Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: cADetl+p5WuFKu7XyA+NHc2latxFHFtRymk44P8+Upo=
Subject key identifier: AF:97:72:43:FF:F0:AE:A4:76:3B:6C:AB:DB:28:C0:47:CA:49:37:F0
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019A51F5700C6658990640375D9BA7AACCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 07BA
Signing time: Wed 05 Nov 2025 03:00:30 +0000
Manifest this update: Wed 05 Nov 2025 03:00:30 +0000
Manifest next update: Thu 06 Nov 2025 03:00:30 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: NdXub7SyWB5KpU/qMER9g86AbbxUa+epTuN/2yvbWyo=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:70:0c:66:58:99:06:40:37:5d:9b:a7:aa:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Nov 5 03:00:30 2025 GMT
Not After : Nov 6 03:00:30 2025 GMT
Subject: CN=af977243fff0aea4763b6cabdb28c047ca4937f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:64:8c:e8:4c:ff:b4:51:4b:82:13:90:31:
98:1c:e6:2d:32:88:49:74:b6:c9:c6:4c:e9:ae:e4:
a2:6b:ae:ff:dc:12:fc:47:9e:f9:33:61:c3:d3:62:
35:d1:5c:d3:34:70:20:d0:2b:d2:40:25:bf:15:22:
39:bc:ec:cc:48:9b:b2:3e:6d:72:b2:a3:cc:38:a2:
93:86:3f:be:c5:c4:5d:df:fa:1a:16:b4:82:d1:eb:
84:7c:e2:b6:21:6b:cc:78:65:02:59:21:52:85:a9:
f3:b9:de:07:17:49:13:c3:b8:fa:e5:14:ae:dd:91:
40:2c:b0:48:2c:41:67:09:42:ba:d3:67:84:bc:90:
ec:8b:6c:79:cc:18:44:a7:06:b2:9b:bb:45:35:06:
a6:72:a9:8f:7a:f8:9c:60:3b:a5:52:18:56:47:58:
82:4f:79:b6:7f:05:45:b4:97:02:94:ef:de:c1:90:
d9:8e:ee:08:52:5e:6b:7e:a8:7c:18:05:6e:e1:eb:
9d:8a:5b:82:a4:b6:df:67:8f:15:e5:64:0d:af:11:
fe:8c:ef:6a:36:96:c5:17:dd:ef:a2:d8:fb:3a:74:
79:e5:e0:0a:0b:81:c2:e2:99:02:95:46:12:a3:c3:
5d:28:27:ee:81:af:6b:52:b8:df:2e:60:23:b6:da:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:72:43:FF:F0:AE:A4:76:3B:6C:AB:DB:28:C0:47:CA:49:37:F0
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bf:07:f5:b7:f5:d2:f5:6c:0b:7b:57:3a:8e:7b:53:23:2c:
61:45:d1:75:f6:98:09:de:0e:e8:52:30:4c:f2:8b:fe:cf:b5:
86:1a:79:84:aa:35:cb:7c:ed:fb:69:d6:74:2a:52:c7:3a:7b:
f1:10:67:80:b8:2f:7c:22:56:57:5f:c3:f5:ca:cb:bf:e9:54:
f1:32:b6:36:04:e7:1f:90:2b:e3:75:29:84:a7:c1:32:51:85:
8b:35:b6:21:df:ca:d9:88:ca:2b:03:5c:e8:e7:81:63:ab:29:
b0:ea:45:34:1c:57:11:a1:36:f0:cb:2e:d3:52:47:9a:7e:3e:
ec:db:2b:15:fb:56:2b:fc:27:91:9c:5e:7a:45:59:6c:cb:bf:
13:0a:8a:37:66:73:7e:b4:b5:69:9a:7b:31:b3:97:54:9b:86:
38:6d:5a:f8:c4:de:91:0d:1c:79:c0:90:dd:18:31:51:3f:43:
fd:99:18:3f:55:1c:e8:d4:df:e0:cf:30:7b:f2:1e:c2:27:4f:
59:a9:b4:94:c3:2e:f6:ab:0d:08:d7:55:69:4d:d5:58:bb:85:
e8:bd:be:e3:41:ea:ff:54:0b:6d:05:33:7a:a0:b5:2e:0b:48:
dd:64:25:4f:cc:2d:ce:cf:c5:77:69:6b:6f:4b:ec:d7:bd:43:
d2:26:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:12 2025 by rpki-client