Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: FZXfFnwA68bpj+/oXJ1WXC8iCb2wGZpBXD/yomBxN1s=
Subject key identifier: AD:F9:1B:D0:E3:C7:02:ED:53:5B:5B:6B:88:74:EC:39:E1:6D:42:C0
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019A221B73F981F54B0C15231DFFBF836E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0434
Signing time: Sun 26 Oct 2025 20:00:15 +0000
Manifest this update: Sun 26 Oct 2025 20:00:15 +0000
Manifest next update: Mon 27 Oct 2025 20:00:15 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: xHRsRz4VB9Y8CnF5mJzjcQO+pTcBb+yDS2jbXP20lpM=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:73:f9:81:f5:4b:0c:15:23:1d:ff:bf:83:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Oct 26 20:00:15 2025 GMT
Not After : Oct 27 20:00:15 2025 GMT
Subject: CN=adf91bd0e3c702ed535b5b6b8874ec39e16d42c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:f6:41:f7:b2:47:4a:8c:0c:48:16:89:dc:
71:ee:bd:41:cb:f9:d5:7b:10:64:d9:b7:ae:49:66:
f1:24:73:f4:93:3f:86:22:5b:5c:f2:29:44:74:18:
31:23:c7:d4:c3:46:da:20:1f:59:13:ef:07:26:28:
7f:e0:6a:ea:c7:54:f5:81:06:d5:0b:df:9c:97:f8:
92:65:41:7d:b0:92:55:d8:8e:cb:34:63:4d:64:05:
35:9d:c3:c0:6d:ae:df:be:aa:57:20:4a:64:3f:db:
7e:ec:66:ba:03:93:63:00:58:a5:a0:24:c4:22:11:
97:3e:3d:d6:7f:bd:61:50:25:f0:af:ea:5f:98:9e:
f7:66:16:be:c9:86:5d:2d:87:74:7b:9d:2f:9a:47:
ec:a0:0b:2a:b3:86:fd:c4:c6:39:90:25:db:0e:45:
af:7c:68:87:f7:a8:da:2e:1f:41:4f:eb:45:1a:01:
24:93:e6:87:52:f8:e2:71:c0:e7:74:f7:fb:19:3b:
39:05:bd:7d:a1:90:ca:00:12:af:4b:7a:56:cc:44:
5a:3e:e2:ff:04:0b:e9:2a:cc:3b:22:31:1e:51:2e:
1c:86:41:c7:1f:91:0b:f8:df:ca:e2:17:0b:ef:72:
c2:c8:7c:55:d0:60:a9:81:3a:82:94:0f:73:27:61:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:1B:D0:E3:C7:02:ED:53:5B:5B:6B:88:74:EC:39:E1:6D:42:C0
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9e:de:55:54:1d:74:c7:03:30:3b:88:99:ab:26:59:66:47:
56:54:2b:85:95:cb:cd:01:fb:0b:8d:18:a3:3a:d0:cd:eb:5d:
d1:af:33:80:96:f5:ef:d5:fe:a3:49:c0:d6:b2:30:25:68:b6:
7f:5f:48:6d:63:a0:64:2e:46:d2:17:12:13:75:51:dc:fc:98:
2a:d1:3f:2d:24:35:b6:aa:03:dc:5f:f4:af:92:14:c8:c1:14:
0a:4a:27:ac:8b:eb:9a:c2:de:1e:1a:db:25:e2:47:25:b5:cc:
89:5d:65:90:db:1e:72:1a:2f:f0:7c:77:cf:61:f2:a6:0c:62:
22:72:c9:48:b9:f1:fd:87:27:fe:25:b0:17:e7:68:c5:b5:2d:
fc:2a:e4:ab:d7:cd:71:03:e0:15:72:fb:d1:ec:c8:7b:04:1a:
1a:da:22:69:20:36:aa:08:3c:b0:9a:55:91:39:b8:86:84:67:
78:34:ec:f8:f7:2d:20:73:43:03:e9:1e:bf:46:87:bd:fe:bd:
8c:2e:d2:f9:76:f0:c2:60:54:f7:54:73:ac:aa:77:2d:0e:c9:
d0:11:55:ce:07:2a:28:94:68:54:d5:af:74:70:f6:d9:60:d2:
38:68:bc:0f:b2:cb:70:04:3c:0c:9c:27:b5:dc:92:a9:1e:49:
10:49:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:17:21 2025 by rpki-client