Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: puR9H7VCUk1AD4nk2raaiaWBKlIagkseQE1hv//uV1w=
Subject key identifier: 27:08:04:D0:88:28:E1:4D:34:B9:B4:78:F3:92:B8:F2:3E:1F:96:16
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 0199FEEBE24DB8F068A45A4ADFB1707DA4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0A66
Signing time: Mon 20 Oct 2025 00:01:35 +0000
Manifest this update: Mon 20 Oct 2025 00:01:35 +0000
Manifest next update: Tue 21 Oct 2025 00:01:35 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: frU/jGLvpDfOPetz3T10U2dbWk95GtOd/xlV6ZNHRmY=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e2:4d:b8:f0:68:a4:5a:4a:df:b1:70:7d:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Oct 20 00:01:35 2025 GMT
Not After : Oct 21 00:01:35 2025 GMT
Subject: CN=270804d08828e14d34b9b478f392b8f23e1f9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:65:31:e5:a0:8c:26:87:6f:a9:da:a1:81:
10:b9:4d:47:ab:af:4f:56:4f:ae:dd:7a:bd:c1:b0:
4c:e4:17:82:6c:ed:51:62:e4:28:65:52:50:64:6c:
78:de:db:da:b5:9d:3c:4f:3e:e4:a8:ea:09:66:25:
98:5b:02:ab:41:6a:96:40:b9:c7:19:56:08:23:2e:
63:0c:98:60:05:65:c7:f2:fc:df:9d:31:47:f4:61:
a3:42:a8:fe:ba:0f:47:f6:e9:19:ff:99:5f:c8:20:
0b:ba:79:17:ae:e6:73:7b:2b:fe:72:d9:bb:1a:93:
47:54:fc:78:d4:4d:2c:c6:a5:e9:7c:72:54:6f:f3:
57:18:8e:05:81:01:d9:3e:c0:48:a8:01:46:4b:ef:
5e:2b:43:cd:ca:e7:d9:35:15:0b:c4:19:f3:08:8f:
34:62:7a:49:da:d7:00:19:11:c3:66:6a:d7:ed:31:
c2:d4:1e:80:cc:aa:cf:3b:02:f6:60:45:cb:e3:e1:
bc:68:e8:d4:f4:68:d9:4e:d8:b1:32:0d:c5:ae:71:
3b:9a:97:72:2e:94:aa:55:4d:5b:f6:75:cb:4e:b2:
37:4e:aa:e2:c4:c3:aa:ce:4d:e4:52:5f:19:5a:a2:
ed:7b:bd:ee:8c:d4:dd:a4:ec:e5:16:be:0a:fc:85:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:04:D0:88:28:E1:4D:34:B9:B4:78:F3:92:B8:F2:3E:1F:96:16
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:52:7a:2a:d8:ce:7f:8e:24:4e:5b:68:67:e9:2f:10:3d:71:
ec:63:8f:bb:7b:05:63:74:06:62:5e:5b:9b:d9:10:94:df:ae:
4b:1e:4e:20:01:9d:ce:b6:1e:54:96:cc:67:c8:a5:bf:d9:0f:
0d:01:c9:1f:29:ed:20:81:1c:07:07:a1:78:1f:ec:7b:d9:e6:
d0:33:3d:97:b7:2c:ae:8d:db:63:3d:d2:83:db:f8:83:20:ac:
a6:d2:9b:c2:ad:89:2e:16:5f:74:0f:fe:8a:ac:ff:72:5e:57:
08:eb:4a:26:0f:50:87:5a:4b:56:67:65:b1:8b:8f:81:ae:1f:
ec:8a:da:3c:da:62:33:7c:a9:ad:b2:64:82:a4:1e:2a:dd:74:
0a:32:b5:56:bd:a9:28:d2:25:49:06:08:b4:9e:78:2f:81:f6:
07:03:05:57:96:c5:26:8f:0a:eb:43:7c:4f:d1:41:bf:5f:93:
74:c4:e5:4d:f0:b7:7d:3f:ea:fd:c0:46:5c:bd:25:9f:58:04:
4b:14:12:45:58:40:3f:4d:d7:ff:20:ba:a1:06:67:f7:c4:a4:
14:20:77:b9:28:ae:b4:74:a7:32:f7:10:c1:43:21:db:7d:a9:
d1:54:6d:80:15:c5:95:19:26:cc:3f:f9:e5:4c:5d:0b:be:2e:
bd:52:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:09:04 2025 by rpki-client