Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: r6DC/qtDOavdSbzROrKMHVwNMrOSdw34KabGGMOH4po=
Subject key identifier: 91:02:43:9C:99:A7:7F:D3:25:E2:78:8F:48:29:63:4A:E5:30:25:72
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019A71B7A56D4D724D15E3B1FB39BD77C5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 05F4
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: pPev0Sxmg+EBncTGY1paSoohiRx8QhHbt2oZvLQbwDc=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:6d:4d:72:4d:15:e3:b1:fb:39:bd:77:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=9102439c99a77fd325e2788f4829634ae5302572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:ed:5d:b7:92:22:01:f9:31:f9:b9:a5:82:
32:32:b8:47:60:3f:cb:87:f1:33:97:02:25:bb:76:
3b:9a:2c:ed:26:17:91:ed:60:9a:1f:b6:a1:18:ed:
f5:b1:70:6e:1f:81:19:5f:54:c0:5b:1a:97:3d:bf:
27:b5:aa:6b:90:39:30:82:2f:97:f8:d3:5e:a2:e2:
27:7e:c8:24:54:ef:97:cb:6e:37:b0:d1:2a:1f:35:
86:3d:e2:65:2e:75:90:45:1a:a5:f1:e6:f8:52:67:
80:80:3c:38:93:1d:59:2d:70:62:77:ed:71:14:6a:
82:23:fd:2f:0e:be:bd:4c:bf:2e:37:e7:32:26:44:
46:b9:15:67:c3:f7:aa:ae:57:da:8a:b7:11:c5:51:
49:8a:81:ff:1c:1c:5c:d7:d0:a1:dd:3c:ec:6e:db:
50:d8:fd:3c:e6:6e:73:9a:a4:db:c2:7d:87:10:f7:
b3:b2:f8:de:6e:1a:4b:e2:d8:a0:81:4e:d1:1b:23:
a1:94:f9:a0:53:4a:a6:c2:7b:dc:3d:54:4e:05:fb:
40:a3:e9:4c:df:db:8c:60:80:18:66:bf:ca:5e:05:
36:c5:b7:57:44:e9:ed:ce:1f:f8:66:9d:ef:86:46:
5d:1e:49:33:50:ac:98:b9:d5:7d:28:0c:cb:9e:79:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:43:9C:99:A7:7F:D3:25:E2:78:8F:48:29:63:4A:E5:30:25:72
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:da:e2:0b:f1:b8:7e:1f:1a:d3:90:97:da:e7:e5:66:c6:
b0:f8:14:5e:88:a9:01:ff:cc:ad:6f:36:e1:2f:20:b0:dd:11:
93:2c:b5:8e:1b:55:ee:05:f8:f7:9c:49:8a:db:de:ab:c9:92:
8e:bb:e7:f9:11:a3:a4:51:c1:f7:d7:74:a4:5d:32:b7:71:20:
96:1a:06:64:30:03:5e:1d:0b:bd:e1:42:44:56:a5:a1:11:88:
4c:b0:a8:91:0b:0b:7c:c7:d2:3b:d0:c4:5e:d9:45:eb:89:48:
56:5d:9e:5f:ef:59:9b:1b:b0:4a:59:06:8e:fe:83:d0:13:cc:
f4:e1:88:8b:2e:d1:9e:54:30:96:b9:41:20:d6:02:75:ef:39:
3a:df:59:41:64:af:25:dc:92:ec:78:48:94:7c:4d:35:0f:53:
75:eb:08:70:b5:04:43:37:ce:12:5f:fe:3f:89:08:8a:be:81:
43:e5:7a:ed:ac:80:34:97:28:b7:a3:79:cf:bc:4a:f8:34:a5:
d9:45:38:41:a1:76:23:c3:d3:1d:df:ae:ea:23:01:45:9f:76:
cc:4c:ea:e8:1e:1e:f2:73:c5:de:69:ab:01:2c:73:7e:1c:fd:
fa:5f:bc:a1:02:c6:8e:3b:fe:7e:a2:85:e8:d5:cc:0f:4f:a3:
1b:31:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client