Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: acc15MM98gjQBpEUsneT2Cfw74fgEvRQ/61mbOWisFA=
Subject key identifier: F2:A7:B7:63:7A:99:7E:23:41:98:A1:08:5F:75:2F:B8:A2:81:90:B1
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019A0BCAA8345E6A697A6C8C00A16723698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 066E
Signing time: Wed 22 Oct 2025 12:00:21 +0000
Manifest this update: Wed 22 Oct 2025 12:00:21 +0000
Manifest next update: Thu 23 Oct 2025 12:00:21 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: mRleX+DYTTkwrQ/MGkhFsaZW4BRyTdmJqRe6KHDneR4=)
2: VNw8205zgqcsxDx8DssKyxJ_Gm8.roa (hash: onGjCH5MTTCmNABzkUzCYNGE5La3bQEkwo6cvlWLyCk=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:a8:34:5e:6a:69:7a:6c:8c:00:a1:67:23:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Oct 22 12:00:21 2025 GMT
Not After : Oct 23 12:00:21 2025 GMT
Subject: CN=f2a7b7637a997e234198a1085f752fb8a28190b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:71:ca:82:ec:d6:30:e0:1b:3c:87:c3:8a:
a0:69:a1:0a:cd:ff:95:86:39:f9:af:09:c7:d9:da:
41:57:37:ce:81:3a:62:2d:9b:91:c0:7e:a9:b1:c8:
28:74:a3:68:92:4f:9c:2c:25:f2:b4:62:b9:36:40:
c9:d3:ca:63:0a:74:c8:3f:1d:5d:0c:29:e3:8f:51:
f1:a8:52:aa:f7:77:59:65:70:17:55:37:41:ba:71:
37:ad:6d:36:d8:aa:f7:ed:e3:9f:01:3f:fd:a3:e2:
0e:bf:03:2f:97:7f:40:f3:90:bc:e5:74:8b:77:fc:
d9:67:0a:dc:00:b8:3d:8f:17:7a:6c:60:d8:92:af:
e3:09:fe:5a:e8:fc:bd:6c:ea:f6:e7:be:6f:b9:f6:
02:c9:4d:b2:8a:bb:3b:54:b8:5c:a5:50:3a:7c:9e:
77:cb:dd:4b:9c:30:39:17:86:45:fe:87:53:ea:ce:
73:a2:b1:d4:e8:d8:47:83:db:b8:1f:6f:34:cf:bf:
2e:73:66:26:9e:10:8a:bf:34:f8:f8:94:90:ba:7c:
dc:42:25:9e:d5:17:8e:3f:e8:6f:c0:23:8e:ea:36:
ac:e7:32:cb:5c:eb:60:23:c1:90:1e:f3:37:f5:f7:
04:74:e5:bf:a4:28:8c:64:f8:75:ac:76:70:5f:42:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:B7:63:7A:99:7E:23:41:98:A1:08:5F:75:2F:B8:A2:81:90:B1
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:4c:51:f1:73:2f:d4:80:fa:8f:5e:5c:dc:0d:40:18:c4:
32:85:82:67:c7:2a:b7:73:cc:8d:fe:3f:60:ef:ed:b0:58:09:
c9:cb:b0:12:78:8d:e4:e1:1b:86:8b:ee:ac:10:20:a1:85:f7:
40:c0:1d:35:5d:96:e0:e2:50:43:d4:6a:59:40:35:89:60:0d:
5b:14:5e:4f:57:c1:76:f5:3a:ff:be:59:dc:4b:96:57:04:c4:
ff:f4:6b:ab:12:db:1b:29:39:46:5c:0e:e6:80:cd:ed:54:fe:
0d:ee:b1:e1:de:b1:d9:85:73:f6:06:5c:69:07:02:b1:92:0a:
31:b9:ff:ee:14:02:ac:ce:b8:86:35:2e:70:44:32:55:35:45:
e4:05:46:1a:c3:38:1d:02:41:1d:91:1f:c9:c5:cf:9d:f3:f3:
e3:06:2b:4c:45:52:d1:ff:cb:d7:78:8f:63:b4:53:08:4b:4d:
36:f1:0c:22:55:a5:01:71:85:14:e5:03:5d:37:c1:61:06:bd:
ad:fb:0f:80:79:37:95:37:8e:58:ba:c7:d7:75:be:dc:4c:6c:
c6:11:e2:8a:66:5f:e6:c8:d6:7b:bc:6b:b7:da:87:32:eb:78:
e6:5e:54:9b:af:43:9b:f1:cb:58:03:ed:d5:7a:d7:9c:f6:ae:
30:0a:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:06:35 2025 by rpki-client