Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: pxK2tlFS1DaKqYsJ6uOegjGFaY9eG4gzvQCpzTsK07s=
Subject key identifier: 16:05:8B:B8:9D:9D:7E:0F:02:65:F8:9E:83:EF:53:16:55:5A:8C:3B
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019A1317DE79FC2A42AD31924E3B1D5769EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 14C2
Signing time: Thu 23 Oct 2025 22:02:02 +0000
Manifest this update: Thu 23 Oct 2025 22:02:02 +0000
Manifest next update: Fri 24 Oct 2025 22:02:02 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: LMGyTArmRcQn8GXjIDJ12CAwXoi84/PNpGEmvCy4Hek=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:de:79:fc:2a:42:ad:31:92:4e:3b:1d:57:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Oct 23 22:02:02 2025 GMT
Not After : Oct 24 22:02:02 2025 GMT
Subject: CN=16058bb89d9d7e0f0265f89e83ef5316555a8c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:05:a3:5b:98:da:4c:b2:3f:ec:a6:0f:a4:
ff:c6:65:76:06:d6:20:6b:e1:6a:4a:33:a5:39:b3:
78:99:e5:4a:d0:a9:35:6d:39:64:b8:e3:31:d1:88:
46:ea:8d:73:d6:bc:e8:a3:e5:4d:04:b0:da:37:26:
ab:b3:61:d5:44:d1:91:98:3a:83:b5:c2:f1:1d:53:
bf:0a:ac:1b:8a:59:f1:4b:c4:4d:7a:b0:a0:96:76:
64:22:52:8f:b4:9c:6b:13:e4:43:61:36:a5:a0:e5:
3c:cf:ce:48:ca:89:06:ff:c0:9e:d8:db:e1:c9:57:
a5:ef:7b:1e:9a:96:d2:66:eb:44:91:9f:81:a9:16:
da:3c:92:38:21:88:b6:a3:1f:b7:12:87:8d:91:5a:
12:c6:bf:9f:19:0d:f9:1c:db:ed:3f:a0:4d:b1:d7:
70:08:35:64:3b:29:a4:9d:86:c4:a6:f6:fc:f8:46:
f9:4c:21:08:d5:fa:09:6b:28:5e:f3:07:e3:cf:4f:
5d:cb:cb:fe:d6:ae:71:cc:8c:c5:2e:47:9f:cd:75:
17:5f:1f:39:89:d3:d8:ed:57:bc:65:b7:54:f6:ba:
59:c5:73:e2:5e:01:34:a0:79:af:fa:6e:fd:b8:33:
77:90:ac:fc:ca:07:41:41:db:1c:bc:33:fb:46:eb:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:8B:B8:9D:9D:7E:0F:02:65:F8:9E:83:EF:53:16:55:5A:8C:3B
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:ec:7f:4b:f3:78:af:02:61:77:b2:6e:4f:51:c2:2c:32:
96:c6:04:83:cd:db:65:c4:54:d5:6f:ae:61:2f:1f:b0:25:94:
ec:68:46:27:3b:46:a6:b0:bf:17:f2:b5:11:13:66:5b:5f:8f:
3d:7e:31:5c:3b:fd:e1:d9:d6:d9:ff:56:c9:cd:53:21:ab:0c:
20:14:d9:3e:16:1c:d4:57:5d:b2:32:d8:ca:c5:8b:9c:fc:61:
cb:e2:e8:bb:5f:53:27:25:30:a1:14:1f:15:0f:7b:f3:3b:27:
c5:28:e4:42:63:05:93:a2:6e:d4:8f:e3:03:26:77:90:63:93:
6e:64:92:bd:2e:a1:16:09:0b:dc:e0:2e:08:33:d2:b6:b3:23:
ef:dc:1d:62:55:d0:61:bb:6c:c2:d0:56:35:2f:e9:1d:db:87:
8e:73:a1:22:a7:f6:54:5a:3e:98:01:69:9a:62:d0:65:58:b1:
2b:fc:d4:98:dd:af:ed:64:34:ac:1d:b3:f6:19:16:48:f7:69:
c2:ec:dc:9d:d7:73:86:d8:d7:4c:c1:4f:19:dc:eb:e7:6f:92:
49:41:9f:00:27:10:f8:f3:83:92:f0:30:e6:69:08:cf:3d:cd:
24:f3:44:e7:f8:87:f2:7d:eb:15:c5:1a:56:a9:90:70:36:b3:
31:55:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:08:30 2025 by rpki-client