Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: GrsTcPpUwfOq2OdYwfCrtb4V5ND06gnTABR/ctQM2cA=
Subject key identifier: 35:A5:04:4A:44:60:48:2E:FC:F2:D3:15:27:AF:1E:B2:C8:F0:B8:35
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 0199FAD7E4590649D855B74DECF239F76831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:16 +0000
Manifest this update: Sun 19 Oct 2025 05:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:01:16 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: /ThpY4hpWhOlD0sn+L3n58EUFHl1byK4N2WVCNu/vaM=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e4:59:06:49:d8:55:b7:4d:ec:f2:39:f7:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Oct 19 05:01:16 2025 GMT
Not After : Oct 20 05:01:16 2025 GMT
Subject: CN=35a5044a4460482efcf2d31527af1eb2c8f0b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:f1:92:40:20:e4:5a:8b:3f:98:c0:b0:98:
e7:4b:b6:08:f2:24:2d:b2:75:bd:86:56:45:f5:b1:
ec:23:7e:a0:34:99:aa:f9:19:09:bf:86:4f:e8:fd:
96:c4:76:73:9c:6c:33:d3:ff:40:25:a0:51:16:1a:
23:f0:19:76:64:78:14:36:3d:07:89:c7:c1:e7:bf:
ae:c9:58:f7:e5:fd:18:01:82:70:67:73:f6:01:a3:
24:c2:fc:34:8c:bd:e0:51:6e:83:bf:08:43:8b:4a:
5f:16:b1:b2:3f:70:78:69:25:c9:7b:49:5b:31:b8:
36:58:bf:5f:a2:d0:53:d5:89:b1:b4:55:cd:31:9d:
7e:c5:f1:7a:d0:77:a0:7a:da:be:fb:09:50:c0:75:
60:32:18:66:e7:27:2c:80:b4:95:af:31:24:ad:78:
e9:19:8d:f7:a6:b8:b5:13:f1:ed:34:d8:6f:44:1e:
10:12:b5:d4:b5:d8:89:4f:94:ee:82:dd:77:00:3b:
c2:a5:6c:0f:8c:22:e6:45:e2:f8:3c:16:c4:d7:27:
07:ac:bc:a0:06:15:cd:06:5d:de:e8:0d:ca:3b:7d:
9e:14:2d:bd:1b:ba:e3:d7:50:29:81:da:3c:de:28:
6c:b3:18:e9:72:1e:42:9d:9b:ab:10:0b:b7:69:01:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:04:4A:44:60:48:2E:FC:F2:D3:15:27:AF:1E:B2:C8:F0:B8:35
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d8:9f:46:c9:0e:fe:b1:5c:e2:94:d6:68:35:93:54:5f:2d:
4b:96:20:44:0f:34:68:60:d7:3e:28:e3:9c:42:cd:b0:7d:8c:
39:32:9c:03:18:9c:ec:0a:be:95:99:53:c9:ef:cd:92:39:e8:
bb:1a:24:89:4a:79:f0:dd:2a:47:8d:ae:63:64:59:38:82:25:
00:43:13:91:6a:06:5a:e5:62:d0:b3:98:85:29:d2:e9:a4:c9:
ec:38:d5:ab:87:63:7f:9e:4f:ec:ea:6f:2c:c8:24:52:71:fb:
d1:1a:22:6b:80:02:f4:f1:f0:0a:71:f6:8d:bd:e0:89:24:1e:
e5:b6:b3:92:12:bc:f8:a6:f1:40:5a:6d:5d:3a:48:6d:eb:f7:
59:9f:df:d8:8e:93:0a:fe:97:4f:bc:83:9f:b8:7c:a2:1a:ba:
32:2e:93:c5:51:2f:53:b4:20:c6:8f:52:b2:38:28:b0:6f:91:
6f:b2:50:c6:c2:9d:39:5b:f3:45:5e:13:f7:02:40:c9:4c:e4:
af:f1:26:19:aa:f6:04:cc:64:64:8f:e2:a2:5d:6c:ba:d8:b6:
ba:e0:fe:2c:b9:32:39:c8:d0:95:bb:40:36:13:ed:12:1a:50:
1f:9b:bc:3c:e7:f5:6c:69:5b:a9:80:10:70:e3:6a:8a:91:9a:
5f:7a:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:16 2025 by rpki-client