Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: F8nmFVjSUQzwmoeKKC0IU1sFCVi+BC6HZvjn3j1vH7I=
Subject key identifier: 75:D2:A6:2E:CF:22:4B:29:4C:7A:33:B5:AB:91:13:A2:C9:07:E6:20
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019A722614ADFD2120FF54B3549D0E2DDD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:29 +0000
Manifest this update: Tue 11 Nov 2025 09:01:29 +0000
Manifest next update: Wed 12 Nov 2025 09:01:29 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: 2QdavzWoTopQZAlD2SoJTfQpuzARa90pwLg+K2kp6qU=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:14:ad:fd:21:20:ff:54:b3:54:9d:0e:2d:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Nov 11 09:01:29 2025 GMT
Not After : Nov 12 09:01:29 2025 GMT
Subject: CN=75d2a62ecf224b294c7a33b5ab9113a2c907e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:5c:c1:4d:01:c5:b0:b3:2f:06:5d:a2:70:
c7:e6:e5:7e:86:73:73:c9:88:14:b9:2d:c4:0a:34:
ed:21:26:2f:fd:e2:05:a3:d9:93:7e:3e:c1:7f:40:
7a:e9:2a:06:5f:ec:c5:30:7b:12:36:49:96:a7:d8:
80:d8:35:89:7e:18:bf:5e:15:f7:f8:ce:f3:a9:35:
2b:95:f7:ef:cb:0f:36:1a:b9:ca:e0:8d:91:3a:79:
5d:b9:36:57:08:00:48:fd:52:50:b1:20:c2:65:18:
a5:ea:c5:f7:a1:9e:0a:2f:d7:da:05:77:70:1d:e3:
c7:4b:eb:70:13:84:fd:a2:9c:ed:dd:f3:76:4e:f1:
99:a6:ee:c2:69:14:14:9c:72:ba:4b:07:3a:ec:c6:
14:77:82:77:00:49:04:e1:ca:7e:7f:94:cd:a1:ab:
77:47:88:77:ac:d6:41:e9:13:ae:f9:03:62:22:80:
05:21:d4:3c:ea:63:7b:72:aa:71:4b:63:0d:55:9d:
b4:e3:61:b2:6d:08:dc:b8:87:89:13:9b:4f:4f:b6:
3d:1f:9f:23:3b:3e:c6:fe:86:08:0b:4a:f3:bf:ed:
ed:55:53:70:b6:38:8d:ab:f8:4d:8d:a9:00:86:b1:
5d:c7:af:4c:1f:5b:bf:ae:6e:e8:dd:4b:0c:48:29:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:A6:2E:CF:22:4B:29:4C:7A:33:B5:AB:91:13:A2:C9:07:E6:20
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:57:e6:ef:80:05:f2:e9:ef:f7:96:cc:fc:4d:eb:ed:7c:
41:1d:fc:b0:0f:a2:14:79:c6:0f:d5:ba:51:5a:39:9b:04:63:
82:f3:ca:ac:84:76:50:0c:88:1c:89:1d:e7:96:ee:ff:23:d9:
dd:a3:06:0e:d3:ba:9e:e1:87:4d:35:1d:7e:da:7d:e0:06:12:
7f:b6:07:ba:fa:f1:8c:ff:c1:f5:8e:5b:c7:8a:f0:54:55:10:
a7:2a:ef:ce:82:82:5d:36:e4:98:ba:48:a0:ee:fb:58:c6:c0:
14:22:bd:7e:c4:59:64:ea:d7:b7:2d:da:97:92:bd:d0:e6:ff:
f1:21:d6:15:3a:23:0f:3e:44:ae:72:c4:64:76:25:9c:b4:c3:
ac:05:83:ec:e6:f6:6e:33:02:1a:f3:5d:5a:cb:56:cf:f1:0b:
98:bf:6d:d8:db:ed:e3:fc:0c:48:92:46:c8:4f:81:44:96:71:
19:a2:59:7d:13:14:27:f0:8e:29:27:02:d6:26:81:27:c8:85:
78:f2:08:4f:b6:2d:44:a5:22:6b:78:6b:1b:12:4d:06:cf:5c:
34:de:21:6d:86:8d:2d:e1:b8:d2:b6:4a:26:56:46:d4:3c:86:
14:49:c4:a9:81:99:a1:44:64:a0:8d:fa:70:7f:60:d4:79:8f:
5e:82:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:59 2025 by rpki-client