Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: tAO9UmfZgyVZ9FEE96mkoHyPlPYVQz+u6jwnXQG0q0U=
Subject key identifier: 64:68:6C:D3:8E:C8:D5:A7:7E:D0:C5:66:4B:7A:82:0A:CA:CD:72:B8
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 019A071230B6CA84BB59627C66E6F6F83303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 14:00:23 +0000
Manifest this update: Tue 21 Oct 2025 14:00:23 +0000
Manifest next update: Wed 22 Oct 2025 14:00:23 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: 6XNsQgzEFBdxikaUVpHkC+P70tsJGXzFkp3GRVdiimw=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:12:30:b6:ca:84:bb:59:62:7c:66:e6:f6:f8:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Oct 21 14:00:23 2025 GMT
Not After : Oct 22 14:00:23 2025 GMT
Subject: CN=64686cd38ec8d5a77ed0c5664b7a820acacd72b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:ea:b1:d1:3d:a6:c6:cd:bb:68:2b:41:24:
90:3e:d8:b1:6c:94:16:8e:d0:84:b6:04:05:22:18:
8c:f9:1c:d2:ae:34:4f:5d:20:f5:7c:f1:c8:b8:af:
58:f9:ab:b1:4c:45:be:7a:fb:4f:fc:24:a1:f3:c1:
83:76:e2:53:e9:82:68:3c:56:9a:32:2a:60:d1:95:
ca:5a:f5:60:76:7d:74:ae:98:e2:47:84:21:96:6e:
56:14:e3:46:ea:e0:71:09:89:85:86:d0:31:23:6b:
c8:6a:a9:e2:99:17:f7:a2:d6:72:80:57:bc:6f:14:
89:c2:3b:e0:f8:50:90:36:16:32:8c:47:6d:5e:a6:
47:f2:73:fa:4f:ef:af:b4:6b:b5:b5:c1:07:48:b9:
df:f0:5a:08:0b:d3:ce:9c:68:2f:fa:3f:9f:4f:42:
d8:79:4b:5f:a8:25:98:c5:ea:5a:d4:3b:44:5e:6a:
e8:c9:7e:a3:e7:c2:ba:30:ac:a3:2f:59:4d:25:62:
c5:2d:bd:be:82:d9:25:a0:be:20:0e:05:7b:ac:77:
da:83:25:d6:c4:87:12:ba:28:49:73:49:09:e0:98:
0c:3d:b2:c8:d0:65:fd:bf:d8:0d:ca:fc:66:59:7a:
c5:d0:91:04:31:80:39:49:8c:b7:7e:28:46:82:92:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:6C:D3:8E:C8:D5:A7:7E:D0:C5:66:4B:7A:82:0A:CA:CD:72:B8
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:7e:df:9f:63:e3:f7:21:c4:39:fd:c3:09:75:1d:2f:9a:
f3:f6:0c:79:8a:0b:62:59:b7:38:30:64:90:a1:0f:37:50:e9:
fb:6f:4f:54:0e:15:ff:0c:d2:4d:09:7d:d2:87:3b:28:8e:dc:
fa:83:c6:36:df:bc:db:66:b0:08:74:82:c1:2b:b3:5c:27:51:
e8:7c:13:54:67:52:4c:81:83:90:d0:a5:2b:51:e1:6b:93:03:
2c:d4:b5:2d:d4:20:ef:d3:cc:fd:59:71:e1:04:1a:a1:27:ca:
ae:72:c9:0f:b2:d4:e4:56:cf:75:3f:fa:1e:ec:3b:f7:81:59:
58:f3:a1:81:f1:31:01:94:6f:3b:66:e4:05:2a:b8:05:00:6a:
59:17:64:c0:2c:d0:bb:46:a8:b8:13:32:5a:f5:88:dd:0b:94:
fb:9d:01:24:1f:4e:ce:c0:59:f6:5a:ca:56:35:d4:3b:90:1c:
3e:0e:b9:dc:d2:26:dc:8d:74:d6:7c:58:89:ad:87:af:df:75:
6c:e9:97:cc:fa:62:17:6a:9f:d0:a4:c4:b6:52:51:50:9c:21:
c7:ef:16:1e:59:3b:18:4d:d8:e8:f5:2e:f9:ad:92:75:f9:77:
0c:a1:d4:c4:b4:8e:4c:1e:1f:1d:52:8a:e2:2e:a9:2b:72:bb:
ae:e5:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:28:24 2025 by rpki-client