Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: Z5IywUPSubCretCf7KMF/rCj+QjvUv7fAPVfVozWh+A=
Subject key identifier: 9E:AA:01:B6:68:9E:BA:FA:A1:3D:D2:84:7B:E6:FE:B6:36:F9:11:FA
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019A09DC908B1502763D3879B0B852DE62E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0B19
Signing time: Wed 22 Oct 2025 03:00:40 +0000
Manifest this update: Wed 22 Oct 2025 03:00:40 +0000
Manifest next update: Thu 23 Oct 2025 03:00:40 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: 8GkbExxc/K/DorOY5352yVkaRGOjjMErqL/KjB/vqxo=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: LwiqjkhCjVYDN_Uuc5pesCFRxxQ.roa (hash: XJuhY9bzTdv01ahJTRNA+zDPPR9oL2iwovPyAJa6tpU=)
4: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
5: szebc8-7Bd4DeQn1tSqrBS_dc4M.roa (hash: SIVCM9gif1wAhePpBb3dd2HLPRS90t/xDCg6lweK9EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:90:8b:15:02:76:3d:38:79:b0:b8:52:de:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Oct 22 03:00:40 2025 GMT
Not After : Oct 23 03:00:40 2025 GMT
Subject: CN=9eaa01b6689ebafaa13dd2847be6feb636f911fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:c5:94:44:26:49:70:e5:fd:cb:09:b9:13:
83:eb:21:f1:2f:76:13:8d:32:d9:38:2d:fd:27:12:
13:c2:9d:58:96:c9:1c:5d:93:46:a9:48:ea:0f:ba:
35:bd:9f:3b:e0:c9:83:4d:54:f1:76:0a:21:a9:bd:
55:df:86:4d:26:c5:81:5e:aa:10:30:3e:57:cb:3e:
20:d1:3e:20:0c:10:0b:bf:36:e5:27:68:29:21:6b:
72:1a:b5:3b:f2:03:cb:71:b3:27:4a:0b:0e:64:69:
b2:ce:96:97:4f:ae:5a:69:1b:3a:55:e5:0d:0b:ad:
9f:ba:ce:09:d9:4d:56:86:04:75:30:e3:6f:a1:58:
57:da:50:cf:fb:da:7d:c8:a3:d0:82:5b:33:1c:d6:
8c:9c:15:1f:a9:de:be:e5:99:f0:40:f2:43:9d:0e:
c1:13:ed:ad:c6:fa:b1:d2:c7:3c:82:35:c6:70:6e:
f3:ca:d6:a4:13:66:ee:7a:94:2f:cf:6f:ba:b3:3d:
81:03:77:12:b3:8e:ce:97:e2:40:4e:4e:c1:a9:52:
57:9e:e4:82:84:36:d9:04:04:78:00:1a:ce:7b:26:
4b:36:a0:75:07:10:9c:ee:5f:70:71:a8:d3:03:54:
9d:4f:f1:dc:48:e4:e4:32:1f:d5:ab:32:cc:6e:19:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:01:B6:68:9E:BA:FA:A1:3D:D2:84:7B:E6:FE:B6:36:F9:11:FA
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1b:7e:4f:a5:94:cf:0c:7e:bb:bb:11:13:c6:2f:a6:38:3a:
c3:6a:78:6c:32:ce:ad:05:56:32:29:42:aa:96:be:6f:69:89:
e7:06:cc:b7:33:69:35:6b:3b:37:18:69:c9:36:5e:62:9c:c2:
2d:38:e2:09:26:a0:2e:ac:5b:15:6d:b1:6c:f8:df:99:f5:9b:
9c:f1:1b:b3:96:3e:ae:1e:52:42:63:08:50:f5:96:7a:3c:7c:
5c:02:1b:87:8b:b9:2b:fa:06:78:44:89:07:3d:e3:28:d0:69:
57:87:d7:cc:81:e5:a4:28:f1:e5:d8:5f:2f:d3:1f:d5:c9:01:
c2:1b:7d:6f:f3:54:ee:05:ea:5f:9a:e0:dd:cd:f0:ae:99:f6:
11:69:f2:72:67:b3:77:15:bf:c0:21:23:c5:2c:12:b2:39:d2:
60:21:88:de:aa:86:98:ee:61:14:28:c3:32:dc:a3:e8:db:18:
34:49:f0:70:04:32:ec:0a:34:39:45:71:53:42:b1:ef:d0:e8:
99:79:fb:61:3a:f0:7a:8c:31:b7:d7:cf:6d:30:38:5f:e3:3c:
f7:1d:34:fd:dd:49:65:01:50:ce:bc:5a:38:2f:a8:ac:a6:fb:
08:7f:a5:50:67:e3:2e:a5:fb:98:5f:ab:81:aa:d1:20:c1:8c:
62:79:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:07:27 2025 by rpki-client