Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: fnOMOh9WLoaLehU87WBe8mmV55XDDMWCw+rBjsCG9Tc=
Subject key identifier: 4C:F4:C8:11:DE:A2:51:93:3A:36:53:57:9F:82:7C:EE:A0:87:DB:60
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 0199C532BCAC180425A525CC57D79E544315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 16C9
Signing time: Wed 08 Oct 2025 19:01:00 +0000
Manifest this update: Wed 08 Oct 2025 19:01:00 +0000
Manifest next update: Thu 09 Oct 2025 19:01:00 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: PdqWNDtkkJfaLnWb7DtmGL/ZicX1yytgGeeJQYESToo=)
2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:bc:ac:18:04:25:a5:25:cc:57:d7:9e:54:43:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Oct 8 19:01:00 2025 GMT
Not After : Oct 9 19:01:00 2025 GMT
Subject: CN=4cf4c811dea251933a3653579f827ceea087db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:c6:44:71:4b:17:f5:34:55:c2:33:71:d6:
ba:58:5e:69:aa:0f:e8:1f:33:36:39:9b:ac:01:9f:
c3:c9:10:0d:ae:5e:fa:57:f9:37:a0:41:85:01:62:
79:7f:0a:10:86:4a:02:34:bd:78:0d:0a:30:d0:7f:
2f:db:20:09:93:9e:eb:0f:41:ee:07:5c:b0:d1:8c:
8e:9a:1d:22:5c:bb:d5:a8:01:aa:7f:f0:3f:f1:05:
7c:8f:83:d5:d4:3a:a8:9d:35:c3:e5:c7:ea:f8:1a:
25:fb:be:47:2e:57:31:5e:5c:e2:3f:e5:4c:e3:b1:
aa:83:18:60:0a:b2:ed:8c:23:a1:19:fd:72:2d:d5:
da:ad:38:b4:92:24:3b:e0:59:a9:a2:8c:1c:c6:cc:
6d:3c:13:d5:f8:e3:f5:45:44:17:ce:bf:8c:16:01:
85:30:15:f5:62:9b:92:c1:29:1d:bf:f1:c1:22:5d:
11:23:02:b1:0a:4b:c2:06:f3:c5:4b:f0:3c:ca:1a:
2e:0b:e5:66:5e:f5:ff:16:49:6a:0f:1e:16:6b:2a:
67:b7:10:b9:28:cd:8c:98:42:98:c5:7c:bc:bc:65:
31:88:01:15:e3:45:57:2b:9e:6c:75:ca:13:90:45:
ae:c8:a0:1a:c9:dd:10:2c:4f:72:46:3f:2d:74:78:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:C8:11:DE:A2:51:93:3A:36:53:57:9F:82:7C:EE:A0:87:DB:60
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:76:55:b8:c6:d3:b4:c8:55:e0:f7:fe:aa:06:8a:55:8b:d0:
b2:32:10:e9:4e:bb:84:73:24:f6:c5:d1:b9:a4:ff:57:cd:95:
bd:5e:9f:26:bd:6b:62:e8:d5:2b:7c:6d:bb:23:23:81:3e:0f:
38:3b:87:7f:df:bf:1d:74:0c:da:ef:fe:38:2c:71:cf:a0:b5:
e0:e8:ce:b4:e6:ad:8d:b8:13:a0:e5:ff:d2:5c:ac:3b:52:8a:
4c:9f:1f:f1:3c:6d:f2:62:b8:9a:e3:a5:22:3d:60:3e:2e:63:
6b:36:93:41:2e:f4:86:37:5b:a9:a3:93:c1:9e:47:19:c5:f4:
47:0e:8f:21:e8:57:a5:14:bd:b9:9b:cc:f7:03:d2:a8:20:f0:
01:26:b5:1a:68:7f:c7:51:30:87:79:d6:8b:44:7e:81:97:c1:
e6:86:e9:9f:3c:45:af:3d:a0:28:a9:f9:7f:8d:c4:85:f3:d3:
3a:c4:8d:1d:b0:9a:81:ec:08:3a:40:63:2b:4b:cc:70:6f:f2:
2e:fd:87:e8:dc:ab:ab:7c:f8:8d:1d:8f:80:a4:db:54:cb:a8:
c1:74:0c:92:44:3d:f4:b4:d6:fc:0f:e2:25:b5:00:a8:d7:a9:
5c:4c:ad:8c:2a:2b:cd:1a:da:22:35:eb:5b:62:39:64:fd:8c:
ee:ae:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:48 2025 by rpki-client