Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: /+nJ30RAM0/qJ9SXjQ3xuUmkCNtNaPchzqJqNkbIjHM=
Subject key identifier: B8:CF:06:07:60:65:E4:4A:3B:98:D2:F0:B1:59:C6:4D:FA:8E:A8:69
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019A1E07BDB17E0655047EC1206230345306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 01CC
Signing time: Sun 26 Oct 2025 01:00:15 +0000
Manifest this update: Sun 26 Oct 2025 01:00:15 +0000
Manifest next update: Mon 27 Oct 2025 01:00:15 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: DzE4eVXNdcjC7BHSB/TcrtBkf4Upm7XiKpfgcbPJmb8=)
2: HVaoDMotksZf76Ju74TL_0gQqQw.roa (hash: 6Wt6s6Ldu4cKxpBhxwlW4dbeWtmB6JUQE70sEXR7L0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:bd:b1:7e:06:55:04:7e:c1:20:62:30:34:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Oct 26 01:00:15 2025 GMT
Not After : Oct 27 01:00:15 2025 GMT
Subject: CN=b8cf06076065e44a3b98d2f0b159c64dfa8ea869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:ea:91:d6:99:cc:1f:7a:e1:bd:e9:9d:59:
ac:fb:9c:dd:81:9e:e0:31:64:e2:e8:b8:83:9e:11:
f4:f7:9a:d9:3d:da:16:f2:ef:c0:54:73:00:c7:57:
d4:75:50:b2:88:e1:af:74:94:2f:b3:72:c4:a8:8d:
4b:c2:6c:c2:dc:06:38:b3:8f:7c:11:b6:c1:b9:4c:
0f:6f:91:a4:e2:b4:3f:d3:79:29:16:8f:03:1c:14:
c9:0f:46:85:05:e0:9f:93:ee:a0:f9:c1:da:51:71:
20:f9:4d:e8:26:e2:87:64:b8:15:6b:cb:f6:b6:cf:
ef:79:06:89:98:06:41:72:d4:f7:75:8a:2b:73:d5:
bb:53:1d:9b:cc:e6:d4:f4:cb:39:1d:14:de:85:f7:
d4:0a:7d:23:79:b6:be:70:ec:0f:ba:d1:53:db:f9:
b0:84:b5:c5:b7:c8:48:fc:e7:3e:6e:78:ea:08:19:
9d:6c:c9:2f:6f:55:e6:95:6c:ed:aa:a9:69:25:c4:
24:90:0c:3a:ec:7d:49:f2:a0:58:f4:7a:5e:65:02:
8b:b0:04:5b:5f:46:c4:3b:7b:fb:e6:f4:ed:de:ce:
c7:87:4a:0c:95:88:58:80:1e:11:ed:2d:4e:dd:83:
f0:6b:9e:5a:01:a8:c5:08:65:44:69:75:38:3f:16:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:06:07:60:65:E4:4A:3B:98:D2:F0:B1:59:C6:4D:FA:8E:A8:69
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:8a:97:0c:23:31:18:27:6f:6d:1f:a0:74:4a:e2:e3:0f:
b0:43:70:8c:64:9b:f5:34:17:cd:b1:45:5b:ac:ff:69:4d:40:
56:52:ff:e4:c4:7a:c2:a7:76:8b:b0:94:71:1b:31:f6:8e:33:
5b:42:2c:f2:6b:40:09:22:29:24:1e:e7:82:b0:32:8f:15:33:
50:ea:7e:21:59:a7:ec:13:fb:37:ea:58:f1:4a:10:42:13:d9:
49:99:fa:1c:d5:6e:1a:a4:ec:3e:be:fc:e9:91:fa:69:db:04:
f8:66:8b:17:0b:40:15:18:f7:6a:f2:ee:88:38:da:e5:88:51:
9c:a8:f9:ad:65:c0:94:ca:81:89:2a:9f:9b:fa:55:c8:1f:ed:
71:05:ec:d8:d5:35:59:ef:4e:80:9a:30:ce:a1:c3:a0:9c:2b:
da:99:69:09:7e:39:9e:26:ee:d4:0e:2c:7e:c0:51:93:08:f5:
e2:61:59:74:21:8f:dc:1c:81:82:5c:c5:16:d0:b9:3b:83:d2:
ff:89:9a:10:76:59:ce:0e:b7:49:b4:6a:52:22:25:85:2e:c1:
8e:e5:e6:9a:07:8f:47:58:9e:23:e7:2b:ed:f4:19:5c:b3:dd:
87:ba:fa:eb:9e:90:3e:08:3b:00:01:3e:c5:c7:48:16:b0:54:
fc:74:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:17:23 2025 by rpki-client