Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: 3UsWIZU/cK+hIEiKorQmEz4+26CMAOFBHsIM/4mRSvA=
Subject key identifier: D3:8A:8A:9C:13:DD:1F:7E:E4:BC:9D:21:73:F9:E5:01:22:2E:33:0D
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019A725C9FC256D755A4517AB1CFF8890F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: b4ysn7rnijmmjzpeZI8UWGOq7Oba0NTe6dLen9S6zEk=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9f:c2:56:d7:55:a4:51:7a:b1:cf:f8:89:0f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=d38a8a9c13dd1f7ee4bc9d2173f9e501222e330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:5f:50:05:20:48:0b:6c:63:a1:8e:13:b4:
a2:ac:41:1b:c7:09:4f:64:fe:fe:bb:37:54:9f:3c:
67:25:b1:f6:83:2f:ec:24:d3:cf:1f:b5:86:01:f4:
8b:08:94:39:d8:d3:1c:82:42:97:b2:62:cd:52:a8:
f9:a3:0d:42:4b:9b:9d:d4:00:33:78:55:3a:36:74:
42:5b:5c:43:59:2b:22:5d:1e:31:96:7d:bc:b3:e3:
4e:c2:bb:dc:37:b0:83:55:0b:59:99:98:23:35:74:
38:f8:21:8f:f6:69:42:a1:ed:0a:95:a6:bd:eb:ad:
e1:a7:ce:9d:f7:9e:05:50:09:5d:54:d3:fc:91:24:
c9:98:36:d3:28:4b:a9:03:ee:bc:22:7e:71:8a:89:
68:f4:6c:ed:f7:0f:bb:98:70:5e:0f:5f:33:79:48:
f7:44:fa:90:23:47:36:9d:b8:74:9a:5b:fa:4b:22:
8f:ec:8e:e4:dd:d4:7f:18:2d:ab:81:c4:42:72:bc:
37:ca:67:d0:e9:8b:d9:22:d1:98:c9:04:08:55:15:
d5:62:d9:25:e2:ac:6b:1c:64:50:e1:61:72:51:47:
29:ab:e7:73:ca:34:ed:64:e2:77:f7:bf:cf:29:dd:
a9:11:6a:a9:42:cb:1d:3c:f3:07:a7:52:8b:28:c2:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:8A:9C:13:DD:1F:7E:E4:BC:9D:21:73:F9:E5:01:22:2E:33:0D
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:72:41:39:d6:e5:66:60:3a:66:7c:b9:f5:96:e8:4a:45:
ec:05:87:79:c0:6f:d7:60:cc:be:9d:77:4b:8d:7f:56:be:c9:
7b:aa:18:ba:25:8c:43:05:09:66:0f:65:49:ff:08:88:cb:68:
66:a4:d5:63:b3:47:7f:86:8f:9c:89:ad:e0:70:54:1e:3e:ec:
c7:aa:d6:d5:1e:fd:70:8f:7d:d1:35:07:a3:87:99:68:6f:c3:
27:6c:68:50:88:e4:ae:e2:04:24:97:01:45:22:be:72:2d:a1:
a1:7c:dd:f1:2f:52:b0:7a:dd:1f:57:2a:8e:1e:36:c9:2b:ac:
57:e2:84:2e:e5:62:5c:69:9f:af:23:9b:8e:74:2d:d2:f7:25:
83:00:9c:1d:8a:ca:b4:56:fc:c8:62:64:e4:ac:c4:66:6a:b6:
58:1d:19:77:3d:c0:cb:14:88:2a:1e:e2:be:dd:a6:01:3a:01:
0d:fd:73:ae:c2:50:a3:a0:f7:ae:28:e2:37:28:4b:c7:c4:f5:
52:23:cb:cb:89:db:d1:54:9d:ff:fb:f5:16:14:e3:e6:2e:e1:
1c:e6:b9:c5:cb:e8:01:75:e2:fd:b1:a3:ca:53:f2:46:b7:fe:
21:e0:dd:5e:b9:21:a6:57:a8:d5:c0:8a:8f:c7:75:bf:78:7a:
05:d5:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client