Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: YzD+5sKdEzYAlhAsOapsd9oTbf28HIBAkoSd/BkN5jQ=
Subject key identifier: 3B:CD:79:76:03:5E:DC:EC:C1:77:37:80:15:57:BC:18:51:D4:D3:C6
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019A71B7E2AA99BDCA656BD4546354975FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0F1C
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: 39c4b0Qtrlf/6xKDOci+e9crTnAMiqRqnbJ5M/FZ0qo=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e2:aa:99:bd:ca:65:6b:d4:54:63:54:97:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=3bcd7976035edcecc17737801557bc1851d4d3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:7c:fb:a8:33:b9:5d:11:32:c6:81:d0:eb:
0f:56:f7:ca:6d:53:7f:d9:76:3e:ae:0d:3b:72:ee:
46:1d:36:5d:ea:2f:5f:92:ac:68:f9:f2:e9:4f:4b:
75:56:2e:4a:d4:cf:4d:39:99:eb:23:0c:30:63:19:
46:03:1b:b3:03:8a:ba:c7:0b:0b:e0:f5:96:68:40:
45:cc:5d:c8:a4:03:79:b5:3a:35:9b:cc:ca:34:d8:
c8:64:34:e6:df:48:45:48:6d:70:e3:b9:90:1d:45:
16:58:25:45:47:96:76:71:54:83:62:0d:b8:b1:fc:
27:58:a4:cf:34:49:05:69:18:30:2f:7d:35:b0:db:
d7:d6:23:10:44:5a:c1:b5:f6:c9:06:e5:42:55:77:
b7:61:8d:bc:37:4f:59:3b:bf:77:7b:16:83:d6:71:
23:b0:49:73:cc:4d:88:39:e7:ed:c8:36:c6:88:cd:
9f:e5:6b:af:d6:df:cf:fa:19:d5:7e:a9:f5:82:32:
ee:ef:32:01:7f:cf:a7:1e:31:84:a7:ba:09:bf:4a:
4e:4f:20:ab:b4:a5:86:e5:50:81:0d:4d:86:76:0b:
81:a1:06:99:e0:a1:89:44:b3:93:37:0e:50:e7:f0:
da:b0:01:15:0f:f3:17:c8:12:2a:21:6b:d0:9f:ad:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:79:76:03:5E:DC:EC:C1:77:37:80:15:57:BC:18:51:D4:D3:C6
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:96:96:4f:c1:ac:1c:b1:85:e3:55:38:90:41:ce:ea:4b:c4:
b9:8f:71:ae:7b:b9:2a:27:83:85:d4:20:b4:82:ee:97:ad:87:
95:5b:22:55:b2:77:9a:f1:b0:ab:61:ff:7d:a0:70:5c:cc:bd:
06:3a:bc:9b:f0:22:ae:5d:77:8f:57:85:30:34:9e:a6:9c:57:
0d:df:e1:af:17:3d:23:0a:2f:74:45:95:c7:06:70:40:ff:50:
fe:8a:5c:03:b6:08:ed:18:9c:1e:4a:64:d9:5e:ca:67:73:66:
7c:6c:2d:7e:d4:59:f9:40:f0:ba:19:3b:20:cf:f6:a9:fa:f9:
59:cf:44:b9:15:10:dd:e4:37:bf:e8:9c:33:5d:a0:58:a4:8d:
ba:8a:4e:0e:0a:27:97:4b:a2:9a:8d:3f:93:0e:5e:3d:6a:9c:
82:49:0c:65:4f:4b:ad:3a:4c:26:0e:4f:ea:6a:4c:fa:e1:fb:
b4:39:a0:28:7e:fb:36:68:8d:c8:df:ff:6d:23:d6:53:ac:b2:
36:e3:7b:e7:1f:79:6e:38:c4:8e:58:7a:b9:bf:95:b9:c4:fb:
25:c1:59:89:50:59:f5:cc:5a:11:4d:b0:1a:0f:21:b5:8e:dd:
38:f4:23:2a:7c:7d:a4:48:81:9e:3c:a9:f8:d1:ae:bf:a9:9c:
00:d1:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:01 2025 by rpki-client