Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: IQfQA591EM/IZ6By5kbFMzfGwZXZ234a1omoylbAKHk=
Subject key identifier: F8:FA:93:EA:55:D7:25:A4:06:7C:51:52:FA:DE:15:D4:F1:65:08:3F
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019A2365482BBE3ECEDEA9065ECE0ABE8072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 15BC
Signing time: Mon 27 Oct 2025 02:00:31 +0000
Manifest this update: Mon 27 Oct 2025 02:00:31 +0000
Manifest next update: Tue 28 Oct 2025 02:00:31 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: wM1ns93AlOnNglvjKaXPDJlsWDJuFrLCUZeRaH4CkZo=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:48:2b:be:3e:ce:de:a9:06:5e:ce:0a:be:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Oct 27 02:00:31 2025 GMT
Not After : Oct 28 02:00:31 2025 GMT
Subject: CN=f8fa93ea55d725a4067c5152fade15d4f165083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:8a:60:21:5a:3b:f5:6b:82:37:4b:82:ce:
e3:29:cd:af:5d:8a:2a:3f:c2:ed:d3:f2:e3:17:1e:
e9:78:59:a0:b7:5a:04:ff:01:82:04:2e:fe:02:b8:
1e:c2:67:96:35:be:1e:41:c3:ff:c0:87:61:25:28:
b5:f1:a9:4d:75:b9:22:16:62:10:ae:6c:86:0a:0d:
f5:8d:03:6a:49:8d:b9:66:1e:04:11:0d:be:45:18:
97:76:0b:35:00:8f:21:ba:25:e2:05:e3:80:98:07:
23:78:d3:ac:79:58:d1:8e:5b:a0:99:24:af:ea:1a:
75:c7:bf:7f:d4:7e:4b:10:74:83:a0:fa:d6:a7:a8:
2e:b0:57:ad:4c:de:ab:2f:c8:a6:23:78:19:19:f3:
4c:9c:a9:d9:44:95:c6:9c:d5:0c:c5:ad:01:2e:a9:
e3:b4:df:cc:0c:ec:42:fd:ba:73:2c:cb:4a:93:8b:
50:54:56:ad:7d:a0:67:23:13:01:0a:af:2a:9b:ea:
a0:eb:e2:81:a2:20:16:8a:90:fb:bc:44:44:d7:cf:
39:e7:ab:ae:94:02:64:ee:ed:bd:2d:a7:f2:d0:45:
81:17:23:aa:d1:ec:87:77:33:91:0b:68:37:74:bc:
fa:97:18:73:81:db:03:05:5e:bb:66:d9:9f:e8:ca:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FA:93:EA:55:D7:25:A4:06:7C:51:52:FA:DE:15:D4:F1:65:08:3F
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a6:66:1a:ed:7f:ef:85:38:a5:b1:b2:f7:ab:31:46:e5:57:
0d:52:ca:22:d1:6a:0d:c6:5b:61:a8:65:15:bc:80:2a:2b:46:
d1:41:a3:0c:f6:fe:d6:09:b7:ed:ca:ce:56:7b:48:3b:6e:a9:
96:af:7f:30:47:1e:49:29:65:9f:a9:ef:ea:6b:ac:47:6b:7a:
d9:b3:96:c4:a9:0e:82:9c:35:f5:27:c7:25:77:95:43:44:17:
c9:7b:cb:97:48:f0:b0:cb:e2:11:19:ac:41:29:51:cf:b8:32:
23:2a:36:44:6c:dd:37:8e:bb:fb:7b:06:94:14:66:13:93:cb:
f1:33:98:20:6a:2d:f9:c8:34:b0:1d:31:31:93:2e:cf:f1:c5:
5e:4a:1d:c3:29:88:0e:c0:af:ee:5c:9c:7d:25:fd:f8:04:16:
df:1d:ac:2d:33:37:20:26:9d:1e:1f:b7:65:00:71:aa:ee:6b:
c2:ba:23:15:bf:2d:3a:ef:f0:fd:f5:60:23:fb:95:ca:4c:6b:
9b:de:aa:e5:92:b1:a5:df:d1:0d:7a:55:62:1d:0f:68:b2:8c:
02:cb:1d:93:c5:ca:da:70:1d:61:14:1d:35:0e:60:4a:9f:81:
48:82:34:ea:2c:0e:d9:3c:74:4b:3c:95:1e:ff:7c:13:49:b7:
08:da:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:29 2025 by rpki-client