Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: 679M6SA7GcalSvo9qAwazu2aeebqDwWwJI8e1yvXBcE=
Subject key identifier: 8E:24:18:39:DF:2D:CA:3A:FA:C6:99:9C:50:43:7F:3D:01:96:1B:1E
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 019A2BC342D9C48B40E1D3D4F57F301DA61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: 01C2
Signing time: Tue 28 Oct 2025 17:00:08 +0000
Manifest this update: Tue 28 Oct 2025 17:00:08 +0000
Manifest next update: Wed 29 Oct 2025 17:00:08 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: K2SavqL3Up7vw170+J6m4nfMRqnKakyoOFGDQ/MtUyQ=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:42:d9:c4:8b:40:e1:d3:d4:f5:7f:30:1d:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Oct 28 17:00:08 2025 GMT
Not After : Oct 29 17:00:08 2025 GMT
Subject: CN=8e241839df2dca3afac6999c50437f3d01961b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:66:49:f5:47:bb:49:36:be:2c:fa:2d:5c:
28:b7:fa:17:73:c4:2d:c8:a9:86:b8:a6:08:f5:78:
15:02:9f:5c:af:d0:93:f8:d9:c8:96:3c:17:4f:90:
0a:85:72:51:10:60:c6:eb:ff:50:0e:4c:25:28:eb:
90:19:cb:57:e0:5f:fb:11:d7:b2:dc:dc:87:3b:16:
f0:de:4c:7d:9e:18:dd:db:40:25:0a:6c:12:30:e0:
5f:77:6d:38:b3:05:7a:25:65:00:50:4e:20:99:68:
42:db:b0:ea:03:fe:4d:0f:89:db:2d:25:18:56:19:
e9:78:54:66:2c:b9:95:a8:86:ba:3c:85:80:93:9b:
53:72:56:0a:28:b5:4c:ef:2a:da:fa:09:92:68:fb:
60:b5:8a:88:75:3a:9e:e5:c1:f4:db:95:0f:81:e1:
a2:ad:12:ea:3b:c2:9e:78:fe:fb:3a:9c:0a:d6:43:
b5:06:4b:38:5b:f9:e1:bb:e8:77:9e:18:4b:41:07:
d6:d5:90:77:ce:0b:b8:bf:f7:11:3a:30:a3:eb:69:
52:65:da:a7:14:fb:f4:dd:95:1f:18:eb:7c:fc:7f:
ca:bc:6d:7e:c9:30:68:92:2b:1f:f4:60:27:67:d7:
36:e3:76:61:05:cb:e7:82:cd:45:00:76:3b:8e:d1:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:18:39:DF:2D:CA:3A:FA:C6:99:9C:50:43:7F:3D:01:96:1B:1E
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:19:f1:f1:90:0a:d0:e6:64:b4:a4:9a:51:35:5c:05:dc:
66:41:e9:34:c3:ac:3c:af:fe:13:0a:9a:73:e2:07:f4:1f:e7:
1b:d2:70:b4:d5:bf:92:d2:86:07:e6:91:7e:ae:c9:a7:ef:db:
86:c0:14:9a:36:f0:37:c6:52:77:91:a0:c0:9d:91:f2:5a:00:
0d:6c:43:a9:f2:86:c5:ca:1d:91:cd:9b:9b:7b:d5:8d:f5:9d:
bb:d1:e7:20:75:7b:40:09:0f:98:82:22:69:95:31:5b:5e:30:
f1:e7:05:83:39:8d:02:0e:1c:bf:d0:62:0f:7f:7a:de:ca:af:
06:2a:a6:c7:eb:56:53:66:5d:ec:f7:b2:3a:2d:55:88:3f:c4:
2a:2f:4d:3e:71:57:14:4c:ed:85:fa:ea:20:b9:14:35:d5:b1:
4b:d9:25:6a:d5:09:3b:28:67:a4:5c:c7:94:6a:53:d2:52:25:
cb:36:57:2a:f0:d0:de:83:1e:e4:a7:ac:e0:00:ea:4b:c7:67:
79:4d:e4:52:a7:5f:b0:47:65:76:c3:91:21:69:f3:78:47:1f:
48:e7:ed:1a:bc:a7:21:1e:d9:f4:2d:78:b5:2c:5a:e4:03:99:
25:c7:d1:35:d8:f6:38:01:34:c5:69:cd:6f:47:a8:69:11:df:
95:6c:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:12:10 2025 by rpki-client