Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: J43Gb1Jv3tUsPTnmL0YBGwiEefOC/4f8ITNnDvESkOI=
Subject key identifier: 9C:61:15:B1:94:90:AA:A4:AA:73:7C:76:62:B4:0D:5D:20:71:F7:7A
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 0199FF225EEC4EA1ADDB755F164FD5212B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 08EF
Signing time: Mon 20 Oct 2025 01:01:06 +0000
Manifest this update: Mon 20 Oct 2025 01:01:06 +0000
Manifest next update: Tue 21 Oct 2025 01:01:06 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: hx6fyGrsi+WPeBiMSGllFPSP3A68+U/niSHhIhUf1Jw=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:5e:ec:4e:a1:ad:db:75:5f:16:4f:d5:21:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Oct 20 01:01:06 2025 GMT
Not After : Oct 21 01:01:06 2025 GMT
Subject: CN=9c6115b19490aaa4aa737c7662b40d5d2071f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:19:bc:e5:f3:e6:37:12:fc:fd:69:eb:e1:
20:bd:d5:ca:04:0a:8c:64:1c:d0:8e:a3:74:d5:2e:
5a:d3:6d:54:fa:b5:c6:29:aa:8f:79:bb:52:c1:69:
e9:9e:57:b6:a5:4b:3d:9b:72:7e:f1:07:1e:e2:00:
41:a4:21:cb:5c:0c:0f:82:28:7f:b3:a4:c8:0e:a5:
e3:b2:66:bd:3d:8d:89:c5:5a:28:be:59:54:1c:cb:
98:d3:a0:c3:40:16:57:d5:6a:f7:2b:f7:ee:c2:c2:
bb:ee:6f:c6:00:3f:1b:92:6e:46:65:d0:f5:3a:a2:
c1:5a:a0:18:95:d4:ab:95:91:76:63:5f:b2:37:75:
b6:82:93:8e:1b:ad:d0:1c:b1:fb:61:5f:c0:0a:20:
d5:f4:95:df:72:58:13:98:f1:34:57:d2:0e:f3:3f:
a5:5c:b9:ee:82:e1:b1:f0:0d:33:b1:c3:b6:b1:86:
be:2a:31:c7:0f:03:5f:93:9f:a1:a7:26:04:31:c5:
f8:c3:8d:dd:6b:bd:61:36:1f:c7:69:6b:06:f6:aa:
a8:3f:8d:1c:f1:85:55:a1:96:0b:18:5f:d9:36:47:
11:6d:27:37:24:16:f5:61:4c:90:ca:41:aa:44:24:
35:74:a8:6d:9d:97:69:c5:44:f6:68:80:80:98:a5:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:15:B1:94:90:AA:A4:AA:73:7C:76:62:B4:0D:5D:20:71:F7:7A
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:dd:f9:7f:f7:2b:7a:04:8e:00:76:ab:6d:ca:5b:b3:7d:
12:ce:d9:67:a7:55:62:d2:8f:d7:e5:a0:cd:0e:c3:65:c2:88:
55:b2:26:ed:94:cc:18:a4:44:35:f5:ad:e1:36:57:30:b7:ce:
d7:b1:63:35:8d:d7:b3:7e:a9:32:69:cd:9c:21:07:41:f5:dd:
3c:d1:07:4d:d1:9e:93:ea:46:71:4d:94:fe:19:89:03:ff:00:
98:b9:92:6f:d6:aa:d1:15:08:2f:0a:66:bf:c1:c6:c1:f6:23:
c6:58:aa:39:b5:aa:ee:bc:12:6b:3a:79:51:c0:24:36:c8:56:
cf:65:73:08:c3:bc:9d:58:ce:9a:f7:54:a2:37:dc:42:9e:67:
d7:a6:18:93:27:81:45:a9:5a:d4:15:aa:ab:b1:fb:f0:a8:9f:
c9:38:e8:c0:c6:68:70:c1:8d:19:ef:fa:6d:67:b8:c4:7a:8e:
51:de:76:de:26:23:52:d3:d0:38:e5:76:a7:8b:a0:cf:a0:44:
ee:47:db:1a:db:ed:ca:e3:e5:eb:d5:84:31:8f:1d:7c:e3:77:
4c:37:c5:2a:80:16:58:47:79:1f:cb:a2:f5:46:8b:40:9b:9f:
e6:7e:d1:15:e4:a8:1d:05:6a:05:88:6f:89:f8:cd:f4:c6:b6:
59:db:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:35 2025 by rpki-client