Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: sUfo4JXPzqY4VAvqSQgF4S/6dyUsKUOzJn8tx+P0OUU=
Subject key identifier: CB:FB:4F:D1:B5:A3:CF:73:98:5B:65:59:0E:2E:62:38:FB:FE:35:56
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019A1FF694A4E7CDBCCF80BB8273B19620B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 10:00:44 +0000
Manifest this update: Sun 26 Oct 2025 10:00:44 +0000
Manifest next update: Mon 27 Oct 2025 10:00:44 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: 9k7/YxoCm+ZH0+AiP9UFhmYlCrpkwiFGSgGC1uYO7Bw=)
2: j5EgrSQFNO5qiK2MQhAbkuBr0AM.roa (hash: 3l8vc26sWxsBZ7GtQ/O2+xbOokopGZddgpM84WquKxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:94:a4:e7:cd:bc:cf:80:bb:82:73:b1:96:20:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Oct 26 10:00:44 2025 GMT
Not After : Oct 27 10:00:44 2025 GMT
Subject: CN=cbfb4fd1b5a3cf73985b65590e2e6238fbfe3556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:1f:65:09:b7:19:9b:83:e5:e4:6a:8a:f0:
c2:36:76:a2:99:66:74:b5:59:c1:92:44:0f:ba:f9:
cd:dc:3f:cb:11:08:1a:43:7c:e4:9e:69:1c:78:4b:
19:23:cf:25:80:2c:83:f0:33:38:be:fc:c7:16:44:
be:05:ff:35:13:a3:c1:d6:2e:90:27:82:5a:5d:ac:
b7:ea:91:6d:f9:8e:e6:47:af:84:ee:27:08:6f:ca:
97:6e:94:1c:7f:46:4e:dc:a0:25:1b:fa:e6:ef:85:
3e:70:35:00:be:cb:92:db:d1:98:07:dc:7d:d6:8b:
78:95:27:4e:b7:60:42:4a:30:bb:6e:54:e8:c7:b2:
36:b9:5f:03:d5:e6:47:cf:10:ca:27:ba:b2:80:3b:
dd:52:68:aa:67:47:0d:30:a6:8e:fe:0d:80:22:40:
9a:44:3d:bf:2e:d6:ac:21:17:b9:96:8c:c2:4d:9f:
39:80:6c:f4:b6:51:32:08:c5:ba:eb:8c:74:aa:e7:
7d:bb:2b:c3:53:01:b3:01:0f:76:27:7c:ed:95:20:
77:74:af:2e:3c:3f:d3:c5:ed:69:81:c7:92:4e:ec:
26:3a:a1:f6:93:8e:ff:33:49:e4:aa:77:fa:10:8e:
d5:c6:51:95:4b:06:fe:ab:93:84:cd:61:75:e1:41:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:4F:D1:B5:A3:CF:73:98:5B:65:59:0E:2E:62:38:FB:FE:35:56
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:62:cb:44:4f:d6:79:0e:f0:d4:39:05:53:6c:ac:d2:f1:
68:f0:08:8a:df:7f:10:40:3b:32:da:29:28:d0:3e:79:07:a0:
94:ce:ee:11:ec:1b:60:33:09:b0:1c:43:37:81:9b:ab:87:79:
04:4e:1f:93:f9:e0:4a:cf:6e:c5:06:f7:57:87:1f:34:5d:78:
5f:c5:85:9c:30:31:aa:95:7f:b4:58:b4:2b:0d:03:db:8a:62:
c9:d7:7a:22:ea:95:4b:e5:3b:00:40:47:7a:d7:ea:96:ea:2c:
c9:46:30:18:bc:23:47:49:66:a2:2a:c3:54:a0:c7:be:fd:b6:
ed:bb:76:3d:e4:df:3c:4d:cf:4d:c6:f3:69:f7:cd:36:a8:cf:
71:e6:80:5e:c2:ee:46:6b:87:78:fd:3f:55:c7:e4:bd:9a:3e:
f2:7a:46:b1:a8:9b:e5:10:d1:c7:50:58:ab:ca:b3:f6:8e:1b:
b5:a8:cf:de:83:fc:e0:bb:c3:26:44:b3:67:dd:8d:ca:27:05:
c6:78:38:e9:52:b5:f5:a5:bf:c6:d5:c2:57:30:3d:8d:4a:ea:
96:10:63:22:c7:c1:cc:9c:a4:ee:3e:1c:16:96:56:ef:bb:8b:
ae:40:1c:93:8c:06:75:ca:be:ba:05:8c:81:8f:e4:7e:c7:80:
21:ea:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:45:27 2025 by rpki-client