Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier: xDcWBkmFV4bcJ6tgunYJ0x/mcr8it26Sg7XazKRfmCU=
Subject key identifier: E0:12:4C:AC:77:9C:48:EC:01:DA:4B:BD:D5:85:5C:42:E9:1B:EA:D3
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019A71B8BE6312842241D576DE870BA64EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=)
2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: CDSGjsaC0jhP44qOKUj4LkNBTA6LYu9NjRj83MXCYuo=)
3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=)
4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=)
5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=)
6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:be:63:12:84:22:41:d5:76:de:87:0b:a6:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=e0124cac779c48ec01da4bbdd5855c42e91bead3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:04:cb:cc:93:ca:b5:96:17:23:f2:db:34:
83:dc:92:a7:b4:09:7c:85:d5:d5:5e:72:66:4f:a9:
4b:05:da:aa:f2:1c:5c:e2:ae:a6:32:0c:3d:81:3c:
92:c3:d8:a3:54:41:36:ec:af:76:dd:e4:2d:6c:71:
3e:85:c3:a0:2a:c7:cb:18:da:33:fa:64:0b:bd:1c:
c0:89:a1:d9:65:b9:44:ea:7a:13:d9:5d:00:28:a8:
9e:da:0b:0f:71:a5:c3:aa:bb:7b:1c:78:e9:27:c1:
36:22:01:7a:d0:91:33:08:3a:d4:db:05:d0:7f:8e:
e3:67:16:c7:58:b1:87:a4:5a:81:9d:05:50:b0:b2:
a8:98:34:34:bf:20:c5:63:28:87:25:bf:d4:ef:b1:
57:7e:bb:46:3c:74:eb:95:35:ba:cb:bb:91:32:b0:
00:31:4a:22:b4:a2:a9:8a:1e:50:44:0c:46:d7:20:
cd:5d:95:88:91:f7:d7:4e:7d:17:f9:a0:f8:b7:94:
9d:e4:7c:2b:9f:af:a1:cf:26:03:a2:ad:69:bc:c8:
74:5f:f1:d9:a7:2e:f9:2e:93:0d:9c:0d:b5:f0:d0:
28:43:71:af:83:af:67:fe:02:da:bd:fd:f9:7a:66:
fd:cf:1e:b4:ee:3e:b8:51:a7:cc:52:bc:7a:e6:d6:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:4C:AC:77:9C:48:EC:01:DA:4B:BD:D5:85:5C:42:E9:1B:EA:D3
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:f8:74:85:02:53:80:76:e3:1f:23:c7:70:fd:1b:63:21:
31:f6:1f:73:11:eb:78:2b:07:cb:b2:39:d5:ce:e0:97:a1:fc:
2b:14:c8:f5:1d:e7:7c:67:60:6f:22:14:52:df:fe:cf:1e:37:
2b:20:87:2d:c8:78:59:cd:56:d3:4b:a7:d0:e0:f8:97:72:bb:
0c:ef:a5:c5:70:ee:40:c8:93:65:a3:61:88:32:a3:57:29:16:
78:07:e5:c1:57:17:57:9f:2a:ce:f3:f0:bf:b4:ca:21:6c:04:
0e:2d:22:f8:ac:07:3b:c4:8f:12:2e:43:5b:fe:20:6c:6c:f5:
75:8e:0f:a5:7b:43:af:6f:02:59:bb:3a:cf:fe:1b:df:03:3f:
14:52:33:ad:22:55:e0:52:8c:fa:9d:6a:f3:68:04:d5:eb:8a:
27:e0:7b:ca:9b:b9:a7:50:24:82:93:20:17:f8:42:9c:e9:5e:
c2:2d:ca:a9:bc:c8:fe:97:8d:98:55:8b:f7:cc:77:ff:98:0e:
46:c7:a8:39:23:5b:a5:7d:0c:07:3c:5e:d9:cf:9d:f6:a2:61:
37:8f:d2:2c:44:e8:1d:03:de:ad:6f:bf:cd:1e:77:46:f8:b1:
2a:d8:3e:79:4c:f9:a3:c4:d5:98:ed:03:ad:0c:f5:a5:91:95:
69:21:1f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:40 2025 by rpki-client