
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier: GrMnbgTjVlGb1Vel8pOojf7Hf6FLELurrhbRS4pTDxU=
Subject key identifier: 93:90:9A:A1:2A:06:45:71:2B:09:95:4D:99:82:1D:C2:0A:1D:FE:E1
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 019A047F988F90E308E38092E0553AE7162E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number: 15D4
Signing time: Tue 21 Oct 2025 02:01:02 +0000
Manifest this update: Tue 21 Oct 2025 02:01:02 +0000
Manifest next update: Wed 22 Oct 2025 02:01:02 +0000
Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: sfUz64zqxFTGY09dgU2C+/t4Gal/vr1pEuCeaSciHlU=)
2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
3: KqKhKARLMvPV_bRfQE5O-Q0jitE.roa (hash: g5DaBAVimvDHhHZlO6bebh2BYJNntLdIOufL8sw6/TA=)
4: PSzX4ETQs2L8cNC3MHgmvmQQifU.roa (hash: UakKPUPcxegOjzkx7/qLz6OeHL3ixKpktOgsps0SIHU=)
5: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
6: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:98:8f:90:e3:08:e3:80:92:e0:55:3a:e7:16:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Oct 21 02:01:02 2025 GMT
Not After : Oct 22 02:01:02 2025 GMT
Subject: CN=93909aa12a0645712b09954d99821dc20a1dfee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:ba:74:d0:a0:cf:fb:d0:ed:1e:bd:d6:90:
4b:6a:3d:2c:bb:52:75:76:e6:34:88:bd:48:fe:5e:
8a:0f:60:ca:3b:82:ea:a5:98:05:6e:e6:86:88:8d:
18:73:1d:83:2d:81:9e:3e:e9:35:02:d5:d9:0b:da:
a1:f1:27:60:ba:3d:7e:ae:5c:19:d5:f3:32:ee:89:
1e:dd:1d:97:de:2a:ad:d1:63:63:69:97:62:f5:d7:
e2:4f:f1:75:bf:51:b3:17:2f:a7:0f:a8:b6:10:ec:
d9:33:ce:cb:14:d3:6f:80:23:c6:d9:f3:60:09:8e:
3e:5b:10:dd:84:9b:fd:ce:44:d9:3d:06:57:82:2e:
c7:01:2c:67:84:12:d5:ac:da:d9:50:11:e2:a9:7e:
e3:39:c3:0f:b6:a5:2d:3b:e0:90:61:62:87:bb:64:
45:c3:da:8c:85:da:8e:98:5d:1a:48:58:e8:e5:31:
71:c3:5a:96:80:79:43:14:c9:54:ea:b0:f2:79:1f:
da:49:dd:fd:32:e8:7d:6b:3f:8f:e4:7f:57:21:bb:
97:95:35:6f:70:9e:b3:84:75:81:88:dc:a3:19:22:
ed:76:18:58:ce:6f:b8:5a:41:ef:5c:73:79:41:ca:
10:d5:c0:03:62:7b:6a:f2:16:a4:3b:25:d3:55:3c:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:9A:A1:2A:06:45:71:2B:09:95:4D:99:82:1D:C2:0A:1D:FE:E1
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c3:72:0c:c4:ec:86:b4:36:87:f4:99:8a:de:df:23:1a:12:
6a:e9:7a:8f:1d:c9:17:be:dc:a5:7a:d2:2c:61:fc:ed:94:e8:
b6:f3:67:58:25:4f:bc:1f:cc:8e:bf:45:a7:3a:cd:42:99:33:
68:83:ae:a7:19:90:c8:eb:2e:88:e6:46:82:81:58:65:45:dd:
2f:8d:d0:2b:62:8f:88:97:29:8b:1c:19:df:a8:b3:23:3f:05:
d2:ad:96:f1:56:24:b0:14:2f:3f:5a:4d:0e:16:77:fd:73:fd:
d0:7c:16:b8:e7:dd:75:68:80:db:09:61:a7:1f:61:a4:51:30:
68:02:37:ce:85:49:3c:53:d7:b0:46:c9:a8:4f:3b:e2:b2:9f:
2c:bd:98:65:fd:d2:f2:39:27:3c:4f:af:d6:f0:41:a7:53:17:
0f:57:a5:a7:05:e1:71:b2:fa:27:67:7d:7e:e1:a8:12:c2:6d:
63:f7:ab:fe:7a:81:ab:14:c5:4c:bd:a9:0d:92:a5:24:84:36:
32:44:b6:06:da:0f:22:38:8a:5f:88:4d:39:e3:e9:c1:41:c4:
77:10:f0:f5:68:84:8f:05:de:d1:21:56:cd:32:b6:8f:ff:03:
28:88:4b:ee:c6:14:83:b8:b1:4b:82:bc:c9:f0:af:b2:27:b2:
5a:3f:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:29:45 2025 by rpki-client