Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: OzjPraqUEYfOthN+mzedu8iJRTZERYYhBat8fhiYQio=
Subject key identifier: 70:60:5A:87:82:EB:84:F8:87:64:D8:12:F2:07:27:39:D8:75:72:A3
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019A1ACFF7883BE69A48F79A714E2B273032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 10:00:28 +0000
Manifest this update: Sat 25 Oct 2025 10:00:28 +0000
Manifest next update: Sun 26 Oct 2025 10:00:28 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: bnxryoaxMtiIlQXTQgL4EDrQfnp+NTjsqmdXLZRFK3I=)
2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:f7:88:3b:e6:9a:48:f7:9a:71:4e:2b:27:30:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Oct 25 10:00:28 2025 GMT
Not After : Oct 26 10:00:28 2025 GMT
Subject: CN=70605a8782eb84f88764d812f2072739d87572a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:13:76:6d:08:08:92:e1:b0:ac:46:98:38:
70:21:07:6d:44:eb:64:3e:f3:4d:4e:84:db:dd:8b:
40:e1:9f:01:19:e8:b1:a0:bb:12:a6:b9:96:88:1a:
7f:a3:57:d4:e6:86:a2:63:84:ef:73:99:f5:0f:70:
6e:d6:07:a7:ce:af:50:e1:d3:26:27:b1:24:0e:b9:
53:e6:77:28:29:7f:00:b0:6e:7f:bd:f0:62:c6:a9:
1d:52:29:21:a6:ec:fe:ce:7a:f4:66:ec:82:44:58:
6e:ec:75:da:3f:6c:28:d1:93:28:20:1e:9e:62:30:
cf:2d:39:d1:4f:aa:bf:ec:dc:a7:8b:15:ba:08:e1:
ea:46:f2:fc:5d:63:ab:2a:e7:99:1c:16:ca:72:98:
38:07:78:fe:6a:4f:04:41:23:2f:28:4f:1a:ab:5c:
99:f2:79:dc:eb:8d:31:0f:61:c6:64:83:0a:45:7b:
5f:9b:93:4e:5d:d8:08:59:fa:a3:88:bd:1f:e6:4a:
20:f3:ca:18:90:1b:72:9e:70:1c:99:b9:d0:4a:2e:
bc:98:ca:5e:1b:e0:17:c2:40:7b:03:17:e6:d3:8c:
b6:d2:7b:c1:d5:73:29:37:ef:9e:f3:3e:18:d5:67:
5b:17:c3:7b:e0:f6:8d:8c:92:0b:16:84:c3:ef:1a:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:5A:87:82:EB:84:F8:87:64:D8:12:F2:07:27:39:D8:75:72:A3
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:e6:62:15:ad:9f:91:51:1c:db:93:e7:6a:00:7b:93:7f:
d7:b4:98:ef:14:4f:05:8e:d8:f4:44:b5:8b:ca:58:dc:57:b5:
6f:48:7c:14:bc:bf:e7:0b:f1:ef:0b:b1:47:db:a5:80:36:b0:
db:00:af:f0:78:74:97:43:6a:49:21:b7:18:f5:e9:71:9a:93:
eb:c1:bc:a3:8d:11:b9:61:6b:b3:aa:1d:ab:aa:77:82:7a:60:
e6:44:af:0d:0e:71:30:aa:c9:5e:28:2f:a1:ff:fe:d3:65:ca:
18:6a:85:ba:e2:12:53:2e:36:63:34:0a:f2:d5:ac:83:c4:b2:
c8:c3:0d:a9:e4:58:42:71:87:26:11:ab:29:1b:4b:09:62:60:
cb:1e:da:eb:f7:8a:bc:ff:7e:fd:39:d8:84:a7:af:ab:1d:2a:
4b:4e:12:3a:e9:74:f0:9c:49:1f:6e:06:41:5f:7b:54:50:cb:
a4:3d:db:62:0e:8d:0c:c0:e7:b4:c0:88:cf:a7:32:d4:72:36:
dc:fe:cf:72:bc:27:5f:41:92:9a:f5:26:e7:0a:ba:f2:5d:8b:
64:1d:a8:67:1c:ad:44:97:cd:65:80:4c:3d:f9:c1:21:9f:7b:
42:f4:f8:66:21:d4:b3:62:27:e6:bb:5e:c7:86:a3:9f:d9:5a:
fe:55:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:43 2025 by rpki-client