Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: BRlqgJPk9pnQRL+3gIAw92AtVcOB/uJfmFN9u72HVVM=
Subject key identifier: 11:85:47:62:B1:A9:29:3B:40:E4:42:8E:A4:2A:FE:57:6F:21:31:D6
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019A09374D7B2E32E6EC8E0CC6BE95D7E105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 0358
Signing time: Wed 22 Oct 2025 00:00:10 +0000
Manifest this update: Wed 22 Oct 2025 00:00:10 +0000
Manifest next update: Thu 23 Oct 2025 00:00:10 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: Ians5uJEu4nWIH4dHLu+puaVuMd7ikTg6Sh9CdqaD6U=)
2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:37:4d:7b:2e:32:e6:ec:8e:0c:c6:be:95:d7:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Oct 22 00:00:10 2025 GMT
Not After : Oct 23 00:00:10 2025 GMT
Subject: CN=11854762b1a9293b40e4428ea42afe576f2131d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:68:37:ed:c9:1e:1d:24:45:78:42:41:cd:
20:12:5b:23:3c:d6:6c:ec:0b:93:ff:83:35:89:3e:
a0:94:94:35:8c:e9:7c:5a:48:5c:78:df:01:8d:80:
5b:f6:65:b8:fe:e9:f0:81:0f:be:c1:2b:3f:d6:6d:
57:a7:e0:99:38:6a:e1:06:af:41:7c:ac:1b:39:f6:
bf:e0:60:00:6c:d7:ed:82:bb:63:b6:c5:6f:e3:39:
5e:8a:b6:dd:28:8e:d8:6e:16:91:25:c2:de:80:66:
f5:b7:de:5e:ef:80:8a:13:d9:24:4a:00:92:80:91:
ea:29:25:8e:9e:dc:79:8f:1d:29:ef:39:cf:ae:fd:
dc:ef:34:6a:70:53:c8:62:88:5a:72:86:c7:4a:cd:
f1:66:3f:a8:f9:89:7b:48:ea:5d:ab:c1:8e:9e:37:
87:b8:b8:7d:52:30:6b:fa:ba:a5:94:e7:94:bc:c3:
4d:e6:a2:75:43:32:dd:4e:d0:44:c7:d4:cf:49:a4:
77:44:6a:df:01:8e:ed:6f:d2:ad:c4:73:42:10:7c:
ad:ee:ec:81:6d:9b:6a:b1:89:ff:78:cb:07:b8:5e:
50:0f:8d:cf:f3:d0:f2:fd:02:51:1f:90:b5:0d:51:
ec:6b:50:5c:fa:3f:d6:41:42:a8:72:06:77:41:87:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:47:62:B1:A9:29:3B:40:E4:42:8E:A4:2A:FE:57:6F:21:31:D6
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:40:96:04:7f:ef:f2:b2:57:fc:2c:58:f3:3a:76:cb:8b:
ba:6b:0f:c8:78:9b:54:a8:02:37:41:33:67:bb:ec:c9:00:17:
e1:b1:3c:f3:fc:17:d0:d0:71:f6:1c:5a:5f:5d:53:13:88:31:
48:bf:db:71:40:f8:2e:20:ba:6d:50:42:ea:15:60:d1:3e:95:
d7:80:f1:00:a5:57:b1:f7:08:0e:c8:6c:89:6b:9c:80:3b:38:
24:98:f4:4f:85:4d:d9:ef:d9:3b:ab:a0:1c:e5:ad:cd:f0:5e:
88:63:f1:88:24:d8:7b:0c:07:f5:f6:e0:98:7b:73:84:ef:24:
06:21:f0:fa:0a:cb:67:3a:f0:af:d8:d3:d5:79:13:45:c7:b5:
7d:55:c0:1a:3b:c9:90:ec:df:f6:f0:03:1e:e5:b2:96:43:bc:
ac:e5:dd:6d:09:40:ce:15:97:00:6d:dd:a0:e7:42:cd:49:b9:
5e:60:88:e2:7a:89:6d:44:25:33:7c:1c:3d:42:a5:aa:bc:ae:
92:44:df:46:37:93:ab:9b:25:e4:08:dd:f6:75:dc:b2:ae:b9:
62:d0:a2:a8:c6:2e:c1:58:49:10:2a:ad:bc:3b:9f:81:12:28:
7d:19:f8:33:a4:d6:d2:9e:55:72:f4:82:2d:59:ca:15:0d:df:
97:44:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:58:31 2025 by rpki-client