Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: CFlcvIfU0EeawrwRGu2KaEXys+sCx3QbPJ2JfYQyoQ0=
Subject key identifier: 8F:D0:17:83:26:53:39:C6:78:CC:CF:86:8A:AC:9E:05:E1:C6:D3:D7
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019A228B1AF7604614BDA8443082E436E27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0DA1
Signing time: Sun 26 Oct 2025 22:02:12 +0000
Manifest this update: Sun 26 Oct 2025 22:02:12 +0000
Manifest next update: Mon 27 Oct 2025 22:02:12 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: Sm9jqBla5eJzwWnbNLDevBKdfjmK0kPQyXY05xCWIrE=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8b:1a:f7:60:46:14:bd:a8:44:30:82:e4:36:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Oct 26 22:02:12 2025 GMT
Not After : Oct 27 22:02:12 2025 GMT
Subject: CN=8fd01783265339c678cccf868aac9e05e1c6d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:ee:d7:72:00:d8:1c:50:28:c1:71:10:46:
7f:4e:75:37:cb:ff:d1:d4:32:ff:85:fb:18:ab:f4:
cc:8d:98:f6:0c:7c:24:cb:8d:f1:8b:4d:b4:b9:c9:
32:76:a8:a1:8e:a7:50:b2:79:a1:c2:3d:a9:2d:2d:
8e:54:e0:79:3e:67:da:77:d2:7d:1e:5e:a1:07:79:
05:f3:73:87:bb:72:3f:db:44:93:42:6b:c1:66:2b:
8b:0a:84:4e:3f:aa:fd:75:91:d7:47:9b:50:dd:01:
40:30:aa:a4:0f:eb:b8:c3:b8:ee:bc:4e:82:25:b2:
ef:aa:82:2b:2f:74:2b:ed:5f:2d:e2:61:86:49:9f:
25:ae:b1:17:29:c0:9e:60:a1:5a:5e:85:91:d7:ef:
91:12:3b:99:62:14:e8:2f:1c:ee:b8:c0:5f:9f:01:
15:ba:22:55:f8:f7:9f:26:ce:d1:e2:d4:3b:49:51:
80:69:b5:bd:0f:01:32:9e:08:bf:53:e2:ea:e4:16:
c2:7b:c1:13:91:17:f6:75:e5:bd:66:45:1d:e0:1b:
5b:44:10:f9:bb:52:1b:e2:53:d8:56:08:7c:69:eb:
66:66:66:30:98:0b:d9:c1:63:e6:f5:e8:88:65:9c:
73:72:ee:9c:d6:1e:10:ba:3b:f7:e0:d7:e2:e3:52:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:17:83:26:53:39:C6:78:CC:CF:86:8A:AC:9E:05:E1:C6:D3:D7
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:79:80:79:1f:1e:4d:c5:d1:4b:60:2d:47:3c:a7:b4:35:00:
ab:3c:a9:8c:c1:93:f6:08:fe:35:de:39:c9:55:b8:b6:42:f1:
9d:b8:76:c4:69:b6:9b:59:c6:f8:82:88:3a:50:b3:32:00:fe:
35:b6:91:0e:2d:83:f5:54:0f:fc:01:c7:66:d4:f5:89:73:c8:
be:1d:de:7c:8d:f3:73:db:c7:85:79:0c:e2:ea:49:d9:c5:a1:
ea:3f:b9:0b:ab:b6:2f:dd:d1:dc:d8:81:50:13:e4:9e:05:2a:
96:63:cc:ee:df:0b:99:fd:b9:50:73:18:61:b8:c5:c3:21:5a:
4d:f4:0b:de:ad:dc:ca:b9:b2:f6:f6:ec:2a:4c:87:3a:ae:4d:
f6:ba:5f:e3:bc:7a:d5:3d:ad:ea:55:a4:fb:22:a5:9e:5e:d4:
d6:96:21:78:e4:67:07:bb:d0:27:25:06:1a:19:59:b5:50:f4:
ae:8c:d3:37:01:97:1e:c4:1b:49:de:76:23:c5:d4:04:4b:54:
00:5c:66:12:35:79:6a:15:31:bb:bd:56:b3:b4:23:4e:03:8b:
11:94:f7:19:69:66:f4:75:0c:be:2c:b8:c4:11:52:03:50:de:
26:8d:be:51:c1:9a:2d:18:d9:2c:e8:7d:bb:b4:0b:48:e8:cf:
da:0c:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:48 2025 by rpki-client