Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: UTOLoDsbmmucqwv6LtrzfwsjE3q44t0OJqkHeQ3dCiU=
Subject key identifier: 3B:43:DE:5A:49:6F:EF:89:51:C6:B6:0F:BD:E2:42:F7:6E:93:C5:5E
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 019A71B8C3AA028A2CCE1F4FF385DA4FD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: nuGfdGpsTm0AWBy6CqDi6oGUSyqcVZoSPCrSRvhsrjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c3:aa:02:8a:2c:ce:1f:4f:f3:85:da:4f:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=3b43de5a496fef8951c6b60fbde242f76e93c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:e9:d3:e9:43:2c:f0:5d:1e:ef:4f:d4:4d:
0a:fb:90:28:ab:79:96:1b:3c:9e:da:9c:20:d1:84:
a0:d4:e9:90:55:4a:cc:6e:0d:23:8d:aa:7d:fe:fa:
77:ea:68:43:ec:e1:73:2b:c9:ba:ee:2a:47:73:49:
d8:16:1f:f0:d8:3c:4d:d7:be:ff:5a:ed:fd:01:ef:
26:ba:c1:74:cb:41:f1:79:20:d0:04:fc:df:41:3d:
5f:c4:7c:85:6b:f1:e8:07:d1:00:fe:51:72:b4:12:
27:b0:6a:57:e2:80:fe:c1:69:98:2d:d2:26:5e:65:
09:4d:54:80:3d:cf:f8:fe:03:c1:77:7d:69:d5:8e:
0a:5f:0f:35:d6:78:bb:2f:ad:d2:ba:80:af:04:29:
29:c0:62:4a:7b:69:87:d6:5d:87:a4:d5:3c:35:4e:
e0:c4:ab:4f:69:9b:0e:f6:54:03:bf:bf:12:4f:bf:
46:ab:be:40:ca:6d:18:b6:06:be:45:76:fb:42:1d:
a6:f1:c1:23:de:07:20:5d:02:ec:dd:1c:2b:0b:99:
8a:77:e0:f3:0c:48:d3:8f:ec:93:db:f3:5f:13:5f:
7e:92:8f:ed:51:9c:b1:25:a0:a3:8d:70:fa:46:d8:
f7:55:e4:14:6f:24:03:7f:1a:f7:ef:e4:44:ca:87:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:DE:5A:49:6F:EF:89:51:C6:B6:0F:BD:E2:42:F7:6E:93:C5:5E
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:74:ba:5d:00:86:19:97:17:e8:41:41:ea:2c:2f:32:45:63:
e0:97:6d:8e:15:22:b3:f2:f3:6d:d9:a0:a0:20:b5:be:54:d0:
99:d1:df:5f:f5:92:76:66:01:0c:fd:a7:ce:3e:f1:dd:07:42:
49:02:13:da:db:b7:cd:55:57:17:24:a1:5f:5e:f6:ef:82:4d:
09:e7:f9:13:0d:7d:0b:08:06:bd:51:d8:e8:93:39:15:86:f5:
e1:45:16:13:0c:c2:38:9c:72:25:04:00:19:40:4b:06:ef:9c:
5f:3c:25:f4:27:76:64:8e:31:7b:26:dd:b4:b7:eb:16:3f:43:
c0:37:be:6f:55:b6:f0:e9:59:80:bc:c2:ae:93:1c:ce:f1:27:
ba:d3:c9:b5:bf:3c:b7:14:a9:89:b9:b4:ed:b3:29:3b:96:6d:
7a:01:e6:33:e7:9b:19:cb:04:1e:78:c9:ab:10:35:73:d5:15:
b6:47:14:43:13:e2:01:49:7b:9f:ce:1c:98:d8:df:a0:24:67:
ab:82:62:01:c5:87:12:f5:42:38:6e:73:de:be:19:fe:06:4e:
ae:3b:48:02:2a:45:ab:49:7e:87:2e:38:bf:a7:72:84:6f:42:
43:33:1c:2c:9b:06:f8:e8:95:ef:8e:4f:45:de:f2:7a:ba:3f:
79:02:f8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client