Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: CeNLT2Wdm7QMtoqCl1CcUjEjEL44u7+ZXvfMt//csEQ=
Subject key identifier: D0:27:37:B2:10:02:27:FC:D2:94:D5:66:C1:5C:F4:02:01:89:07:98
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0199FBEC02E6C918F73811CCAB38A09714A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: GN35ZdAqGtNSZovwJMOChTjZWwD5HTXBEIDNaMRTXEE=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:e6:c9:18:f7:38:11:cc:ab:38:a0:97:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=d02737b2100227fcd294d566c15cf40201890798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:b9:cd:c7:5f:ab:eb:34:6f:46:26:22:cc:
74:c0:42:24:ea:5c:5f:87:c4:d6:6e:5b:7b:4f:16:
6e:69:cf:e2:aa:a6:8f:e5:1f:eb:83:c9:1d:b5:b4:
3a:ac:5c:02:fc:94:1a:c2:da:35:48:d9:cb:cd:3c:
7b:e9:2a:f3:4a:6d:cc:d0:a1:f9:40:d4:81:bf:3e:
f4:59:0e:af:db:48:7c:98:13:41:62:50:a2:72:4b:
c3:b7:c2:4e:29:b8:6a:03:31:ef:35:68:3d:c6:fe:
08:56:c9:4f:90:cb:44:b5:e9:a3:55:cc:27:2f:86:
1c:0b:fc:63:d8:ca:5e:30:25:a7:3a:96:3a:9c:41:
20:b0:cd:ff:5f:48:bd:c9:9a:a0:dc:9c:f9:4d:1a:
f7:ff:9a:b0:33:ee:0b:bd:c2:65:4d:6b:51:14:eb:
61:f3:10:25:3e:4d:78:be:58:b6:ac:8d:79:ae:f6:
63:41:54:fc:ed:df:7a:9b:58:48:2d:f0:42:ec:31:
7c:4f:f6:f8:07:21:45:5a:31:6e:da:4e:dd:5b:02:
1c:bb:01:46:de:af:97:81:9b:98:f2:c3:f7:e5:9d:
db:30:7d:94:fa:92:9e:e9:4c:f5:47:47:1f:8e:49:
0c:07:cb:22:dc:05:62:9a:47:7d:db:9f:37:da:35:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:37:B2:10:02:27:FC:D2:94:D5:66:C1:5C:F4:02:01:89:07:98
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:31:31:0d:5e:a0:41:86:06:9f:e4:31:5a:b4:07:25:b3:c1:
b2:4e:8d:e1:8c:dd:87:7c:b9:57:09:57:bc:0b:de:bb:d1:12:
11:b8:93:aa:7a:91:e2:af:8c:ce:72:6f:76:4a:73:78:a2:50:
1c:b7:13:3d:d9:57:11:1f:7b:7c:f4:97:13:65:91:7e:e0:74:
3c:35:e5:f6:a1:94:b2:e6:4d:53:86:4f:71:48:82:8f:f1:b5:
8a:ca:73:a5:db:89:e6:66:2f:20:4b:fc:c4:26:a7:7e:db:93:
fe:c3:df:b5:b6:41:21:10:0e:16:01:1c:96:ad:56:bf:7f:ea:
b2:1e:f4:41:e0:96:fd:48:91:8f:f4:9d:25:0e:50:8b:e0:63:
9d:7c:3e:a4:5f:c7:46:58:18:a0:ea:35:ea:32:64:c1:d0:69:
8c:1a:99:7e:7c:1e:8e:5a:d9:e7:e8:0c:15:58:b7:9c:b5:cc:
eb:ba:4f:a7:52:84:e8:d3:44:55:1b:e5:79:8c:89:98:e2:b8:
07:41:2e:73:70:e2:7e:10:fc:fc:fc:12:6c:00:9b:ad:37:b2:
2a:98:e0:b8:a7:ad:0c:18:54:df:a1:29:a3:14:bf:f5:54:d1:
78:df:5f:2b:9a:60:03:55:a7:a2:88:73:25:bb:ca:d7:b0:f6:
86:93:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:16 2025 by rpki-client