Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: jGLDpKm0jZrF3DKSjaza4cVW6INYuHbQpq38SLGmAYc=
Subject key identifier: A6:CD:55:BC:73:A6:B5:A8:E0:1A:22:5D:BC:D7:8F:35:28:68:6E:08
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019A27AFBFEB163720D429BD0F7D491AC4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 22:00:20 +0000
Manifest this update: Mon 27 Oct 2025 22:00:20 +0000
Manifest next update: Tue 28 Oct 2025 22:00:20 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: 2j1VZWsZK3PeZxQ4WajrTctvekfq1BGoMdBBfehFKtk=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:bf:eb:16:37:20:d4:29:bd:0f:7d:49:1a:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Oct 27 22:00:20 2025 GMT
Not After : Oct 28 22:00:20 2025 GMT
Subject: CN=a6cd55bc73a6b5a8e01a225dbcd78f3528686e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:9e:08:92:b5:4a:f4:d4:c1:6d:26:15:af:
dd:bd:3f:bd:12:03:bb:95:03:b7:9a:5e:a7:3b:90:
fe:ac:88:b1:2e:db:ae:40:4e:22:16:ae:fb:0d:85:
4d:cb:35:26:5d:3b:9e:82:61:23:cf:99:e3:6f:da:
dd:77:e7:ba:65:e1:5f:e8:0c:97:e1:bb:1b:53:e2:
68:43:3f:b9:3a:6d:cd:23:40:79:cb:4f:2d:49:b9:
89:ad:a7:f8:ca:1f:38:72:f1:a7:ce:7d:1e:78:81:
d7:c0:e5:1e:43:f8:72:31:ce:6e:0c:4e:ae:3d:32:
7c:44:81:5d:d8:e4:b2:22:87:2a:ad:03:d0:36:39:
8c:db:5a:c5:b0:37:3a:29:09:5a:87:16:ca:b6:2e:
b3:b6:79:73:b7:27:77:e3:9d:e1:4b:01:07:e9:8b:
31:ff:07:41:1f:72:7e:94:8a:c6:9e:01:92:09:69:
5e:99:70:a3:bf:93:9a:2e:fc:01:90:d2:0d:af:76:
5e:af:4e:dc:2a:4e:b6:03:12:eb:b0:b2:25:97:e1:
0c:9c:b6:01:3b:f8:80:79:1f:98:1d:c7:4f:c5:d7:
58:a5:30:29:d7:a0:81:b4:7c:eb:f5:e9:4c:06:15:
b3:ce:4f:16:12:99:66:da:63:5e:73:e4:15:72:9f:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CD:55:BC:73:A6:B5:A8:E0:1A:22:5D:BC:D7:8F:35:28:68:6E:08
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d9:f0:0f:f7:4f:19:e4:a4:f1:57:8b:8a:c9:f7:ef:dc:4e:
28:b7:c3:20:e2:78:50:d8:de:d9:c2:2d:41:9e:4a:38:50:24:
92:44:a6:99:ec:54:09:16:07:b0:cf:e1:1d:c8:e8:10:be:34:
80:38:83:5b:eb:3a:bd:ba:9e:eb:89:b6:60:dd:0e:b3:be:54:
b8:d0:d7:0d:a3:cf:66:99:3e:45:73:c3:54:71:ba:c1:c6:23:
21:44:a2:d1:44:b2:81:b3:2c:a7:34:8b:f7:51:a6:d2:5c:c6:
d9:c7:a3:18:63:0b:98:aa:d5:1f:72:53:5c:22:48:be:59:81:
70:b9:27:6d:b3:57:de:d8:e1:5f:c7:35:73:a4:f8:b3:1a:83:
e2:d6:3a:71:7d:c4:d1:5b:28:e0:87:07:0f:ba:0d:53:cd:55:
65:0b:ce:9b:89:c5:e8:20:c6:b0:e9:64:48:44:31:a0:c8:af:
44:ed:2d:8b:38:a4:a8:e8:9e:5b:b0:f3:f3:b3:9a:90:e2:74:
99:ea:88:b9:b8:6b:56:cd:26:0e:b0:d4:ef:d1:07:6d:d6:62:
dc:eb:a9:36:be:a6:f8:bd:f6:54:24:45:db:78:d3:56:be:0e:
a6:49:b5:5a:90:ea:4c:36:8e:d3:bf:4a:1a:95:de:c3:51:85:
0a:c9:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:47 2025 by rpki-client