hash: oJpg/mpoL0grHs9Xu1Kgy7pPSav+AYmr/wpKbCpQ/O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:25:95:ee:6a:26:cb:10:1c:ae:05:62:f8:fe:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=111352bcd3ad481cfd20f0ea8d038ef897f68c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:73:54:21:85:8b:24:7f:ef:7f:04:2d:7d:
b5:f4:88:8e:b1:5d:30:79:aa:26:59:a0:d4:34:19:
50:00:35:47:15:a9:d4:35:99:aa:83:98:f6:d9:8a:
0a:24:6b:ec:e6:1d:8c:b6:f2:7b:e3:22:bc:46:c9:
3f:8e:95:62:5a:75:6d:c0:6d:64:e1:ea:27:a3:4d:
a2:ec:95:cc:68:26:61:17:dd:27:e5:90:8b:1d:6f:
c9:b4:06:2d:d8:54:9f:42:0b:95:ce:87:dc:1d:ca:
69:b3:c4:dd:aa:f0:d8:ce:d0:6e:5d:be:2e:e0:46:
1f:c8:12:36:82:a9:83:61:50:97:1d:f6:0b:05:09:
97:4f:33:ed:8b:cd:ca:e8:bf:2d:9e:f2:d8:ab:f8:
ea:3c:73:ad:c5:6b:52:35:74:58:6e:20:3b:8a:d2:
cb:34:cc:af:59:3c:91:e9:bd:37:be:c1:96:88:26:
ed:c0:8b:1a:3a:26:e6:1f:7d:30:59:b1:27:ad:4d:
da:ea:2d:be:a2:00:fa:78:c9:42:41:94:bf:43:e1:
c4:27:66:6c:de:54:6c:19:21:d9:39:ca:bf:49:4e:
c8:03:86:09:01:6e:08:96:fc:f5:be:1f:db:f9:a6:
0a:5a:1f:25:a1:d0:a2:6c:b4:c1:5e:a0:54:30:03:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:52:BC:D3:AD:48:1C:FD:20:F0:EA:8D:03:8E:F8:97:F6:8C:25
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:5f:93:a8:48:f0:66:0e:7a:95:c2:8f:45:ad:ba:26:5a:
6b:bb:d6:31:57:20:d3:8b:ea:a8:d1:c0:1d:d3:52:d8:ed:8a:
05:e8:75:65:db:20:c3:c6:af:05:cc:1a:34:16:51:06:d1:23:
44:9b:c3:82:be:d1:9e:42:ee:98:5a:33:b7:ba:db:27:ac:e0:
39:e2:0a:ce:f5:1b:7a:db:ea:8e:b2:25:bb:b3:df:d0:0b:5c:
d5:50:6d:0c:86:2d:6e:e4:78:fe:a9:04:3d:b9:c5:be:43:e1:
bc:61:ce:23:d5:af:21:f5:99:a2:91:00:86:5b:52:73:87:c9:
54:fa:5c:8c:a1:69:6b:71:13:4b:d0:e0:6e:36:e5:e4:5a:a2:
8e:c9:f3:17:0a:b6:5e:d1:03:1f:36:68:ed:c6:b8:a0:c0:20:
b6:2f:cb:ea:1b:d3:81:af:b8:76:06:c4:e1:8d:36:6a:a5:48:
e6:f7:0b:62:23:f2:c5:ad:32:e5:ca:00:8d:77:11:4e:b2:8e:
82:78:be:5b:a3:c2:56:fe:f9:f7:ea:8c:bf:e4:0e:87:68:d3:
c2:66:ca:1d:78:58:39:7c:3c:c9:f0:55:7e:bf:2c:78:5f:57:
63:8a:ef:f7:b5:d7:a9:02:78:7d:43:9c:d7:ef:ce:43:bc:24:
fa:95:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:37 2025 by rpki-client