Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: PhD/a46ETe80KhEPh91p7ZdyofQ/zC4NvOp6kmjnX4k=
Subject key identifier: 7F:69:2C:DE:B9:91:A3:38:99:2B:17:79:03:EF:90:27:A1:BF:F3:DE
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019A4D061FC9E3A1C719779ED3CCCF61DCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0B63
Signing time: Tue 04 Nov 2025 04:00:38 +0000
Manifest this update: Tue 04 Nov 2025 04:00:38 +0000
Manifest next update: Wed 05 Nov 2025 04:00:38 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: 9cPPjRMPA04+GSrPkjdlTme6pUzAfRRwQRjVEI7RTJg=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:1f:c9:e3:a1:c7:19:77:9e:d3:cc:cf:61:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Nov 4 04:00:38 2025 GMT
Not After : Nov 5 04:00:38 2025 GMT
Subject: CN=7f692cdeb991a338992b177903ef9027a1bff3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:69:ab:b0:0b:53:70:d0:8b:15:77:27:7a:
b7:dc:1e:02:0f:ad:89:e2:3d:6c:83:08:06:51:79:
fe:3a:f0:bb:a7:6d:7e:49:99:0d:67:90:59:ec:9a:
fb:2d:c8:b2:ce:7b:fd:aa:e3:b3:3f:2a:96:87:47:
26:63:e5:45:32:de:d9:79:59:e5:81:b4:96:ee:2c:
9e:dc:18:a9:fe:4c:af:00:55:a9:30:09:07:e4:bb:
23:ec:f1:87:16:b1:e2:09:3e:aa:2e:50:18:d4:2c:
f8:9b:6d:24:1c:79:8c:bd:c9:3f:18:98:e7:21:8c:
aa:83:4e:65:49:7b:80:3a:7d:cb:9a:fa:e9:f3:f7:
17:15:49:41:0b:4f:c4:a0:a1:c2:42:40:e5:c7:b8:
99:5b:ed:cd:b6:f1:b6:ae:de:01:cc:8c:a8:9c:8d:
9c:f8:7d:06:bd:a6:45:bb:4e:03:03:09:a4:41:a0:
62:86:c6:c5:e2:9e:24:4a:97:a5:1b:01:dc:90:c0:
13:58:f7:d2:1c:51:45:45:b8:56:d4:78:4f:1b:ba:
28:9b:1e:93:3c:a5:43:67:1c:a1:ae:6b:8a:11:98:
48:76:b2:7d:07:3a:12:85:62:f0:7c:c8:cf:69:be:
ec:20:1b:e8:53:17:a3:e7:b3:48:86:18:68:bf:1a:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:2C:DE:B9:91:A3:38:99:2B:17:79:03:EF:90:27:A1:BF:F3:DE
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:30:a8:b5:8f:b0:e7:93:9c:9c:d5:a8:1d:81:aa:12:c6:a3:
0c:0c:53:49:12:bc:ec:6d:3e:a4:38:08:29:5c:ff:2a:f8:3f:
9b:56:3b:94:b0:a3:6d:13:3e:e2:b6:8d:6f:53:c7:95:bf:9a:
09:51:0b:23:5e:5e:61:80:81:46:4c:39:81:90:03:62:6c:aa:
20:4a:0d:48:ed:73:bc:ef:1f:9a:dd:c3:09:e7:d4:56:93:9a:
15:4d:c1:db:a4:66:e2:39:7c:ee:22:43:34:ce:82:14:5a:28:
e0:be:60:46:9e:fa:e5:33:7b:98:dd:29:c5:8a:60:63:e1:db:
e2:d1:24:59:a5:d1:78:d5:84:4d:40:82:bf:5c:55:2e:c3:dd:
b1:69:14:2a:be:62:87:4d:11:65:e7:d7:16:b5:6a:a2:d4:b8:
b4:30:ac:e4:9e:e6:2b:d8:1c:a4:ff:43:2c:ba:e2:aa:73:9d:
da:a5:ac:22:01:20:82:d5:9e:f7:e7:b0:88:cb:a2:29:e5:87:
fa:ec:5a:48:77:1c:27:88:f6:ef:e5:db:8e:c9:42:f7:1d:82:
54:ba:47:92:5e:00:bd:aa:e2:ab:36:c7:0c:72:f6:66:04:20:
fd:6f:df:9c:e9:ff:a9:68:23:98:71:e1:dc:29:10:ae:e9:c3:
0d:eb:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:59 2025 by rpki-client