Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: dwgsO/gg+V1ola8WSEUCgpgnxMhScJWq2rVPYwIoTDk=
Subject key identifier: 84:33:9E:2C:1A:1E:33:E5:5B:FB:00:EC:A9:6D:2B:C9:AF:BF:86:BB
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 0199FE7DF131B2C55EFC4A79D9047EC49CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 13FC
Signing time: Sun 19 Oct 2025 22:01:30 +0000
Manifest this update: Sun 19 Oct 2025 22:01:30 +0000
Manifest next update: Mon 20 Oct 2025 22:01:30 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: an/TzzTlRHIKPuthBkHR561pHru143f4tZ3VdrRwH50=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f1:31:b2:c5:5e:fc:4a:79:d9:04:7e:c4:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Oct 19 22:01:30 2025 GMT
Not After : Oct 20 22:01:30 2025 GMT
Subject: CN=84339e2c1a1e33e55bfb00eca96d2bc9afbf86bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:7d:e7:92:b1:63:a7:27:26:7e:95:cb:9c:
f8:b1:3f:2d:78:2a:d8:48:64:9d:09:65:bc:7f:f6:
dc:11:12:82:8a:66:dd:d6:2d:1c:63:0c:3f:3e:e8:
ee:b4:c1:a4:35:2b:9a:e4:18:f0:ca:a5:0e:12:91:
91:49:8f:1b:03:d7:7e:61:9f:aa:00:1d:47:77:df:
08:4e:ef:a2:3b:36:a3:e4:28:f5:1c:12:77:2b:50:
63:bf:8e:7d:a5:e3:93:7d:ca:16:a3:09:2e:b6:52:
33:24:14:a7:ac:38:db:d9:cd:bf:07:53:b6:e2:43:
4d:07:d6:65:a0:be:b7:d7:75:b3:ea:d3:d8:9c:a0:
5f:04:8f:80:7f:ae:fa:eb:d3:44:c6:a5:fd:1f:b7:
4c:66:2e:4e:8d:88:92:fc:9c:24:58:6d:f0:b3:8f:
de:fd:55:47:30:25:8c:c1:7e:61:18:51:50:57:29:
49:17:1b:d9:78:5c:76:9b:a5:17:48:f4:14:6b:69:
9f:3c:9e:93:38:5a:e3:0a:fc:fd:69:06:89:03:c1:
76:d4:7b:1d:22:83:af:88:df:6b:e3:3b:f4:cc:d4:
78:47:05:0e:d9:da:d9:b6:3c:e6:02:53:e6:74:fd:
79:f0:ba:d2:ac:e3:dc:25:c5:c5:03:21:47:84:5a:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:9E:2C:1A:1E:33:E5:5B:FB:00:EC:A9:6D:2B:C9:AF:BF:86:BB
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7a:30:a0:44:79:28:8f:37:ae:ba:99:7c:24:97:99:a8:07:
88:a8:97:e3:ea:09:70:99:85:62:93:21:25:7d:3d:e0:cb:4c:
a2:de:26:05:f6:b4:4f:58:4d:4d:cc:ea:75:3f:a0:96:70:4c:
3e:7d:cd:c6:71:e1:0d:86:44:3d:9b:b0:64:52:e9:4c:c4:b8:
29:71:d3:38:14:95:40:75:14:0e:4e:ef:16:48:75:93:9a:9f:
30:1e:8c:2b:54:5b:06:8b:74:45:0b:72:33:9f:48:27:33:b7:
02:76:db:ff:d8:9a:a2:dd:5c:a3:3d:5c:c4:60:72:c6:b2:52:
5e:b3:60:cf:d1:dd:dc:af:af:27:9a:fd:2a:c4:98:c6:4b:cd:
f6:2b:bc:be:18:e7:d0:aa:cc:45:3e:21:39:d2:88:e2:ce:6a:
e6:df:0a:eb:6f:ea:5e:66:07:8d:3c:c0:e4:04:12:95:4b:db:
fd:01:32:19:a5:73:56:fa:85:f9:6f:47:46:ac:02:3a:85:8c:
5f:39:55:0c:22:a6:49:06:14:2e:ba:83:44:6f:34:9f:9c:f1:
30:a5:41:8c:70:d8:24:89:0c:fc:0b:74:3a:1d:79:c7:ca:65:
30:5d:94:f7:7e:b8:54:44:56:a8:9f:38:50:e8:45:dc:fe:b9:
14:84:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:06 2025 by rpki-client