Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: GZEyW14dpsHPQtGOeLe0dwXwmBSX5ZELgXxXuKrS1C8=
Subject key identifier: B1:FB:EC:5E:1B:EF:4F:42:BB:41:42:E1:29:D1:10:6B:DC:E0:C1:EF
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019A7149AC972372D975CD52A2D0FBB6EA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 082E
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: luDd3tRw+cuI3xOho4sN5qBN9Uc/dtUOtTVxoPb57o8=)
2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ac:97:23:72:d9:75:cd:52:a2:d0:fb:b6:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=b1fbec5e1bef4f42bb4142e129d1106bdce0c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:f5:6b:b8:4b:8c:6b:2b:87:70:03:d0:55:
6e:8f:50:36:07:9f:23:74:6e:5f:8d:b8:c9:6b:89:
c2:23:0d:01:f0:5b:cc:4f:2f:8f:3b:a2:41:94:72:
c8:01:4e:3e:4c:02:a6:70:af:ab:cd:8f:2b:04:40:
ff:01:4a:cb:fc:9f:70:48:25:1f:06:2a:57:8f:cb:
60:47:f3:ad:15:4c:8d:2f:b7:a3:57:42:fb:d6:c4:
4b:52:c3:4e:42:c2:cb:fe:7a:c4:80:c3:29:ba:2b:
77:a6:f6:15:0f:27:51:2b:12:5b:79:42:09:65:fd:
17:56:a2:61:74:f7:e3:ec:d7:6d:cb:ae:b6:f4:f3:
1d:75:a4:83:8d:9a:7e:a3:46:58:f8:8d:a2:32:77:
c0:96:59:c1:a1:01:35:1b:d4:44:51:32:ea:78:b1:
c4:49:78:f0:f4:4c:1b:8c:26:05:4c:57:66:f3:b4:
a3:f1:b0:55:d4:c1:fe:5e:29:7b:8d:b6:b2:5f:1f:
3f:da:d8:da:5a:26:cb:9f:3d:90:ba:8d:c4:f6:0d:
34:3c:fa:e7:63:c6:6f:c3:5c:59:88:54:4f:e4:75:
fd:09:72:64:75:f1:a0:3c:9e:7c:9b:3c:9f:da:6c:
5a:2a:e4:44:ee:1f:a6:cd:f3:ca:e8:e3:91:0b:c6:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:EC:5E:1B:EF:4F:42:BB:41:42:E1:29:D1:10:6B:DC:E0:C1:EF
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:a6:8a:69:5a:85:bf:81:d0:1d:4a:23:d0:bb:16:19:17:
b4:4b:4a:1c:05:f1:52:ce:31:59:45:d2:3b:d8:37:19:5b:7d:
d1:be:63:fe:92:77:c2:c0:9f:e1:75:73:b6:be:ca:56:dc:b0:
3c:00:f9:d4:0e:f0:58:81:84:fa:05:de:ed:70:28:6b:c6:57:
84:68:5f:11:7d:a7:d5:70:f9:03:9d:5f:d7:72:f8:ec:0f:2a:
ad:2d:bc:ed:1d:52:72:c2:9b:c7:47:8b:a1:e0:27:c2:27:42:
00:f6:ab:33:4a:90:fe:51:b0:6c:f7:8f:08:94:ad:34:04:15:
7e:e9:95:37:4e:6c:51:48:d5:56:e1:8a:b9:53:9f:7b:79:b1:
c5:38:10:ce:99:c0:dc:ca:47:87:92:a1:82:e0:c8:0e:32:b5:
fc:82:ba:61:fe:aa:c3:ac:f1:d5:a8:a9:3f:cc:8a:3b:e4:84:
7c:0c:0a:18:43:61:2e:43:f7:b9:20:49:78:94:ec:0a:bf:7f:
06:8b:81:fc:67:35:43:af:72:56:34:3f:96:82:7f:3b:06:47:
c4:21:48:d1:7a:b1:94:81:bd:e5:3b:e7:f9:76:76:72:5c:7d:
d6:b5:d8:46:06:54:b1:4b:49:5a:de:e3:6e:62:b6:87:f1:76:
28:3a:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client