Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: Wi0YY5FSw2ZzGEoKSLHWemD1BYlv0XwgdTq3oCoxhdI=
Subject key identifier: E6:B3:A0:76:AA:2F:13:BF:CA:AC:53:9A:F0:73:AF:BF:B7:99:5D:89
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019A71EEEBB3A6411BAE32142881B6508315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1184
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: L4WqHNYrhUgtyRtLfUfkkA08UY9kNeIPEKs+qhgdm88=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:eb:b3:a6:41:1b:ae:32:14:28:81:b6:50:83:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=e6b3a076aa2f13bfcaac539af073afbfb7995d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:4e:09:61:f9:67:7a:b7:2e:da:98:65:aa:
fd:9c:75:07:7d:7e:a0:20:16:80:44:55:f8:c7:e7:
48:22:9c:a7:4d:ba:9f:e8:99:60:06:9e:64:98:9f:
eb:80:a9:df:ce:5d:0e:19:b0:5e:c7:59:46:3a:cc:
06:96:4d:d8:bd:b6:66:82:ab:64:a1:3e:93:c4:9a:
8a:9f:1f:39:39:da:fa:49:8a:f1:fb:16:a1:6d:0a:
d4:86:b4:9c:ee:89:92:bf:f9:b9:32:b6:eb:39:c8:
bc:3f:55:ba:8b:c3:db:7e:f1:0b:79:b7:85:99:88:
92:39:1c:db:b1:2a:c3:3c:fe:d5:2b:ee:6e:20:c2:
bf:58:3b:9d:9c:af:9b:47:20:fe:9b:38:ec:6f:c2:
c9:2f:00:aa:c1:63:5b:82:9e:2a:44:2d:0b:ab:65:
3c:4f:c4:aa:dd:9d:48:ed:19:08:e5:4f:b9:a3:a2:
f4:86:7f:ce:31:bb:ae:12:cb:91:ae:7d:68:28:57:
93:ed:37:cd:33:05:b3:2c:3f:21:9b:8c:ed:83:e8:
3c:6a:45:30:51:77:8c:5b:dd:90:a0:51:53:8f:51:
1f:98:9d:04:66:99:1e:98:51:83:d6:d8:18:9a:71:
13:92:4e:76:22:64:cf:7f:e3:ec:cc:a9:4a:9b:5e:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:A0:76:AA:2F:13:BF:CA:AC:53:9A:F0:73:AF:BF:B7:99:5D:89
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f3:19:3e:b1:b5:12:f6:c1:50:90:76:1b:b2:0d:de:05:69:
e2:57:56:64:09:f7:1c:8f:ec:eb:78:1f:9d:14:90:57:c0:af:
e0:bf:25:24:2b:f7:41:05:0e:0f:2e:6a:17:db:f8:b0:0a:45:
c2:0a:42:64:62:6d:ce:31:ba:12:26:96:47:bc:98:f4:45:a5:
ab:d0:9d:aa:ce:ea:0b:26:cd:75:21:ad:22:e0:87:e7:4b:10:
e5:b6:df:05:69:48:f8:2c:21:60:53:7a:42:7d:a0:7e:43:4f:
13:d3:b1:49:7f:ed:c0:ad:00:68:b7:0a:53:2b:07:7e:ea:a2:
8e:4a:f1:56:da:47:12:54:6b:0f:aa:67:0a:ff:6c:c2:fa:5c:
c4:0f:43:57:b7:35:38:67:9a:df:e1:4b:76:d4:fc:e5:e0:23:
b6:94:f4:67:d0:c7:91:81:5f:98:50:b1:05:68:62:07:49:10:
08:f9:00:19:de:92:e6:d6:f5:b5:46:20:4f:63:e2:98:69:76:
24:a2:04:a9:08:7b:6b:30:0c:3a:ab:37:70:97:0f:3d:de:4c:
cb:1a:c4:23:17:62:e6:ad:7e:49:19:2c:c2:3a:95:35:a1:79:
86:11:61:e2:a0:8a:03:7e:61:fc:30:94:59:fe:1e:e0:ab:42:
26:4c:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:00 2025 by rpki-client