Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: 7rwOipmorZlb5DaxBeBLI+cuUwcAOt70q8KHrQJuXjo=
Subject key identifier: D1:86:A7:5F:A6:A8:BC:8C:50:22:97:37:82:2C:E6:AD:40:11:57:A3
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 0199FC21B4EDF9D5CED04E94E5FEF6A87375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: BHabaDeKnABApEn3ipGM/kNyPkPHX9tR6KSXMNMzDwE=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b4:ed:f9:d5:ce:d0:4e:94:e5:fe:f6:a8:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=d186a75fa6a8bc8c50229737822ce6ad401157a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:6f:bc:04:03:2f:b7:35:01:52:a7:dd:8b:
49:11:17:6f:c1:6a:d1:54:54:f7:c5:8f:7f:7e:64:
d9:f7:34:b8:d3:4c:e5:22:0c:1b:f8:6e:33:67:df:
fa:b1:16:10:49:0f:1b:f4:2d:32:98:4c:e3:64:ac:
25:9c:ea:54:cd:c7:31:bf:73:91:92:34:0e:54:a2:
5f:a8:8e:10:93:04:8a:3b:50:ae:2d:67:c2:51:b3:
25:ed:1c:db:e9:3a:81:a9:a5:82:37:e3:28:7e:61:
cb:0b:77:90:5e:51:69:eb:8d:b3:1a:17:0c:a8:ec:
6d:ce:f8:53:f9:62:2b:20:44:38:27:54:c0:6c:47:
57:c1:d5:55:1d:03:15:e2:c3:db:78:a5:39:e5:f4:
84:68:65:85:d8:b4:60:9c:ee:dc:75:24:ce:94:b3:
f8:1b:22:5c:f6:91:d1:2a:f2:35:86:e5:dd:35:3a:
0b:04:74:23:fe:29:b2:b4:f5:e5:e7:e2:0b:df:22:
04:67:93:e1:6c:6f:3e:a4:d8:de:18:6d:53:c6:cc:
e3:30:03:d6:a3:b5:4e:2d:7f:15:ea:3c:ef:20:9e:
d6:b5:9a:5c:98:77:b7:85:7f:88:77:ae:35:3f:9d:
10:b7:33:2c:63:2b:37:5f:aa:ad:2c:c1:55:fd:76:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:A7:5F:A6:A8:BC:8C:50:22:97:37:82:2C:E6:AD:40:11:57:A3
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a4:17:4e:86:b1:78:21:d3:e8:ef:13:d0:4b:4b:5f:d8:55:
87:f4:98:45:c9:20:96:db:ac:b1:74:79:76:c4:e7:ee:28:da:
fb:43:4c:79:5a:51:7d:f4:76:d9:2a:c1:d8:4b:ec:72:bb:75:
f2:da:4d:1f:fc:a6:b3:39:ee:99:cd:29:0f:79:fb:4f:6d:7c:
d6:61:f0:71:ea:f7:66:d6:05:dc:da:55:1e:2f:13:19:52:3f:
12:dd:bf:a0:f7:d9:41:de:91:95:bd:6c:f4:44:23:6d:a1:e4:
b5:ab:79:4e:8b:45:d8:24:94:a6:1f:24:ba:48:3f:aa:47:4e:
64:23:7e:59:3f:40:43:28:56:b4:cb:67:12:5d:c8:9e:9e:66:
96:c7:5a:d4:43:43:97:8b:ca:6c:48:65:c6:24:68:09:2d:00:
65:0a:1b:72:53:08:5c:4b:76:17:40:4a:46:e0:e8:c8:dc:f6:
f1:91:e1:01:14:4f:94:7a:44:46:4f:a6:ef:d3:25:8d:48:4e:
b0:e0:b4:5a:36:47:20:a6:08:70:62:6f:b4:ff:9e:6c:e2:a9:
f4:6e:3e:ac:4d:bb:ae:65:dc:0c:72:fe:10:15:1f:7a:9c:a7:
97:68:72:5b:04:e4:c9:27:dd:90:76:6b:f1:25:00:c3:bf:fd:
51:b4:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:17 2025 by rpki-client