Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: 2Ic5SgCEyfnbLadS0wNHmWfN9zEdjxWzoLj70pqVT8g=
Subject key identifier: 5D:A7:A6:F7:26:8F:83:45:E7:86:DA:8C:1A:29:92:18:11:CC:D0:98
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019A0AB83CD960043833496B5D9D2AB2042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 07:00:37 +0000
Manifest this update: Wed 22 Oct 2025 07:00:37 +0000
Manifest next update: Thu 23 Oct 2025 07:00:37 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: BiRBk2Yinktvfa1Wb1l2FkDv/n8t+q2oclw2hASNEnk=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:3c:d9:60:04:38:33:49:6b:5d:9d:2a:b2:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Oct 22 07:00:37 2025 GMT
Not After : Oct 23 07:00:37 2025 GMT
Subject: CN=5da7a6f7268f8345e786da8c1a29921811ccd098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:9a:c5:5e:3a:db:da:e5:f6:3c:f8:4c:c2:
81:98:f5:16:2a:7e:a5:1a:91:01:b1:b5:a1:de:33:
25:b4:e3:ca:19:b6:3f:21:07:4b:15:86:9d:a9:68:
a4:ce:63:c5:20:89:26:07:9a:94:be:de:5d:23:d5:
94:ce:89:0d:ac:16:be:91:0c:eb:e6:82:7a:fa:53:
72:ef:54:52:ef:52:e0:13:bb:68:f2:1d:50:71:6e:
72:c5:4b:5d:c5:6f:b5:0a:7e:96:3f:c1:82:15:87:
e6:e3:9f:c2:af:26:27:59:df:d8:a8:1a:4e:70:a3:
d7:99:8e:53:f6:64:fd:fb:11:5a:a8:bc:3c:67:9c:
b7:58:46:06:61:99:da:bc:4e:88:1c:24:28:44:81:
94:76:bc:4f:d0:0c:92:f0:b0:52:63:aa:d0:2d:d3:
62:63:a7:f8:6a:2a:c0:c4:f0:65:6e:b6:f2:a2:7f:
d0:77:81:83:44:09:56:fb:49:d6:15:04:ed:40:60:
a8:7e:cc:d1:b8:14:7f:f5:d6:52:2b:8a:f8:bc:ad:
94:10:77:7d:27:cc:00:0b:37:fb:e7:f4:c5:5c:f0:
46:9b:4c:ef:b6:86:0a:a4:42:5b:60:d4:0a:3a:36:
83:0a:14:27:a2:15:9e:c1:cf:ac:5d:49:dd:f9:ac:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A7:A6:F7:26:8F:83:45:E7:86:DA:8C:1A:29:92:18:11:CC:D0:98
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3f:5f:ac:f5:d8:d0:c0:2e:c2:3f:5c:71:4a:49:fd:94:f2:
a3:af:fb:20:24:f6:33:4e:6e:dc:b2:f3:83:8a:af:15:6f:f9:
49:09:eb:69:84:b8:38:a2:8d:b9:fc:0b:a9:0b:3f:85:4c:d8:
54:63:4b:72:20:f1:50:43:7d:b9:10:41:78:8e:a2:63:00:81:
b9:b8:c1:ef:ef:fd:f1:f9:d3:b7:07:1e:44:89:ea:67:a6:40:
6a:44:87:a5:53:92:fc:e3:aa:41:e1:ca:f5:93:b1:b2:52:26:
f0:af:ad:f4:0e:21:48:67:0b:b0:79:06:42:ab:47:e0:e4:cb:
2a:6c:56:08:d7:bc:f3:e8:8b:b2:36:20:45:92:f1:23:57:fb:
22:9a:7a:0e:7d:c6:0c:f1:c5:79:3d:0a:12:c6:c3:fb:7d:d9:
78:5a:9e:4b:21:b1:f0:33:72:88:93:c8:41:d7:f0:79:a9:40:
b0:00:c5:cd:47:bf:15:3d:ee:cf:fe:78:e1:19:91:0d:17:5f:
3e:76:c4:bf:a5:f1:20:76:5c:3b:0a:f8:44:f6:ca:ce:5f:45:
fc:e4:1e:68:95:82:a1:f9:ef:19:c5:6e:41:fb:8d:d6:47:40:
7e:a5:b7:55:eb:5c:9f:ce:9b:a0:5d:42:04:21:93:18:cc:ec:
1e:ce:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:15:33 2025 by rpki-client