Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: zcRa7d6myKuUxBz15PaN9xAGedD2zrV1ok02wmSxH+8=
Subject key identifier: 70:91:C0:2C:FE:FA:EC:88:84:C1:0C:A4:C9:44:2D:9E:23:32:01:86
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 0199FC5865CCEFF1F3EAEE95E6DAA011DBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: igwD4jmrWJ03VXSPCKZB4W2i1g52esCcQ6H/cQpVc8Y=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:cc:ef:f1:f3:ea:ee:95:e6:da:a0:11:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=7091c02cfefaec8884c10ca4c9442d9e23320186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:62:60:2b:ca:db:f0:c2:04:0a:33:45:b6:
77:c4:6f:4c:30:51:9b:58:5f:2e:ca:83:4f:bd:e5:
b6:62:50:31:fb:7a:81:95:ea:b9:f5:33:41:3b:a5:
9f:25:13:93:66:d4:f8:d5:92:e5:fc:0f:43:98:a4:
3c:e6:aa:b4:93:2e:25:04:9a:76:d6:8d:ab:0d:63:
fa:3a:8f:66:cd:40:7a:93:03:fe:af:a3:8b:6e:d6:
f9:0a:2b:40:8f:6f:99:d3:76:4d:52:e6:c9:50:99:
35:e8:fd:20:e8:4b:10:ef:ec:d0:ba:88:8b:55:f6:
2d:06:97:e6:9e:e0:13:a4:af:98:9a:c7:34:c2:2f:
17:7f:e0:76:a7:30:44:15:43:aa:f3:34:81:48:69:
26:67:8e:47:fb:fe:41:3f:c1:c6:ea:ea:7b:0c:74:
2e:a4:bb:54:1c:35:11:4d:57:71:a7:3f:63:d4:4a:
b7:b5:7c:c0:69:56:9c:7f:7b:4f:e8:f9:cc:fd:ac:
09:7b:63:2a:08:31:25:4c:1b:b7:f9:aa:1a:5e:50:
2d:79:c7:5d:84:b3:02:30:64:a3:b0:32:41:f7:61:
df:77:40:d4:7b:1d:c8:a7:6c:b2:47:15:26:10:b2:
1d:d4:65:77:33:97:ca:e1:25:6c:07:f4:26:15:58:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:C0:2C:FE:FA:EC:88:84:C1:0C:A4:C9:44:2D:9E:23:32:01:86
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d1:fa:ac:c9:6d:e3:f6:ea:29:57:11:57:a8:f9:b5:85:f2:
c1:5b:13:c6:68:d4:29:9b:06:f8:46:03:f9:5a:49:eb:ce:6e:
34:10:21:c8:0c:bd:a8:2b:75:0e:8f:91:98:ae:4c:76:4e:fa:
47:63:4e:d9:f9:a9:25:96:54:fd:f0:a3:fa:0f:7d:b8:d6:bb:
3f:52:3d:2c:c0:6a:f2:95:2e:6a:97:18:99:19:08:12:05:80:
df:bf:94:df:61:69:3f:8a:62:a0:37:c5:5c:3c:8a:fd:a1:39:
a0:b7:ae:a0:1a:0b:6a:90:55:55:e2:69:bd:73:a3:79:ff:de:
df:5c:d2:bf:fb:d4:ea:5e:7f:85:e1:34:a9:7c:ac:f0:38:f2:
31:aa:af:34:b6:ad:6c:7a:c6:50:3a:d2:f4:89:3a:0c:55:0d:
15:87:d1:cb:53:d0:5a:98:28:a4:91:e2:c3:7e:1e:08:03:12:
9e:cc:85:4f:e7:11:96:ba:d9:ce:2b:21:65:55:b4:bf:0e:0e:
14:c4:50:89:9b:ca:53:ae:5e:63:69:62:ee:4e:e0:d3:69:09:
e5:99:b2:8a:50:84:cc:85:4a:08:b4:50:cc:9f:b0:73:6a:b0:
99:62:2e:39:a1:dc:ef:c9:da:c1:5a:8a:56:a0:0a:90:39:80:
24:97:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:19 2025 by rpki-client