Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: BjMRvOZocqDy3rEBveRN+DqCoGhqjt61SK/XZqX/Nq4=
Subject key identifier: AC:A9:2B:91:1A:50:7F:A6:41:F6:25:AB:A0:5F:13:49:0D:7A:E0:9E
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01994DAE4A7DBE4BBABE9726D4860FD168DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1690
Signing time: Mon 15 Sep 2025 14:01:31 +0000
Manifest this update: Mon 15 Sep 2025 14:01:31 +0000
Manifest next update: Tue 16 Sep 2025 14:01:31 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: XIoHMMCVP+Ke1/mUx2q6mjHCg7JmLFFHbfqY/F2ij6w=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:ae:4a:7d:be:4b:ba:be:97:26:d4:86:0f:d1:68:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Sep 15 14:01:31 2025 GMT
Not After : Sep 16 14:01:31 2025 GMT
Subject: CN=aca92b911a507fa641f625aba05f13490d7ae09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:c6:3d:84:33:d4:d5:92:fb:02:e2:96:af:
1d:4e:14:4f:24:ca:99:c6:7d:37:29:d6:10:61:c8:
2a:00:98:a9:08:81:13:b8:00:60:c0:17:27:3c:78:
cc:fe:4f:e9:14:a4:11:cd:d9:b7:90:da:8e:22:19:
8f:6a:71:2b:35:71:1e:77:82:f7:cf:c0:0f:79:22:
d7:8c:0c:b8:c9:a0:ac:af:31:35:f4:b9:ab:43:ba:
90:50:71:98:e8:12:13:4e:e7:69:ef:d1:2e:66:61:
ab:0e:16:1d:84:64:10:35:0f:50:43:09:ef:28:10:
4d:e7:96:db:99:4a:43:ac:7e:95:3f:19:6e:e2:b1:
f8:14:54:16:a2:94:65:d5:63:6b:d5:a2:b4:a2:cd:
68:8e:aa:92:5f:d7:0a:2d:df:8f:e9:0b:7f:64:f8:
f6:58:89:2b:79:45:a7:82:37:47:c0:2d:4b:59:52:
cc:6a:f4:e5:25:f8:73:59:8a:41:44:23:df:19:6c:
c4:e9:fe:13:8f:de:cd:cb:ed:c5:62:36:10:a8:47:
9a:71:e4:f1:98:e3:4f:34:69:43:e7:0d:b8:bb:29:
76:48:2e:73:ab:b7:88:59:b8:42:2b:22:4e:bf:50:
6c:33:ef:45:4c:1a:e1:43:09:8d:60:be:56:20:51:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:2B:91:1A:50:7F:A6:41:F6:25:AB:A0:5F:13:49:0D:7A:E0:9E
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:eb:86:cc:a6:29:6a:ca:e8:5c:fd:ec:88:1b:8a:87:5b:02:
10:a8:a1:fe:96:c9:0d:38:da:72:c1:8e:e9:a4:65:81:67:1a:
cb:95:eb:ab:1d:9f:67:99:db:23:87:78:53:04:9b:66:69:2d:
2d:56:ad:6a:de:26:f3:43:73:62:d5:8e:01:e0:6b:eb:93:40:
c5:d1:3f:9d:ab:2c:54:c8:30:b2:9c:d2:c1:f4:1f:0d:7c:22:
4e:be:32:fa:22:fe:74:40:15:11:32:2a:06:3a:c1:87:f4:b5:
60:bf:cf:31:ab:93:b7:36:8a:fc:2b:a0:41:33:c0:06:4f:96:
32:a9:70:ec:95:e1:41:71:7b:ed:99:96:93:e9:b5:ec:68:ca:
ad:57:7a:36:96:7f:1b:28:2e:45:ca:52:bd:2d:8f:a1:5c:19:
b2:6a:12:22:c7:77:cf:84:fc:91:b6:8a:dc:e6:9d:b5:af:a6:
a4:3a:3c:40:db:40:91:55:07:be:79:91:c3:16:35:90:84:83:
0f:5e:f8:77:88:a5:6a:f3:91:cd:25:ce:18:83:f1:c5:64:8b:
3d:fc:c1:d5:e4:3d:3e:15:1c:8c:45:1a:ac:97:80:fc:a5:4c:
68:96:a7:d1:23:05:50:f7:0b:5f:02:e1:ea:e3:3b:48:b5:cb:
41:35:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:07:09 2025 by rpki-client