Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: 76uZyogY93nYJJRmwuzqg0d1myrnzd50U70r++5qTaM=
Subject key identifier: E8:4D:F6:D4:FB:0E:00:A6:45:2C:AC:AF:1A:61:DF:66:D7:0D:04:92
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 0199356E909F57E754ACE52C2A4B5CEAFEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 15D5
Signing time: Wed 10 Sep 2025 21:01:02 +0000
Manifest this update: Wed 10 Sep 2025 21:01:02 +0000
Manifest next update: Thu 11 Sep 2025 21:01:02 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: fHCl3MTjzDvTzUXQeTb3Z37OO6rkc7jeDPCr20WFSEM=)
2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:90:9f:57:e7:54:ac:e5:2c:2a:4b:5c:ea:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Sep 10 21:01:02 2025 GMT
Not After : Sep 11 21:01:02 2025 GMT
Subject: CN=e84df6d4fb0e00a6452cacaf1a61df66d70d0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:8f:cc:bf:01:bf:c2:96:07:75:8d:89:3d:
3b:40:b3:a5:d6:7a:45:85:af:86:03:93:3e:df:94:
40:1c:dc:f8:fe:09:70:4c:b2:34:8c:ea:11:8d:98:
a2:cf:8d:31:89:13:ec:f6:53:3a:f2:2e:79:12:d4:
f7:36:a0:cf:9f:08:62:cf:fd:3c:07:1a:29:8d:ed:
cc:20:4a:41:ab:87:fc:00:aa:cb:8a:02:4b:14:b3:
93:29:f5:31:7e:0b:b0:35:46:56:b1:90:85:0e:2a:
ec:28:b8:3f:8d:ef:7f:51:aa:e5:44:97:21:c5:b7:
e9:76:bb:a6:d5:4c:1e:f0:9a:b4:73:79:9b:ee:16:
bf:24:06:cc:42:42:81:02:87:86:92:22:d2:90:69:
73:3b:34:66:93:97:99:09:c3:bf:3e:6d:18:ad:eb:
af:58:cf:87:79:24:34:8f:dd:a1:58:c8:cd:30:30:
74:d0:5e:87:45:55:97:e8:46:06:53:f3:78:3c:76:
26:a2:51:4d:da:fe:72:17:2f:1e:3d:ff:45:89:83:
1a:fc:53:29:8b:53:f3:c2:44:64:7e:7a:57:5b:3f:
47:1f:47:34:21:72:3c:19:eb:47:29:94:a9:8c:b2:
78:33:31:22:7e:ee:63:ee:13:76:88:53:6b:7a:74:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:F6:D4:FB:0E:00:A6:45:2C:AC:AF:1A:61:DF:66:D7:0D:04:92
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:5e:bb:0b:36:9c:91:10:57:d8:03:42:78:b1:51:d1:86:
8b:3b:d8:b6:1f:3b:e6:96:0d:8a:14:d6:3d:e7:33:99:19:55:
c0:44:aa:92:cf:66:a4:e0:b4:87:6a:da:c4:07:46:d8:35:18:
4a:d6:cc:80:cd:5f:9c:35:2b:11:a2:8b:c1:46:88:52:de:85:
a5:c3:68:7e:d3:ea:70:f9:5d:6a:32:d3:00:30:c9:a0:f8:78:
72:2c:9e:42:27:6d:56:31:61:d5:b2:51:c8:21:d7:1a:65:bd:
1d:80:76:55:a9:e3:aa:fc:17:ec:87:73:b9:40:7c:46:4e:f8:
b6:fe:da:51:fa:8c:06:9c:4c:df:0e:c5:03:99:41:33:65:03:
a2:51:53:4b:32:5b:3d:ca:da:b7:b9:24:0c:fe:c0:7f:e6:3e:
01:86:1e:08:7e:11:56:83:4c:74:66:4c:13:40:1f:68:e7:e4:
f7:33:4d:4d:cb:3e:1a:26:83:e7:52:99:6a:bf:4b:8e:bb:d5:
b9:fd:2e:d4:80:ae:5b:52:a6:f0:0b:65:55:e4:33:09:39:4f:
e9:25:0f:80:de:ec:56:f5:f9:5d:a3:ac:23:1d:1f:7a:2a:ba:
64:da:8d:a9:1e:de:90:3a:ce:47:20:93:19:f4:86:12:3a:e3:
1c:92:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:39 2025 by rpki-client