Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: +RajlrEpVSZ+ijRf6NhLE1PjWTeXycRARolAYUlYDlI=
Subject key identifier: 74:6D:7E:79:74:7D:01:B3:E3:8A:87:E6:A1:D2:39:69:E0:C2:84:90
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0199530A6EEBB848FD7DFBEFEFE2245558B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0D18
Signing time: Tue 16 Sep 2025 15:00:16 +0000
Manifest this update: Tue 16 Sep 2025 15:00:16 +0000
Manifest next update: Wed 17 Sep 2025 15:00:16 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: +4y39TlV/eSSGHixkGUkVFwbYNgEsYUBuCk5wUjDPsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0a:6e:eb:b8:48:fd:7d:fb:ef:ef:e2:24:55:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Sep 16 15:00:16 2025 GMT
Not After : Sep 17 15:00:16 2025 GMT
Subject: CN=746d7e79747d01b3e38a87e6a1d23969e0c28490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:b4:dd:82:68:3f:60:1d:21:40:27:2a:44:
91:bb:c6:2b:ac:d8:57:d2:67:3d:31:e2:51:a2:a6:
51:3e:df:be:6d:b2:f7:e0:ba:ec:d5:9e:72:26:54:
e3:d5:cc:18:19:2f:b0:d0:cd:85:4d:06:66:d9:8e:
38:c6:1e:c5:c0:7c:8e:cc:29:1b:6f:30:aa:70:8c:
f0:5c:86:49:87:22:f6:ae:4f:74:c9:d2:fd:a6:2b:
53:f5:24:b6:f4:86:1c:8d:6b:41:b7:a3:a0:52:e7:
ce:c9:0d:0b:62:a7:b9:9e:f6:2d:77:8f:e7:a2:da:
6b:64:d6:67:f7:a0:85:64:e6:9e:3e:89:8e:5c:98:
f7:5b:45:1d:5e:8a:80:92:9d:d4:ce:b6:ea:68:87:
6c:43:09:e4:3b:66:18:58:cd:dc:77:92:a1:1a:a8:
a4:9f:91:03:38:d4:9b:cb:e9:06:e9:5b:1e:b5:75:
43:be:0c:74:72:1e:08:59:a5:20:0c:f5:18:d4:a6:
d9:5f:4e:db:01:f5:17:3e:bf:8c:c7:0f:07:d5:57:
2f:4e:8e:c3:df:af:e1:31:24:a2:0d:d3:d2:2b:2e:
55:38:e4:05:75:74:8d:75:c2:2c:fa:e6:58:12:de:
48:4b:47:73:aa:2a:58:a3:38:ea:71:68:6e:cd:c6:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:7E:79:74:7D:01:B3:E3:8A:87:E6:A1:D2:39:69:E0:C2:84:90
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:82:93:e5:33:35:07:7b:86:0d:4c:9e:af:59:a6:f1:d6:
a9:9d:63:31:59:8f:9d:3b:56:c3:88:c5:85:0b:25:19:dc:ef:
4a:04:f1:2c:c7:87:3e:b6:8e:3b:ef:42:56:61:35:9d:a5:6b:
58:1d:6e:c1:5b:21:53:4f:05:b8:fe:9d:f5:24:91:3c:96:05:
fc:fd:f3:0a:73:5e:78:b6:3d:bd:a8:d9:72:43:02:4a:9b:f0:
e5:ab:e1:f0:ce:71:19:bb:74:70:02:9d:df:e3:d1:a1:09:79:
37:87:83:0e:30:91:74:57:48:ed:58:d3:f0:0a:80:96:cc:13:
78:03:5d:b7:9a:18:61:78:bb:a1:1f:6f:07:a0:91:ec:20:37:
62:19:ec:86:49:a6:b5:c9:a2:f7:71:dd:a7:1c:df:25:f6:f8:
b5:65:22:c1:d3:37:6a:02:80:97:81:09:37:67:53:93:2a:19:
8f:05:3b:db:8e:ed:46:6f:9c:77:27:44:3f:c4:c4:11:63:b2:
d5:33:a0:36:54:4a:51:ac:1f:23:2a:e2:41:3d:df:91:15:94:
a6:70:55:e0:60:db:45:11:6e:e0:b0:31:a6:8a:fa:ab:2d:f4:
82:44:5c:6e:51:eb:8a:ba:34:99:03:ed:7c:47:53:61:1b:af:
20:53:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:16:34 2025 by rpki-client