Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: ztBBbzjuUALTips/Vae4SbDqqGYIL2Xw/44RNe9W0WQ=
Subject key identifier: F6:69:FF:16:42:C8:47:B5:F6:C6:32:50:2C:C0:99:15:1C:C9:E7:77
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019A0AB8138C88B3B1EE5A989910CCDD261A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 07B0
Signing time: Wed 22 Oct 2025 07:00:27 +0000
Manifest this update: Wed 22 Oct 2025 07:00:27 +0000
Manifest next update: Thu 23 Oct 2025 07:00:27 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: ToXhIWWeCbokzfjCU68zJBwouErCr/WKFTCOr84Q+8c=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:13:8c:88:b3:b1:ee:5a:98:99:10:cc:dd:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Oct 22 07:00:27 2025 GMT
Not After : Oct 23 07:00:27 2025 GMT
Subject: CN=f669ff1642c847b5f6c632502cc099151cc9e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:00:3f:34:b1:49:cb:73:50:9d:c1:ea:7e:
1b:45:54:71:53:f4:9b:03:e5:10:64:3a:53:22:13:
3e:a4:e9:48:7b:77:c7:06:79:0f:06:50:6b:b8:af:
a3:52:17:25:a4:6b:b0:b2:9c:97:b8:dc:e3:e1:ea:
d5:f0:37:f1:6f:60:0d:9d:a3:94:13:4d:d0:87:f6:
0b:4e:dc:f5:b8:26:fd:56:4e:07:78:54:56:9c:50:
c8:8e:05:f0:02:e2:ce:d9:b0:9e:8f:1e:d1:72:56:
a9:c5:ce:93:02:06:e8:4f:c0:7b:04:2b:59:64:88:
6e:c5:2c:4b:93:7c:ed:06:e3:1a:c2:35:66:bf:c6:
ae:6f:21:d1:0b:1e:88:1a:c5:86:a4:e7:aa:56:ef:
00:24:78:1b:23:e6:22:c2:33:05:26:0c:6f:0d:cd:
0e:2f:c8:85:5d:0f:68:b7:3f:2f:13:f9:b2:de:80:
49:00:89:be:97:94:45:08:f8:04:19:f5:08:7f:6c:
62:e5:02:d2:69:ba:39:8a:fa:a7:b1:43:24:b1:c1:
57:cf:61:d9:9f:b0:a2:66:0a:77:58:87:aa:9d:dd:
9d:b5:47:08:10:2c:ac:65:62:11:2b:c5:a2:56:8e:
12:40:62:2f:9b:d5:d0:bc:4a:c2:6f:99:dc:c0:79:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:FF:16:42:C8:47:B5:F6:C6:32:50:2C:C0:99:15:1C:C9:E7:77
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:67:67:8f:55:76:68:3e:57:8b:4d:7b:1d:91:78:1d:e2:
9c:8a:06:4a:69:cc:01:8c:37:ec:62:82:bf:db:55:71:66:b6:
8c:08:b5:dc:33:3e:3e:2b:40:16:83:07:5d:fb:ce:de:6f:3e:
d2:ae:1f:90:81:30:15:67:bb:40:69:1f:d5:b2:10:f0:f7:e2:
5e:0d:58:5f:fa:38:85:b8:0a:c7:ae:18:b5:a0:c3:4c:7a:13:
39:cb:fa:a5:f5:08:62:36:94:b4:a4:d8:7d:97:1e:e2:ca:f8:
01:b1:92:e0:f4:c2:b1:69:2c:9e:0b:ea:14:93:4b:f3:ee:80:
01:11:60:e9:57:da:79:40:3b:c4:00:7c:af:77:a5:f2:ad:08:
e2:f0:82:38:bb:c2:ac:76:a3:a7:31:05:af:a3:9b:17:e2:07:
02:43:ca:a6:93:78:48:1b:c9:54:77:bb:53:ea:9c:d5:44:d0:
0b:ab:09:5c:51:14:a2:1d:e4:da:5e:62:23:72:16:87:48:92:
ad:74:f4:7f:5b:ac:b2:68:26:34:32:02:c7:f2:ed:17:71:62:
4a:17:25:05:dd:ea:d8:4f:3e:0b:20:93:97:83:8a:14:ff:be:
f7:ea:ee:b6:75:9a:d5:12:b9:35:6c:96:e1:2c:af:31:37:24:
00:24:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:31:39 2025 by rpki-client