Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: xg8ZMaHAvqZ9i36dpoe0S0PIjwVAGgs5DAUHmmqJNAM=
Subject key identifier: 35:CC:D8:5D:1F:E1:D7:B1:C0:5E:72:68:CD:71:01:C2:7D:DB:9F:5A
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019A1C501C97A7333A6E0A4EC1F09AE5A23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 017B
Signing time: Sat 25 Oct 2025 17:00:03 +0000
Manifest this update: Sat 25 Oct 2025 17:00:03 +0000
Manifest next update: Sun 26 Oct 2025 17:00:03 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: 8QF+urXgDzQ1Vkgfm6+Sc5QWnN7fD/VKHCgNGn83JCQ=)
2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:1c:97:a7:33:3a:6e:0a:4e:c1:f0:9a:e5:a2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Oct 25 17:00:03 2025 GMT
Not After : Oct 26 17:00:03 2025 GMT
Subject: CN=35ccd85d1fe1d7b1c05e7268cd7101c27ddb9f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:e1:10:37:0f:fc:0c:3a:99:3c:3b:05:12:
db:70:4c:91:7b:f7:00:a8:a7:ad:f8:c7:30:5b:6b:
28:a3:6a:57:85:e7:29:22:e3:cf:14:8b:09:ea:5c:
8a:3b:48:f1:28:c8:77:9e:32:a7:f6:76:c0:24:d7:
7b:c1:11:0e:22:3d:f8:6b:80:ac:38:c8:8a:ad:bc:
d2:d7:13:c4:ee:77:c7:43:5f:e5:4a:40:9e:96:29:
f4:80:fb:5f:70:18:2c:52:f6:90:ea:65:61:f4:62:
59:fb:b3:25:c6:2b:52:90:49:11:d1:eb:8e:2d:ba:
0b:93:2b:b2:91:14:8a:90:d8:8b:75:bb:54:32:6b:
25:04:45:2b:42:f3:a0:22:f2:ff:c4:f2:54:18:87:
31:cc:c2:da:b6:86:4b:0d:49:e6:c3:d1:4e:91:9b:
72:e5:48:4c:dc:26:1d:b7:02:97:a2:d8:98:91:8a:
25:97:4b:ae:4a:e3:a2:77:02:94:4a:4b:3f:11:21:
f1:6f:30:f8:87:96:0d:cc:36:20:71:a5:73:91:8b:
6f:00:55:d9:02:6c:e2:c4:96:1c:f2:ed:43:b1:c7:
5e:2c:b6:71:f2:f8:e4:37:c2:1e:7c:f3:e3:8f:32:
53:ca:67:c2:e9:a1:66:2b:a7:57:20:22:28:f8:a6:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:D8:5D:1F:E1:D7:B1:C0:5E:72:68:CD:71:01:C2:7D:DB:9F:5A
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:76:f6:da:4e:f1:8f:d5:74:be:1b:5c:ea:ea:9d:22:09:b4:
76:2c:36:a6:c4:2d:24:04:98:01:3e:40:f2:14:11:dd:18:73:
10:8b:09:a3:7f:f6:1e:2c:12:29:58:8e:6c:f5:91:8a:38:48:
25:81:5a:a3:18:5c:94:23:1a:b7:d3:c9:24:01:7d:00:c9:6a:
8f:21:63:fe:bb:94:86:18:20:6a:0b:f7:ae:46:d2:de:bd:52:
36:b5:f5:aa:a3:84:3f:bb:18:5f:7c:2f:53:12:a8:61:fc:d7:
d2:26:2c:90:d7:2d:65:3a:9e:fe:fc:ba:3b:57:97:95:8b:79:
65:82:3b:eb:46:3d:78:aa:ce:ae:23:21:40:9f:dc:66:0d:f5:
b5:1c:1b:83:ce:8a:15:fd:f8:eb:ba:a4:43:b7:2e:63:fa:78:
2a:83:a1:76:6a:47:7e:ab:99:00:24:53:46:0e:89:92:29:d2:
a2:35:39:06:9a:76:65:81:b5:3c:67:48:80:76:31:e8:34:be:
7e:44:27:7c:ee:5c:60:04:3d:67:af:46:f8:35:f0:a3:36:94:
91:e1:30:09:df:65:f8:1d:29:ca:e8:83:cc:ca:06:3d:78:f7:
1f:81:c0:5a:b2:e0:34:2b:66:7f:d4:0e:74:a0:8f:cb:4c:34:
ff:d6:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:56:00 2025 by rpki-client