Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: wFzeDLM/fZNK9mNEnD58YqpMxjj3oHDe8WMea6LTHG4=
Subject key identifier: BB:F0:FA:49:27:3E:13:41:F3:D8:61:2E:D4:8A:25:53:EA:33:42:22
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019A4E4FABC18FE4EC43F674FE82AF44B2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 1068
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: Jx/E4KZw+9SM//iNoBL/0q06CRq7ljp7jI3psRvJbxQ=)
2: t0yBm1hFtLLJBLZuRWFSy1DPMfs.roa (hash: j8/P6OOBiK4e2CmSebJ2V2wOYlJSy/jx7/iDkS26Tbo=)
3: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ab:c1:8f:e4:ec:43:f6:74:fe:82:af:44:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=bbf0fa49273e1341f3d8612ed48a2553ea334222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:aa:f5:e7:cd:1d:31:48:e2:28:23:09:de:
50:b0:5d:96:8d:ca:c6:16:37:74:22:64:4c:e4:a0:
ac:8d:12:cb:34:15:2d:03:a7:73:88:52:96:db:b2:
4f:9f:ad:e5:04:a7:39:7d:d0:a9:6e:35:e1:5e:34:
66:46:cd:5c:6a:c5:13:9a:44:2c:3b:ce:40:67:ab:
07:bd:20:c7:5f:4f:6b:05:f8:bc:e6:fb:1d:07:f7:
1b:86:f1:4c:d0:3b:71:93:c8:4c:bd:4d:6b:96:7d:
3a:67:bf:6b:be:e5:ae:21:50:66:1c:d7:e3:07:ed:
28:8b:04:6a:27:0a:99:f8:01:7e:d9:3b:81:17:82:
1b:60:70:e9:ba:8a:e2:f4:5b:b2:86:e5:19:56:ed:
2f:9c:90:ac:ea:2c:25:1e:a3:90:44:f3:38:06:72:
0f:28:de:7d:99:c7:08:e6:f9:76:0d:99:1e:ba:e0:
22:07:5a:27:13:39:ac:e5:4f:a4:05:4c:30:47:b7:
4d:39:a2:39:59:10:71:94:38:6f:b2:f2:5a:d9:ef:
27:60:fe:69:d6:e3:1a:f3:7f:5f:f6:20:25:ce:42:
6c:4e:94:0e:f3:ef:25:65:1d:f0:57:30:c5:f5:b8:
71:e5:1d:5f:31:c9:58:6d:9c:68:55:5f:38:76:fa:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:FA:49:27:3E:13:41:F3:D8:61:2E:D4:8A:25:53:EA:33:42:22
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:18:15:90:41:9d:7e:b8:80:6a:4f:39:25:ce:81:51:3b:6e:
da:ae:71:01:e3:21:07:c1:5d:aa:a8:c0:1b:c0:4f:05:1b:3e:
70:bd:63:5c:8c:55:3c:a4:62:00:99:32:a4:a3:cf:ca:f1:06:
75:11:0c:81:26:a0:b7:99:eb:27:5d:e1:d8:d1:ae:07:06:9f:
54:71:a2:67:0d:81:ad:a7:a9:5a:93:41:0e:6c:e2:83:73:a4:
2d:7e:2c:b3:6d:a8:89:67:0b:68:3b:66:bc:b9:1d:c4:b2:81:
ef:eb:fa:dc:ba:f6:a0:e9:fd:d7:d5:5e:2d:dc:1a:59:df:43:
3d:91:1c:09:4a:55:cf:93:65:44:aa:76:4b:d2:45:a2:1e:ec:
14:72:1c:86:1b:46:c8:c8:33:5c:ca:61:32:0b:8e:f4:be:4c:
26:43:7b:d4:87:a2:b3:f8:08:ac:5c:b5:11:cf:26:6e:5f:8f:
f4:7e:a5:f7:ef:06:84:94:f5:70:db:3a:6a:a6:e4:3c:87:c4:
6e:71:ff:dc:e5:3a:41:4e:6f:aa:06:31:48:59:7f:24:d6:7b:
09:7d:4f:02:4b:d4:76:22:b3:3a:1d:39:b4:2a:51:16:0d:4a:
ba:d4:e2:ca:29:5b:77:0d:cd:61:53:76:a3:ad:da:11:43:6e:
66:f6:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:04 2025 by rpki-client