Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: wmXF4mNq4kGDZhUj7TeMICKkvoK2HgcVU1oBGsVzuEU=
Subject key identifier: 21:22:22:26:B8:22:1A:16:7B:43:24:3B:1A:45:9D:1C:3E:64:CF:B7
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 0199C7213E90110E034482F30447C302E88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 16C3
Signing time: Thu 09 Oct 2025 04:01:08 +0000
Manifest this update: Thu 09 Oct 2025 04:01:08 +0000
Manifest next update: Fri 10 Oct 2025 04:01:08 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: kb7uRMjOy4sD88gNKUNO01yz+Om/xL9IPzRTWndrGwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:21:3e:90:11:0e:03:44:82:f3:04:47:c3:02:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Oct 9 04:01:08 2025 GMT
Not After : Oct 10 04:01:08 2025 GMT
Subject: CN=21222226b8221a167b43243b1a459d1c3e64cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:65:72:c7:41:76:e8:c6:81:55:b1:73:bb:
17:4d:c3:12:0b:c0:63:a1:8c:df:9c:1b:f2:24:ae:
7a:25:42:bd:d2:19:0f:b4:8b:73:d3:ed:e0:3d:92:
ba:d4:db:ea:fe:f5:33:cd:3b:e1:ae:0c:e2:f4:06:
91:1c:1b:e9:da:39:53:54:17:f6:78:5c:86:3b:28:
2f:7d:3a:08:af:d6:a2:e7:0f:4d:cf:00:1a:e8:93:
1d:49:8c:cb:85:14:45:53:88:ae:77:90:65:f0:89:
2c:0e:98:e7:bf:e2:01:cb:ff:aa:8a:68:3d:8c:7f:
9e:1c:ca:a3:6c:ac:6f:d3:7e:f0:2b:b4:aa:65:36:
b4:f0:f4:2c:a3:93:48:25:f3:61:b3:97:ee:04:f6:
25:45:fa:7e:55:82:47:78:6e:54:89:25:a9:c9:ef:
37:6b:5e:db:cf:52:52:b8:d6:ac:7e:72:78:de:13:
ae:07:5a:5c:15:8a:10:b1:a6:4b:4d:9a:e4:9a:e5:
af:79:28:23:67:6b:a9:15:fa:20:6b:e1:ca:43:7b:
a9:8f:19:8c:20:29:1d:4b:62:a1:52:b1:e3:4d:6e:
fb:ce:ca:57:62:cc:66:49:38:e8:b9:a3:65:f9:c4:
d5:2d:57:f5:d2:05:0f:8d:e6:1d:f7:f9:d9:78:85:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:22:26:B8:22:1A:16:7B:43:24:3B:1A:45:9D:1C:3E:64:CF:B7
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a0:81:4e:3f:00:69:b6:00:1a:ec:9d:b5:7b:9c:4a:24:24:
5d:53:48:22:88:8c:ca:2a:95:8b:0b:b3:20:c5:a4:db:01:df:
30:c4:82:5f:ae:32:8b:ce:d9:1f:3e:e6:26:8b:fa:56:cd:6d:
9f:6d:63:d5:63:88:ac:3b:fb:a2:dc:62:31:9e:a8:ba:78:86:
b7:78:a4:64:d5:d4:9f:68:a8:45:48:50:cc:e3:51:91:47:e0:
82:dd:b0:51:4f:06:e2:77:2e:ab:54:fd:68:f3:4d:e7:09:e4:
5e:10:64:87:83:55:5d:6a:00:9a:91:58:63:b6:c0:2b:1a:1a:
b5:d8:2a:d5:3b:01:80:91:fc:9f:0d:5b:19:dc:ef:0c:f6:e3:
4d:23:ef:73:ad:d6:bf:80:94:7b:04:66:56:dc:69:7f:4f:4b:
cd:a3:94:72:0a:11:64:33:ec:6c:7f:2d:a1:90:a3:16:a1:6e:
71:4f:54:bf:fa:25:82:28:a8:d6:dc:8a:44:99:15:f7:7d:b2:
c3:52:a8:9d:fb:af:3a:e5:cb:d5:c1:77:31:17:de:39:5e:4a:
ac:dd:e1:62:b1:27:eb:16:84:be:b1:eb:48:2c:95:a7:e9:b1:
8a:51:9d:22:e3:02:f0:ac:a4:a5:77:62:64:e8:c4:d6:f4:0f:
69:0e:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:07:17 2025 by rpki-client