Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: /dbzVMR1YLGYSeSHypn8G3V4J0j7fB7yvcwKz29HqjM=
Subject key identifier: C2:85:76:A4:DE:33:67:FF:22:DF:C0:2D:E3:A1:7B:11:24:0C:3B:52
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 01995DC52072A8D8019CEF696DBD9DCC12F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 10F5
Signing time: Thu 18 Sep 2025 17:00:23 +0000
Manifest this update: Thu 18 Sep 2025 17:00:23 +0000
Manifest next update: Fri 19 Sep 2025 17:00:23 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: p346PZmBIuNk6F4daL13N+ePIyug51wJqSkHnn70SN8=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:c5:20:72:a8:d8:01:9c:ef:69:6d:bd:9d:cc:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Sep 18 17:00:23 2025 GMT
Not After : Sep 19 17:00:23 2025 GMT
Subject: CN=c28576a4de3367ff22dfc02de3a17b11240c3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:e1:71:12:93:88:d8:a8:40:7f:a1:d2:09:
c6:d9:46:b1:ce:0d:af:c9:63:66:96:b7:4d:62:49:
96:42:2b:1e:2c:95:f7:db:a3:36:42:5a:30:1c:94:
a4:a3:8f:e8:e1:79:21:dc:6e:0a:b3:5b:d6:7c:a2:
66:72:bc:77:73:14:6d:02:46:ef:c7:d1:45:76:b8:
f1:dc:1a:86:9f:d2:ff:00:c8:fa:51:64:cf:fa:74:
b9:f2:2d:0a:bf:6f:0b:52:ba:99:c9:68:31:32:1b:
30:64:39:5e:7c:c4:b7:d7:4f:34:2a:da:39:11:cd:
e5:46:ac:8d:5d:2d:78:63:dd:19:86:da:cb:c3:5b:
e3:ac:29:ab:cd:ec:a8:83:fc:9b:13:70:3d:98:4f:
39:db:60:bf:af:5c:6e:e2:42:2a:7a:e9:0f:b8:54:
90:5c:9d:37:c3:77:f8:8b:74:44:0a:dc:1d:a0:a1:
e3:b5:e4:57:1f:0e:60:78:ca:51:f1:cf:55:55:f0:
20:fb:5b:f7:ff:d8:fc:cc:5a:94:71:44:a5:dd:ca:
63:cb:12:5f:ba:b4:19:c8:fd:7d:4d:4f:3a:0c:88:
08:84:d7:4e:2f:b4:2b:1a:b0:b4:d5:30:73:c6:d2:
42:e6:84:b6:bc:10:16:fb:69:21:02:80:f6:59:33:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:76:A4:DE:33:67:FF:22:DF:C0:2D:E3:A1:7B:11:24:0C:3B:52
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:3d:3d:c0:72:f8:59:86:24:96:20:06:cd:46:46:42:64:
db:9e:bc:f2:74:b9:29:cb:84:e7:af:0f:9b:b8:a5:ce:96:5f:
31:b3:4e:84:06:6c:e3:f2:d8:80:f7:ff:39:6c:a4:b7:51:44:
41:b2:3f:75:83:84:be:b9:0d:dd:43:86:35:87:6c:34:83:a7:
22:eb:0e:69:c9:ac:53:f9:35:76:23:4d:62:bb:34:20:e1:f6:
4e:b6:4f:7a:85:65:8c:4d:0e:f0:79:ca:09:84:e6:40:b7:e7:
14:34:b0:e8:16:55:34:fb:e4:5c:5a:4c:bd:5e:59:c2:4a:a6:
f0:00:05:bf:ac:c9:5a:06:9c:b1:0d:db:9f:db:a7:24:d6:1c:
53:23:69:fe:cc:61:62:5b:a5:34:6c:1c:32:fa:c0:9c:7c:f6:
28:6c:2e:e5:94:68:5e:ac:56:de:d6:7d:e6:b8:0f:d9:f9:33:
0a:e3:66:ce:ff:67:56:d5:7f:21:c4:b3:d0:dd:ea:e1:4d:d6:
a7:9e:3b:e1:2c:97:2e:ae:37:5e:e8:e1:18:bf:4f:90:7a:1e:
ba:f7:a6:78:21:5c:d3:a5:2a:93:1a:24:54:a9:45:1f:3a:69:
fd:03:9d:a2:c5:26:71:a0:b4:61:44:04:a2:a7:9f:a4:38:26:
a8:47:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:14:36 2025 by rpki-client