Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: IduDtIOe9G98WecQHe71M4f1PRhSsxi7y+kPXotA7pI=
Subject key identifier: 89:04:A4:17:6D:DE:45:13:EC:19:1D:2E:8D:D1:CB:CA:4C:5A:36:29
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 019A1EACB42D406AD4BC80B831D9C2F0F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 12E7
Signing time: Sun 26 Oct 2025 04:00:25 +0000
Manifest this update: Sun 26 Oct 2025 04:00:25 +0000
Manifest next update: Mon 27 Oct 2025 04:00:25 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: KBF7kGPhxGqaG4PtT6SHQjzJYUp0f0zU09p/QnWx6ls=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:b4:2d:40:6a:d4:bc:80:b8:31:d9:c2:f0:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Oct 26 04:00:25 2025 GMT
Not After : Oct 27 04:00:25 2025 GMT
Subject: CN=8904a4176dde4513ec191d2e8dd1cbca4c5a3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:2b:8d:5f:2a:3b:69:ca:80:5b:ca:22:e0:
2a:4e:95:10:72:a1:d2:b1:69:2f:87:12:e6:8f:b9:
2c:a8:ae:ca:2f:8f:e0:bd:b2:1b:ee:6c:9b:03:28:
77:f8:7f:b4:89:c0:ab:83:69:51:b6:d6:8b:c3:b7:
f8:50:0d:d2:fc:52:e5:d8:14:fe:ff:43:7a:09:05:
22:7c:18:7d:3b:85:d3:5b:82:01:4b:ae:05:48:56:
92:15:8e:90:a4:f9:ce:b9:9b:a0:b8:30:a3:37:d8:
d9:7f:63:e0:ac:4f:5f:c7:e7:3a:ba:15:f0:c1:63:
55:c3:63:f1:cd:0a:cf:1b:a1:9e:4f:9a:08:fa:eb:
d3:46:e4:43:95:2a:f5:dc:d1:49:12:4a:68:6b:22:
a8:33:37:5c:0b:6e:e2:79:49:51:98:b2:18:80:c1:
b7:67:01:75:95:77:00:b7:2f:e7:d4:be:b7:ce:81:
bd:d8:3e:7f:cf:98:16:02:27:03:56:3d:52:d7:c7:
5c:a0:b7:ba:53:5c:35:ca:c6:27:eb:93:95:d4:7a:
a4:28:1d:9a:ab:a7:ba:4d:f1:60:ba:62:3d:8e:e3:
24:3a:73:41:a8:ed:cf:41:52:0c:c5:a1:ca:72:e1:
a4:ac:ad:18:4d:3e:fb:7a:7f:c5:ea:6e:01:48:ef:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:A4:17:6D:DE:45:13:EC:19:1D:2E:8D:D1:CB:CA:4C:5A:36:29
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e2:8f:15:61:f9:82:a6:ad:d9:eb:f5:9c:c9:e1:3d:8d:78:
2b:e3:c3:63:a1:f0:72:a6:1d:71:eb:eb:b8:f2:9e:4a:55:29:
82:96:51:59:03:eb:8b:f0:18:a5:56:ff:06:b8:b9:ad:b9:7d:
2a:9d:b1:5a:f4:46:79:34:30:ff:ab:58:8c:db:21:c4:d3:d3:
cc:74:4b:87:b9:5d:68:94:c5:d9:fc:27:92:db:97:2a:de:7e:
96:ec:e8:96:d4:73:92:7d:14:df:e0:ef:c3:a9:92:39:09:72:
52:34:c9:1c:15:b4:01:e5:4c:e7:26:b3:ce:09:58:93:47:32:
92:0b:c0:61:5b:7d:8f:cd:2e:19:73:1d:86:63:33:6e:08:70:
f1:a2:49:0b:6b:9c:22:75:fc:82:c7:78:78:3e:30:5a:e2:50:
d8:c3:9f:0a:f5:a4:06:f8:80:da:28:6d:df:b7:e6:1d:b9:3c:
9b:8f:d1:d9:c4:b4:10:ee:c3:5f:0a:32:e2:f1:d9:9d:a0:75:
a2:28:56:92:94:96:9e:54:1c:c7:70:ba:75:05:2d:0c:f8:2d:
8b:85:27:dd:33:10:9e:e9:da:b6:85:13:95:4f:30:7c:aa:b7:
f0:5e:1c:47:6a:5a:89:77:df:8a:7c:a7:a5:fd:3a:40:a1:b3:
8a:f5:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:33:49 2025 by rpki-client