Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: PO8Lj1dRJ1nyJtSNikEkh3qGzeitQoe46BLeV5DRRVA=
Subject key identifier: DF:B5:ED:30:7B:AD:81:52:E8:AE:E9:8D:ED:4A:70:AC:83:8D:FA:EE
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019A24E60CA19CB84D000BC51C619967F40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 1651
Signing time: Mon 27 Oct 2025 09:00:47 +0000
Manifest this update: Mon 27 Oct 2025 09:00:47 +0000
Manifest next update: Tue 28 Oct 2025 09:00:47 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: PBCKkLYBFoczzBWgM0EEPwR/PHnH/C1oBZEG6LQxrRY=)
2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:0c:a1:9c:b8:4d:00:0b:c5:1c:61:99:67:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Oct 27 09:00:47 2025 GMT
Not After : Oct 28 09:00:47 2025 GMT
Subject: CN=dfb5ed307bad8152e8aee98ded4a70ac838dfaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:dc:b3:9c:e5:28:53:55:f5:b3:64:99:50:
d1:0c:b5:ee:a5:de:55:f6:75:65:c6:1c:9a:d8:b6:
ad:99:46:50:ef:c6:cb:2e:35:e9:8b:bb:ce:e7:8e:
9e:b4:fe:b4:ec:8f:48:b7:71:56:12:b0:f3:a5:12:
44:92:ec:a5:39:c7:b9:96:c8:bd:c4:9a:06:64:50:
60:da:df:1b:a8:e6:77:90:9e:ff:02:23:88:81:55:
b1:53:e3:32:f1:8b:8c:fd:1b:5c:f1:59:f0:85:0d:
56:28:43:91:07:8e:22:76:db:a2:69:73:ff:eb:0b:
93:11:96:e5:c3:6f:af:4b:bf:c0:4e:c6:67:5c:d5:
d8:dd:bc:65:99:16:3f:0d:04:6d:90:c9:3c:8d:d3:
d1:34:42:2f:9b:20:cc:a1:2b:88:37:a7:d5:ba:1f:
80:04:0c:c6:95:14:5d:0c:34:7d:6f:84:28:2c:b6:
41:26:8c:a0:d6:54:00:1f:60:75:83:46:d7:d1:76:
eb:28:95:df:db:39:6f:66:e3:e7:af:be:c1:e7:42:
85:20:d4:bb:75:0b:e6:fb:ca:b5:2b:e3:8f:17:bb:
8a:d4:40:c2:99:ee:78:da:03:a3:e1:82:d4:23:04:
67:b4:4e:3e:df:85:26:a3:34:0a:7b:af:f3:ba:ce:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:ED:30:7B:AD:81:52:E8:AE:E9:8D:ED:4A:70:AC:83:8D:FA:EE
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:e8:c0:8a:18:96:28:bf:66:41:f7:ea:5f:3c:89:46:a6:
24:c3:eb:10:9f:42:96:ed:6e:fb:3b:ec:f1:23:c8:64:e2:a3:
80:0a:94:76:60:67:85:fe:d0:90:d0:f0:73:25:c7:ff:5f:73:
2d:96:35:65:1c:a2:0b:c8:ac:19:83:6f:fe:86:75:4f:35:b0:
7d:b7:f5:f0:b9:b3:9c:9f:7e:01:be:2a:aa:5c:ea:9e:db:1c:
51:96:01:6c:ba:8c:3f:2d:f8:39:c0:bc:4b:1a:68:4c:3d:73:
6c:e6:14:2a:6c:a2:b6:a6:08:59:b5:69:27:1d:98:60:dc:b3:
7b:4a:87:25:3e:00:11:5a:e9:e6:90:ab:8f:8b:bd:28:c3:fd:
fb:20:e7:e3:0f:af:06:fa:42:cb:b3:30:bb:0c:31:c4:a8:7e:
fe:94:1a:5d:a1:b7:58:a0:90:e1:42:d8:77:b5:b5:f2:f4:a0:
0e:69:c0:b9:54:22:ec:57:4a:f5:be:d1:55:7d:ee:ad:27:bb:
b9:14:2d:2a:a8:d8:0d:97:5c:42:2d:fc:05:e0:46:a6:79:4f:
72:d1:25:71:0a:86:ea:5f:04:e5:06:f6:f3:86:2e:dc:30:f5:
e5:c3:2b:82:13:0b:ab:c5:49:4d:11:fe:2d:d5:62:45:e1:7c:
1e:68:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:29 2025 by rpki-client