Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: /p0ogNNgPs1GqCVoyTj+ENtH1xHob3ycTH2wIW1Gomk=
Subject key identifier: 5D:0F:DE:9D:3E:F1:D5:5B:56:A5:4A:04:51:E8:DA:11:B5:53:19:1B
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019A183CD6AEA4031FE2C742AFA0E0929F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 22:00:31 +0000
Manifest this update: Fri 24 Oct 2025 22:00:31 +0000
Manifest next update: Sat 25 Oct 2025 22:00:31 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: IY6DZP1Vaf3Ge0vFXBQd1AfQHwX3kSbmEQDUieVGzS8=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3c:d6:ae:a4:03:1f:e2:c7:42:af:a0:e0:92:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Oct 24 22:00:31 2025 GMT
Not After : Oct 25 22:00:31 2025 GMT
Subject: CN=5d0fde9d3ef1d55b56a54a0451e8da11b553191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:f9:1e:48:c9:8e:b6:08:7f:11:e9:e1:49:
e6:ec:51:86:29:8a:25:82:d3:7e:21:58:b0:13:c4:
b6:9b:5b:99:8d:7c:7e:af:ca:1e:12:02:4d:c0:d2:
de:97:4f:bb:2d:e9:9f:48:41:a3:31:6b:f7:a6:d6:
98:ce:ee:db:2a:ad:c4:54:c6:2b:82:20:79:56:1a:
39:48:f9:1b:65:9a:12:83:fd:9c:e5:c1:07:7f:b3:
0f:97:77:c3:59:e6:94:e4:6d:d6:19:6f:1c:de:8d:
43:02:dc:9b:1e:0a:ba:c6:dd:c1:60:0d:b6:8d:d7:
0f:76:fd:c4:f2:31:9d:8a:19:72:48:3e:3b:49:61:
22:e3:17:b7:60:46:ed:e9:2e:c7:39:a3:aa:df:df:
7e:9d:6d:3d:6f:ee:21:e7:e5:89:41:68:fd:1b:4b:
04:a9:26:37:7a:69:dc:47:90:d0:54:46:7f:56:80:
1f:f3:2b:f6:db:e7:aa:1d:26:63:fd:37:67:d6:42:
6f:07:e5:03:34:89:7a:bd:71:d3:a5:8c:ca:53:32:
21:e3:ae:76:02:a5:df:fd:4a:4b:e5:7a:01:1a:62:
95:e0:d9:e9:5c:db:41:f2:c0:78:7f:af:1a:4d:7a:
28:fb:47:d7:44:a8:c4:78:42:c9:4b:5d:00:e4:4f:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:DE:9D:3E:F1:D5:5B:56:A5:4A:04:51:E8:DA:11:B5:53:19:1B
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:15:66:6d:0d:88:b7:26:34:b4:03:1b:5d:23:22:da:0f:aa:
35:8a:26:35:54:85:76:b6:02:d6:88:3b:b2:29:a6:1f:2e:89:
d5:5e:24:60:f8:17:93:a5:5e:91:3c:1f:e8:8e:5f:1f:2b:54:
c0:c5:07:b1:36:3d:51:32:89:83:fa:b0:ef:6b:18:a0:c1:dd:
74:54:c9:bd:78:6e:cb:a1:d8:7f:a0:79:67:23:1c:85:f4:cf:
2f:d0:58:36:65:5e:d0:e2:4f:61:db:42:2d:17:c7:a8:3c:6b:
e8:29:7f:a6:79:c8:0e:d1:46:3f:27:58:df:a2:33:e8:94:c5:
38:c0:3b:09:cd:12:d0:13:9e:78:26:4e:82:b7:65:c7:e8:1c:
79:47:87:ab:6c:7e:4b:ff:2d:9c:d5:29:8b:06:e7:5e:70:bb:
51:37:a4:c1:ed:56:39:01:11:0c:92:6f:94:24:55:38:43:10:
40:b9:a0:71:43:b1:3b:4d:6e:56:73:4b:d7:dd:c4:51:d5:0d:
4e:4e:e8:35:5b:f9:c9:1d:48:b7:48:0a:e5:36:9b:e0:12:a9:
1d:0b:90:c7:b1:d5:2a:ef:01:94:69:7e:bd:81:7c:7f:30:ef:
19:c3:59:c5:b1:c2:22:03:76:c0:16:4b:fe:5e:4e:d3:ff:aa:
56:57:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:35:31 2025 by rpki-client