Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: qy6Cf/co9W++13fcH1hXH5jKoKK9nMmwbIspke2rfa8=
Subject key identifier: E6:9F:88:D1:BE:5D:6D:CD:A4:B4:8F:6E:14:22:3A:6A:92:92:F5:CC
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 0199FD34210D0A0691F19000F7C9757C88AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: 0R8C43QmZnx9fNkfYf7zU+TsG4Fd/erkTFoNj5VZjyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:0d:0a:06:91:f1:90:00:f7:c9:75:7c:88:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=e69f88d1be5d6dcda4b48f6e14223a6a9292f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:54:fa:b5:f5:1c:d4:f6:7c:6c:cb:ba:1a:
60:e6:b1:9f:44:68:4b:45:b4:11:38:32:0b:f7:8c:
13:43:7c:7b:ed:12:b0:7f:f0:b5:4a:87:15:14:a5:
90:bc:d1:8e:c8:57:3a:e1:60:72:a0:0c:db:23:47:
55:ef:40:cb:3f:d6:4d:01:64:c4:32:59:20:3b:40:
cd:8e:e4:11:0a:4a:2c:6a:dd:44:7c:06:51:66:b8:
2f:cc:41:03:10:54:58:e0:fd:70:c2:e5:0c:38:73:
4d:d2:3b:80:2b:ec:e1:a3:07:04:e7:4b:eb:5a:48:
bd:6b:be:a5:f9:2c:3b:22:33:2a:c7:91:03:c3:f4:
87:c9:19:8c:a3:bf:40:22:0c:48:57:ee:1d:c3:b4:
7f:cc:e0:18:32:6c:ff:b1:43:25:f3:14:58:25:c3:
3b:e9:07:dc:1b:2a:a8:c5:72:da:a7:b5:0a:ad:ba:
e8:b8:21:fa:09:6f:73:e3:50:dd:de:e3:94:a1:2d:
01:20:ee:ae:ba:ec:9b:d4:21:61:b5:d7:d7:26:07:
bc:26:7f:73:7a:e2:29:66:43:50:ab:cb:9f:06:d0:
c8:15:73:2f:03:0a:ca:27:b7:2f:ac:be:e6:55:40:
63:3c:71:fd:80:a9:0a:3b:e9:3c:ad:9a:26:ee:48:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:88:D1:BE:5D:6D:CD:A4:B4:8F:6E:14:22:3A:6A:92:92:F5:CC
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b4:d9:f0:c2:a4:2d:21:45:f2:60:d7:42:96:5c:32:57:bd:
62:86:48:b1:24:11:e6:83:c7:98:09:01:05:04:bd:9d:6c:cd:
44:08:b0:63:4f:bc:e1:f1:2c:fe:dc:e3:c3:4c:12:00:ba:b3:
de:04:ae:39:ba:7d:fc:40:f9:72:7a:de:5a:c3:10:88:02:b7:
2f:6a:ba:8b:6d:3f:54:db:cc:60:67:cf:0d:d2:fe:e5:ef:83:
a8:26:cc:0e:c3:c5:7e:da:ac:dc:c6:2d:52:e4:6b:bb:6d:ce:
07:61:7b:af:a7:8a:af:53:f8:3c:2b:3f:52:6f:be:af:d6:a1:
a9:d7:04:31:24:04:98:b7:2e:1b:e5:75:a5:28:da:82:c7:d8:
27:d0:1a:aa:6c:99:49:b8:dc:3e:3c:b3:03:20:bf:79:d0:2c:
29:b8:ef:4e:8f:e2:35:49:9f:7e:e3:17:fb:2b:b2:f5:91:6c:
65:73:4b:ae:b7:77:03:af:63:12:34:20:ed:10:20:1a:11:fe:
fe:a7:e0:f6:dd:6d:c2:14:e3:55:10:de:8c:83:bc:af:cd:8e:
c2:66:70:3f:a3:9d:9e:32:b7:34:76:6b:41:8e:68:40:56:77:
c4:16:b2:f9:42:b7:fa:4e:b1:32:8b:25:9d:db:b6:89:61:b5:
a7:e6:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:31 2025 by rpki-client