Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: PeAlsyeDQ/91uY3DLqKCOOoxSY+ZZzfTaBlFGlN/fEw=
Subject key identifier: 14:6F:09:63:E7:42:43:05:3E:63:D2:86:34:38:8F:AA:70:85:DE:1D
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019A5074E9557D49A98FEEE33DD8EBB18AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 0196
Signing time: Tue 04 Nov 2025 20:00:30 +0000
Manifest this update: Tue 04 Nov 2025 20:00:30 +0000
Manifest next update: Wed 05 Nov 2025 20:00:30 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: poiPUJP0uq//BGayidzTiO/opuAbEnCa37sj3i5XAIs=)
2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e9:55:7d:49:a9:8f:ee:e3:3d:d8:eb:b1:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Nov 4 20:00:30 2025 GMT
Not After : Nov 5 20:00:30 2025 GMT
Subject: CN=146f0963e74243053e63d28634388faa7085de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:33:07:84:5a:0f:5a:5c:39:83:40:ec:41:
f6:9c:6a:d6:c5:91:bf:45:b5:26:29:e3:a1:48:ac:
60:ea:5f:36:64:f0:3a:3e:fe:f1:d2:4c:c7:d6:84:
d9:86:f9:d9:56:66:4d:28:de:3b:a6:29:6a:85:c6:
15:b4:d2:6f:20:eb:ff:fb:cb:5b:49:d2:20:89:c5:
bf:64:a9:bc:1e:90:a9:ff:99:7d:e0:a6:07:8f:1d:
2c:05:a1:82:bd:68:93:ef:84:1c:76:68:4d:24:35:
39:df:4d:88:94:f1:b6:0e:ba:85:f2:93:c4:7d:88:
24:9d:fa:f6:76:47:2c:4a:aa:13:4b:01:b5:f7:93:
62:3e:61:06:49:b5:12:12:96:1c:e4:24:8c:90:ef:
76:a5:53:f6:df:da:8d:6a:a2:56:01:46:4b:62:5c:
21:71:22:f9:6f:92:80:9d:19:df:6f:bf:5f:60:32:
05:b4:5c:fd:1b:78:57:16:03:cf:64:f4:4c:dd:ed:
b1:37:05:38:dd:8a:c8:71:0b:e7:0f:4a:74:85:8b:
b7:a8:b8:e0:dc:48:9e:1f:03:f8:58:a9:74:ac:74:
80:4f:13:fb:81:80:04:63:eb:b2:ee:30:07:ff:58:
b6:c0:e1:fe:36:3b:5e:01:ca:4b:f8:8d:4f:f0:fa:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:09:63:E7:42:43:05:3E:63:D2:86:34:38:8F:AA:70:85:DE:1D
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:df:cf:f7:5a:24:e7:ac:a3:20:94:a7:95:33:1b:c0:3a:8c:
bc:3b:02:51:6d:e4:4b:91:65:66:66:69:90:53:b8:a4:29:0c:
74:f7:a1:d3:c0:86:ec:2c:c9:7e:e6:43:38:a2:87:9a:ba:fe:
f1:de:e1:35:af:0f:6a:29:56:16:95:ca:fb:cb:3a:a5:cc:76:
96:2a:44:4b:be:92:34:6e:f4:2e:ce:22:fa:bf:10:8d:a1:72:
d4:81:26:40:f0:4b:00:8f:1d:2a:ea:59:f3:5b:2f:32:f0:82:
f0:1a:5b:59:54:07:71:be:d6:4b:b3:ec:48:4d:f2:5e:40:6e:
66:23:5c:68:4d:a9:73:86:bb:c5:88:16:e2:e0:9c:76:15:66:
0c:34:4a:a4:85:97:a5:41:ba:24:0f:ef:42:0f:4d:ac:40:e0:
e6:f0:4b:94:79:fe:3d:83:d7:4e:8d:19:e7:09:58:55:e9:f3:
b4:63:49:fe:f0:e7:5b:c5:d4:f8:57:7f:83:02:3d:7e:57:4e:
b1:19:e2:38:c6:ed:a5:5c:b0:74:0d:23:e3:09:05:44:23:f0:
0e:33:7f:c8:61:eb:4c:f6:71:91:38:32:7b:c9:9b:e6:02:ee:
53:ef:ba:6c:af:14:06:72:1b:ee:39:1f:a1:9e:da:59:31:c7:
9e:b0:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:30:17 2025 by rpki-client