Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: E86eZamC1CSEE6mkCfWPbmY4gdflZuZoe+yjIoLcezc=
Subject key identifier: A9:9F:BE:E5:60:E6:76:4C:B8:4D:5B:65:9C:A4:6E:5B:B5:F5:AA:BA
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 0199C48E231DE58EB849AD9B7D3CEADC3D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 13DE
Signing time: Wed 08 Oct 2025 16:01:13 +0000
Manifest this update: Wed 08 Oct 2025 16:01:13 +0000
Manifest next update: Thu 09 Oct 2025 16:01:13 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: ha6thripY5ilaw/N9TTnnXiDuFgfpKxRObjH0fdPQ5c=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:23:1d:e5:8e:b8:49:ad:9b:7d:3c:ea:dc:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Oct 8 16:01:13 2025 GMT
Not After : Oct 9 16:01:13 2025 GMT
Subject: CN=a99fbee560e6764cb84d5b659ca46e5bb5f5aaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:11:08:f1:64:9a:b6:ed:73:ad:77:19:26:
d4:0d:0c:80:19:8d:d3:4b:a8:ab:06:6f:bf:84:f4:
44:05:e1:c3:66:49:d2:62:7d:c1:74:5c:15:f9:dd:
a5:0b:83:2e:8e:ac:3a:3a:c9:c1:f9:cf:4f:03:da:
fb:4b:ac:d1:1e:9c:51:75:36:ab:ab:95:a9:21:5c:
91:fb:ab:2a:20:d9:cb:b3:83:d2:06:fe:a2:15:ad:
b7:4b:5e:cd:6e:30:16:96:07:2f:3f:e5:38:0c:54:
fa:0e:b6:c4:06:4e:fc:e6:ab:ae:93:43:0b:49:1c:
97:59:63:00:15:bd:71:11:9f:ef:a3:ab:f9:70:59:
d9:60:b6:98:98:42:cc:d8:e8:e6:3c:3a:72:94:ac:
a8:86:b9:06:a1:02:82:90:29:46:51:f0:a9:9b:ea:
41:28:cd:96:bc:17:02:91:e9:8b:59:ae:a2:4b:d3:
d2:2e:9b:bb:d2:91:67:06:e6:cd:b3:00:ed:ca:70:
aa:49:39:73:b8:c0:e1:d4:a0:09:34:48:43:4d:3b:
df:1c:a0:42:a4:a4:3e:64:35:4d:59:3f:82:b0:cf:
76:35:01:65:79:93:ae:ab:0e:b4:74:44:95:b2:59:
f4:d5:9f:23:15:8a:46:64:3c:17:21:22:4d:46:b7:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:BE:E5:60:E6:76:4C:B8:4D:5B:65:9C:A4:6E:5B:B5:F5:AA:BA
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:dd:e7:be:f6:12:24:6b:4c:de:71:78:4b:07:ff:6f:c7:
c0:79:aa:81:29:3d:9b:d2:cd:78:dd:d2:26:25:9f:84:9c:ad:
1d:a1:4e:f6:aa:3d:ae:dd:f4:54:fc:db:6f:df:90:14:9c:99:
28:fd:fe:65:dd:29:86:69:51:be:e6:69:92:b4:ed:38:f2:80:
21:03:f9:12:a6:bf:e7:55:a1:59:a1:89:83:92:a5:30:f8:c4:
86:60:0a:85:32:08:a5:2e:1f:90:c8:09:8f:3c:f2:35:43:af:
0e:26:4b:8a:0a:81:b1:e5:f6:42:38:1d:33:af:7a:f9:81:0a:
52:b7:52:73:36:cc:07:8e:ba:5d:fe:ea:94:94:12:2c:86:7a:
06:21:f4:12:79:07:28:65:99:8b:31:5d:4e:fc:3b:8c:f5:4c:
f5:21:4b:42:86:da:9d:6d:7e:f6:74:c3:f0:99:dd:83:84:b5:
e9:ab:9b:50:05:e4:94:eb:2b:33:45:dc:8a:05:62:51:41:c5:
7b:34:6b:dc:05:b2:d7:56:47:8f:2e:84:9b:c9:81:cd:93:e3:
bd:93:e5:6a:2f:00:12:ba:4a:e7:15:65:39:33:3d:04:8e:d9:
fd:c7:60:66:87:fb:3e:0d:f3:9b:89:d1:86:bd:2d:5c:b8:5e:
b7:05:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:01 2025 by rpki-client