Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: oG4tnCs+jSmRv+D8djuC/GdprB346uQNfklyA/q36RI=
Subject key identifier: 18:B2:0B:93:4F:CB:6C:68:2F:5C:2B:55:04:E7:83:58:8A:9C:6F:2E
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019A4F62B24C651BB73E7D5516E2B6D1870B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: 2oQtNtaxMZh8As2PlJ1fSzSimTNPwwjWBythKEasNdI=)
2: VNw8205zgqcsxDx8DssKyxJ_Gm8.roa (hash: onGjCH5MTTCmNABzkUzCYNGE5La3bQEkwo6cvlWLyCk=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b2:4c:65:1b:b7:3e:7d:55:16:e2:b6:d1:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=18b20b934fcb6c682f5c2b5504e783588a9c6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:cf:70:2f:59:3c:1a:03:c3:e9:4e:29:70:
94:d1:03:85:6f:a8:96:4a:66:d0:70:e4:1f:34:a2:
79:0a:17:bb:60:6e:9e:e2:7a:40:4f:ee:82:c6:b4:
0f:92:1a:05:e3:c9:c4:16:e8:0b:be:6b:6a:81:73:
f4:61:24:a7:ef:f2:e3:8c:a4:1d:45:96:32:a8:b3:
62:d2:00:6b:52:e0:4c:f2:e4:c8:7b:92:cc:5b:cb:
71:78:d6:3e:83:2c:01:bf:cb:d3:d4:91:af:db:29:
74:d3:2c:ed:b2:29:1c:dd:a9:22:ba:7e:e1:f0:e3:
8e:b2:b7:99:86:f6:2c:02:c3:38:64:94:9d:11:6b:
4b:0e:18:d7:aa:42:82:ee:1d:f3:ab:b9:dc:f6:21:
df:10:f8:89:55:e2:57:4e:ac:82:3f:6b:e0:80:9c:
a2:a7:a3:cf:8d:24:93:1c:1c:f4:f2:56:a4:f1:0c:
0f:fd:44:d0:49:3c:99:dd:e2:0f:b2:6a:d0:73:2a:
2d:9c:ee:5c:24:94:65:46:e0:62:3a:5e:51:04:a7:
ff:70:48:6c:75:b9:f8:a7:71:44:42:db:95:42:da:
c0:e2:94:ef:61:89:ef:b3:87:c8:1a:ff:35:e5:ab:
c3:c7:85:60:40:a7:36:a2:37:ca:52:59:ed:d5:8d:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:0B:93:4F:CB:6C:68:2F:5C:2B:55:04:E7:83:58:8A:9C:6F:2E
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:00:ca:d2:e3:8f:60:d7:64:88:60:bc:12:97:02:28:b7:
01:ff:60:a0:1d:36:c3:a6:e3:f8:1c:bd:56:7b:f0:54:e0:f7:
12:31:e6:fc:14:82:88:9e:8b:2a:9a:07:b2:6f:89:5a:4c:01:
06:d9:9f:58:6d:df:a1:42:9c:15:ab:34:55:75:42:38:32:c0:
72:3b:0b:53:7c:94:a5:4c:49:72:2f:e1:37:a6:ea:d9:8a:0b:
1b:3b:be:5b:bb:f0:8c:ee:a9:0a:a2:08:33:53:09:44:2a:75:
2a:bf:33:7c:9d:90:09:3d:d6:2b:94:5f:e4:29:f4:0c:d6:d5:
da:88:bb:c4:67:af:f5:cb:1d:58:bc:7f:f7:99:92:f0:3e:4d:
20:c6:e9:2d:8f:4c:62:7a:44:0d:33:dd:3e:b6:19:1d:72:66:
f7:f7:0f:88:b2:bd:49:8c:88:d6:12:be:a9:6d:3a:a1:50:65:
26:df:2e:bf:c8:e5:8e:5b:bc:3d:4f:ca:1a:57:67:c1:2b:35:
99:d3:1d:d4:11:71:fe:d6:37:60:7b:3c:07:d3:e4:4d:fa:fc:
88:a2:b8:90:bb:3e:38:d6:ee:f9:e9:6a:75:66:c6:34:67:a6:
ff:73:7a:31:d6:82:8c:f0:91:96:e5:31:db:7c:b5:30:19:5a:
3b:0c:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:55 2025 by rpki-client