Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: QIh5zyL+snTD7xJ6d960KFNtzkxoiImsMsPECkFeO+I=
Subject key identifier: F1:23:86:D6:2C:43:88:12:55:E0:27:44:1D:28:9C:2B:77:28:32:63
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 019A718087AF63E1279AFDA8DB1A21D7DD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 07B9
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: m4nUhkKQtmgp5xE/Lz4Tmzc7lSc+Xg+Od/9LSjM98lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:87:af:63:e1:27:9a:fd:a8:db:1a:21:d7:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=f12386d62c43881255e027441d289c2b77283263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:e5:b4:aa:3f:d8:bb:d2:e4:eb:1a:8b:70:
b0:68:0b:36:ae:4e:12:66:59:8c:fc:33:62:58:be:
f4:7e:24:92:29:15:54:eb:ed:5f:f7:11:ab:4a:c3:
fd:01:bf:b2:9b:6a:af:ff:cb:b8:90:26:3b:90:e1:
77:3c:17:d2:e2:eb:be:ef:f2:b6:f4:b9:94:88:8e:
a1:77:71:b6:69:b8:69:09:42:89:b5:64:71:d0:6e:
aa:b3:74:47:c0:99:b3:1e:00:34:ae:a2:0e:ad:9d:
20:8a:23:79:9b:69:7d:3a:15:33:23:b3:8e:18:fe:
f1:84:8b:4e:cf:1e:a4:6a:8f:23:e2:5a:d8:77:05:
b3:f8:d5:5d:ff:c7:52:0a:c9:2b:13:0e:22:44:c8:
5d:2b:a7:53:59:f3:21:3a:03:da:01:19:d8:55:56:
e3:41:92:dd:22:27:23:94:aa:44:20:ac:b8:8b:d1:
25:e9:c0:46:e7:20:2b:85:74:75:68:69:03:2b:f1:
d3:29:ae:84:d7:ce:50:46:7b:35:fc:bb:9b:4f:5a:
6b:b7:2e:ca:ae:cc:3f:ae:7d:ad:4a:09:b8:e3:8a:
e9:97:cc:51:de:cb:41:90:d8:87:47:d5:a3:66:58:
29:c9:4f:55:c2:66:bb:a7:d3:e3:11:62:b9:e1:3f:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:86:D6:2C:43:88:12:55:E0:27:44:1D:28:9C:2B:77:28:32:63
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8d:5f:d6:c2:88:9b:a9:64:12:9a:d3:3e:11:a7:1a:b1:04:
36:b2:75:21:3b:0e:a7:51:9e:a9:bc:50:4a:8c:51:84:ca:4a:
ec:51:34:ed:d4:78:f3:15:6e:bc:14:54:75:8d:14:b2:60:63:
be:c0:92:93:af:c1:b5:7f:b0:7e:c6:bf:b3:c3:b6:cb:35:ac:
00:1e:c5:1a:8b:39:ea:b2:d0:0e:af:9b:88:5c:d5:96:1a:b7:
27:90:df:93:0b:35:21:89:df:64:69:dc:ca:9a:fd:55:7f:b6:
9d:5e:83:d7:c5:d8:67:b9:13:bb:7c:35:1b:ad:d0:5a:86:25:
d1:b4:ec:7f:18:6f:d6:ce:aa:dd:32:13:b8:6d:32:26:32:4e:
6e:54:61:71:31:63:07:b5:65:cc:26:14:9f:47:4c:c3:0b:25:
f7:40:62:3b:63:0b:f4:d8:a8:88:8f:05:19:a1:70:dc:3d:d8:
07:41:c6:ef:2d:fa:64:38:bf:45:6c:c1:a4:19:b3:75:67:f2:
5c:39:2d:17:d7:72:3f:8e:8a:19:c1:45:43:4f:e1:84:52:b2:
a6:34:b6:09:0a:d1:2c:d4:13:2e:0d:7b:a4:60:81:e1:b1:79:
d3:b1:a1:9f:ba:89:f7:3e:08:f0:ef:6b:2e:d6:ef:f1:0d:36:
58:1d:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:42 2025 by rpki-client