Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: 5R8VwGyIqyDQCbubcSX6qaykwcVQYyA+lVciwmV1a04=
Subject key identifier: FD:7E:64:F9:DF:82:2F:86:E8:70:22:4A:FA:C6:43:16:1C:96:7E:1B
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019A0BCB58D7FC24D1953210F1C6A3604FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0849
Signing time: Wed 22 Oct 2025 12:01:07 +0000
Manifest this update: Wed 22 Oct 2025 12:01:07 +0000
Manifest next update: Thu 23 Oct 2025 12:01:07 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: iPd0xRzv+FYjDleVgLE8rGVnft72KnbKaL0TyYjAncA=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:58:d7:fc:24:d1:95:32:10:f1:c6:a3:60:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Oct 22 12:01:07 2025 GMT
Not After : Oct 23 12:01:07 2025 GMT
Subject: CN=fd7e64f9df822f86e870224afac643161c967e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:35:63:89:28:c2:32:1b:73:a9:08:38:ea:
ff:66:ab:4f:bc:90:53:2e:76:d5:e3:6f:55:99:bc:
a1:61:6c:82:95:fd:c3:80:6d:e5:d4:3a:ca:84:22:
1a:ed:63:60:11:7d:4d:2b:4e:7d:b0:fc:69:30:23:
e9:b6:ad:94:00:35:4a:15:6b:df:d7:72:9f:35:e4:
ff:29:bc:7f:ba:d6:54:ef:bf:55:94:d7:7c:c0:4e:
d8:80:8b:85:ff:00:ec:87:34:03:01:d2:6c:45:e4:
71:52:67:47:e3:1a:61:a6:4d:eb:04:94:6c:e2:00:
6b:e0:f1:90:c7:6c:61:62:15:2c:49:26:f9:12:c3:
01:c6:5b:65:b4:24:35:c4:8d:6c:d1:a6:18:8d:9b:
64:df:c6:84:75:7b:f6:40:c6:79:10:50:ae:a9:0e:
c5:bf:ce:bc:e0:f0:6d:dd:4f:67:af:c3:40:0c:80:
62:82:8f:fc:79:07:cb:c8:ee:5a:91:fd:2b:ac:f4:
35:c8:08:a4:a3:f9:23:18:63:46:b3:1f:25:2e:d6:
9a:97:60:8d:0d:d3:bb:aa:03:cc:6e:66:92:27:e4:
27:be:24:ce:e4:b8:6e:e0:82:f9:b4:f8:c1:59:8e:
74:9c:11:e5:9a:c4:41:51:f2:ec:f8:c6:ef:c9:ca:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:64:F9:DF:82:2F:86:E8:70:22:4A:FA:C6:43:16:1C:96:7E:1B
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2c:ba:c4:f1:1f:8e:06:d3:e5:ef:ea:9b:a0:53:bd:b9:86:
d0:c3:7b:6d:79:3f:20:16:6a:f6:ec:17:24:2e:d7:b1:50:77:
3f:5e:f7:cc:6d:7d:55:dc:da:2b:eb:35:08:e0:2b:55:4a:b1:
dd:05:7f:21:6d:f9:76:1f:7f:cc:2e:d6:5f:cf:3d:dc:e7:96:
0f:b7:8e:9f:a5:27:99:d5:6a:68:84:5c:42:91:56:c1:c7:72:
3e:d6:70:7d:e8:ba:ee:83:79:99:c9:9a:ee:c1:59:10:a9:90:
30:e9:96:6c:e4:06:0e:65:ba:8f:f0:8e:1f:f9:08:52:a5:e9:
6e:5d:64:85:b8:84:09:c5:34:7f:b9:bc:42:93:a9:cd:f2:a1:
6a:0c:e7:d0:60:f3:bd:08:5d:56:e6:0f:3f:11:ca:a9:6c:55:
24:32:36:99:00:61:ab:02:18:7f:ac:9e:b3:f1:e0:41:d1:2c:
d6:90:94:cc:10:7b:2c:86:4f:38:64:e0:03:a3:e1:3d:e9:53:
22:ed:8c:b4:e4:45:18:03:9f:23:70:fe:e0:f8:ac:a0:c0:8b:
dd:63:ab:13:5e:bd:ed:5e:94:74:7c:7a:67:97:d1:db:7e:3d:
66:9f:ed:56:90:3d:42:20:38:21:ce:03:52:26:23:24:4c:01:
2f:99:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:39:14 2025 by rpki-client