Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: yjdY21jhFM09gbY7S9UAiLKrJXQLbawXm69+cBcL4BY=
Subject key identifier: F2:49:27:12:65:CE:E6:1F:D8:79:74:95:90:18:86:23:81:35:48:37
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019A72262D8D21D3E1B1AF80EECB2FD8C923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: II3f5eqgUdAOHBcYj2UHyAl+WT0i8Zh0W2NHQIeTM1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:8d:21:d3:e1:b1:af:80:ee:cb:2f:d8:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=f249271265cee61fd87974959018862381354837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:be:18:c3:ab:d6:04:f8:9f:33:e1:87:59:
0e:8a:1b:5f:b3:9f:3f:1e:e9:dd:b0:83:a1:50:4a:
7c:b8:6d:e5:ed:3b:19:eb:1c:da:ac:d3:09:1c:38:
35:c2:e1:ee:7b:5f:e2:d5:20:78:b7:41:fa:81:1b:
7a:d9:76:a4:22:c0:7c:45:83:b1:05:c0:52:b7:70:
dd:a9:50:81:59:ed:65:41:64:89:cb:a6:c3:78:16:
15:e5:3f:d7:57:7a:16:d5:e0:32:a2:4b:9c:2a:1b:
b9:35:6f:20:33:21:84:b4:40:7a:f4:06:1b:de:50:
76:ce:3b:cd:53:61:33:2e:4b:56:81:5e:31:d0:3c:
63:a8:32:a8:23:37:4f:75:e5:ab:b3:25:58:08:9c:
ce:43:f7:35:91:aa:05:29:22:43:89:2e:2b:36:44:
2c:e6:32:ca:9e:ad:89:0c:e0:9f:71:44:78:c4:07:
88:3b:db:6a:7e:4a:f5:2d:99:bd:98:07:45:c5:31:
7e:8f:8f:13:3b:b0:dd:1f:d3:19:2f:14:82:b1:13:
eb:6f:ca:91:28:1e:84:99:99:51:69:ee:aa:3e:ee:
d6:1d:17:58:62:44:42:6a:a1:92:fc:ec:d8:8e:0c:
56:64:ba:3e:94:db:14:ba:29:51:58:14:12:8b:54:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:27:12:65:CE:E6:1F:D8:79:74:95:90:18:86:23:81:35:48:37
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4a:7a:78:91:fe:be:04:62:e8:33:4a:19:1a:0c:3d:80:b7:
35:41:88:c0:d3:4e:06:e4:f7:c4:71:0c:f3:72:7e:b5:d5:e2:
21:c4:b5:17:dc:b6:e9:24:30:34:69:14:f9:12:23:77:93:35:
c8:cd:59:1f:61:ab:55:1f:5a:42:a8:11:8a:4a:fb:03:a3:fb:
66:44:0f:88:de:a5:ab:93:65:5c:1f:bd:ca:49:45:31:3f:f8:
c7:bf:4f:11:e4:6c:b3:73:08:20:91:46:5f:0a:be:15:a7:8e:
16:43:58:f2:63:21:cc:ef:dd:04:76:bd:b6:c1:b7:1d:67:82:
07:92:4b:e8:11:b9:70:89:18:80:68:60:b7:04:7e:2b:01:39:
97:1e:18:34:3b:5a:eb:fc:07:5e:f1:57:d7:03:5b:7d:42:9f:
96:6b:cb:53:ca:63:26:8b:ba:23:82:f1:a9:ff:8f:cf:a3:e4:
10:9c:4c:d1:70:f9:1b:2b:0f:67:37:62:48:4d:df:a1:7c:36:
ed:67:75:15:1f:d7:99:ff:2e:c4:c3:b6:67:22:3a:94:de:2a:
03:45:03:45:78:a6:c8:67:71:91:c9:f1:49:c1:8d:c5:9e:77:
c4:00:8f:81:56:08:51:ee:18:30:a5:32:43:f9:4f:ee:0e:3d:
9f:67:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client