Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: j1Kehu+lAVGTwinU6LkPc2tZIiY7ZoHlRbKwZne6RU8=
Subject key identifier: 27:1A:65:8A:61:94:F2:1B:6F:82:5A:BA:22:86:28:AF:9B:76:0C:32
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019A71B79EF25343670FD2FA122B52322F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 9VC7lrD2gTOAnKa8kYHPh8YSXiaI6eQDXQzswwTAmW8=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:f2:53:43:67:0f:d2:fa:12:2b:52:32:2f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=271a658a6194f21b6f825aba228628af9b760c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:76:ff:d1:e5:74:0c:49:70:3c:b9:bd:fc:
76:a0:72:d5:32:a6:f8:2e:af:e7:63:d8:35:0d:77:
14:04:e2:cd:ab:0c:10:fb:93:bb:0d:bc:ab:28:4b:
4c:6f:0c:bf:54:30:76:f0:36:2f:18:88:d0:9a:dd:
13:92:55:df:9d:19:cc:e2:25:58:cb:6d:00:bc:5d:
d7:0a:82:b2:6f:4d:11:cc:8f:a2:d1:ab:cf:54:be:
67:95:27:cf:a8:95:65:54:8b:56:1a:f3:60:04:46:
14:bc:27:44:48:62:8b:f3:10:50:dd:0e:9e:2b:4b:
bd:bc:da:4c:bd:58:15:8c:f0:65:7b:44:2f:85:87:
4b:1f:85:56:9f:3e:e4:92:c3:ee:4d:05:2e:7f:56:
81:c3:86:b7:85:bc:96:0c:62:f3:72:56:08:d9:85:
48:c3:85:bc:83:7c:6f:24:c4:a6:ca:4f:61:dc:bb:
ff:d4:5e:58:31:79:5f:75:0f:6e:e2:59:9c:26:23:
a3:21:fd:36:18:ae:f8:bf:c3:b0:ed:c0:fd:a0:49:
02:4b:6e:af:67:d0:3f:46:b8:00:a2:75:7f:ae:8d:
2d:cb:8c:f6:bc:f0:bc:b8:44:c1:4d:44:90:b4:36:
1a:a6:a0:eb:b8:cd:ef:be:99:e1:0b:37:ac:59:24:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:65:8A:61:94:F2:1B:6F:82:5A:BA:22:86:28:AF:9B:76:0C:32
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:98:b6:4a:30:48:d7:75:60:72:89:2c:a7:ab:7e:5a:e2:
70:32:3c:ce:ff:95:32:3b:0a:6a:2e:7b:31:cb:7e:8a:8b:3d:
56:4f:25:c8:11:a0:af:f8:95:2d:a1:b3:24:03:44:5a:32:6f:
c9:40:54:25:94:1a:02:83:34:e3:6b:64:b9:4c:e3:5a:f2:9e:
61:f7:ab:03:5a:0f:47:53:4c:a1:c0:5a:66:0c:cb:82:fc:00:
99:3a:7e:ee:31:39:3a:04:25:2c:5b:2e:91:63:6b:54:7e:ef:
cf:ee:93:a0:40:e4:dd:00:50:93:f2:13:8d:01:c3:9a:1a:ef:
99:6e:88:8a:68:01:df:f4:06:2c:50:2a:81:17:32:cf:e4:f7:
3c:cf:86:50:cc:7f:34:be:fc:de:a2:33:fe:53:e7:14:ec:18:
0f:c5:6a:fd:31:c4:28:69:4f:bd:db:cd:3d:50:6f:16:98:29:
3e:b4:97:54:fc:24:74:96:97:21:1d:f3:51:7f:7d:6e:a9:4e:
93:e1:bb:21:3f:8d:e0:d6:da:c4:21:db:66:41:5b:b7:c0:61:
b1:42:cd:55:ff:09:6d:bf:b5:cf:9e:30:84:c7:8a:6e:46:06:
41:cd:a7:bf:93:4f:30:93:ea:84:3c:fe:32:85:d2:90:16:24:
e4:bc:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:42 2025 by rpki-client