Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: s2ojTsGID613dk4rdYo2v/BJWjIWgR/UGv4TiY9HJ4s=
Subject key identifier: DE:18:34:19:D2:F7:C1:B2:C1:81:51:43:A0:96:1B:DE:D6:29:67:9D
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 019A71136BCCA92F1F2AFE91B2821B051F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 11EA
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: teJvITGeS58LB05MhFDCD5JQcdFJjjCErTYBRYihaIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6b:cc:a9:2f:1f:2a:fe:91:b2:82:1b:05:1f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=de183419d2f7c1b2c1815143a0961bded629679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:03:3d:39:19:14:38:89:be:49:0f:35:c9:
86:fd:d5:9f:25:d7:fa:8b:1a:8d:aa:07:37:2b:8e:
1a:36:29:00:44:88:e4:d6:88:f2:35:2a:a1:b1:3f:
be:93:e1:30:a0:32:34:e7:6d:0f:8b:49:82:9a:bc:
fa:23:4e:cd:8f:09:06:61:7f:34:9b:0d:89:c3:1a:
c6:8e:04:8b:c6:2b:4c:c1:4a:03:cc:b6:82:3f:0f:
6a:bd:cb:9d:ae:d2:3f:ff:74:d6:9e:1c:73:e7:9e:
ee:42:a6:7b:10:76:3f:23:b9:b3:f8:01:af:b7:9b:
97:d9:71:b1:6a:29:ee:f0:8d:5a:ff:1a:2f:22:51:
2a:3f:c6:6f:b8:66:80:6b:9b:af:eb:4c:74:06:77:
b1:92:2c:62:13:d5:6f:94:15:00:d3:de:11:55:04:
20:a2:e5:64:57:e4:2e:9c:23:f3:13:db:db:7c:fa:
7f:92:cf:6a:6e:cc:1b:0e:07:c8:83:f2:66:af:44:
f7:86:cd:b7:c1:70:cf:4e:03:0a:30:31:9d:c6:ea:
fd:7f:3d:a0:02:1a:c6:71:9a:dc:f3:4a:70:54:96:
0b:50:e6:76:37:9e:bf:bd:b4:a8:3c:e6:b4:77:bc:
ee:91:57:5f:40:f2:44:8b:df:e0:09:86:02:19:1d:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:18:34:19:D2:F7:C1:B2:C1:81:51:43:A0:96:1B:DE:D6:29:67:9D
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5e:25:e7:b7:24:cd:45:6a:b0:94:41:98:28:b8:df:85:92:
fe:3b:a8:f9:42:a0:71:f3:70:fd:8c:fe:26:b6:16:2a:56:49:
23:a3:5a:d3:7b:70:c6:57:7c:3b:2d:8f:cb:0f:aa:ff:f6:c9:
e6:80:90:f7:a4:99:49:bc:8c:fa:b5:43:ad:93:13:e5:e2:80:
0a:30:bd:3f:f8:b6:5c:fd:a4:6a:62:82:63:ea:b7:14:c8:89:
a6:93:1d:b0:21:37:30:ab:32:2b:c5:0b:f1:01:65:c0:a0:a6:
8c:09:3f:b8:5c:69:23:42:39:ea:44:b4:d1:3c:8c:0f:0f:1a:
fb:30:d6:ec:43:cc:59:b9:4a:87:ff:8b:35:89:16:a3:99:17:
30:b2:cb:90:17:9b:6d:ca:cf:1a:38:24:2c:53:3a:56:3a:4c:
d0:5d:46:e5:82:45:cd:50:74:c0:3d:23:b3:e1:38:12:02:ea:
aa:3c:6b:50:34:b6:40:f7:03:e0:76:24:0b:b5:98:ff:f0:56:
07:2f:28:21:22:a4:d1:85:6b:8a:ba:c5:81:45:71:96:a2:36:
a6:63:1f:e2:c7:a6:73:77:e5:24:04:f8:37:6b:f4:6d:a5:27:
8a:dc:57:5a:4a:b3:ab:82:8a:57:0e:2d:ca:f7:d6:41:80:f9:
5f:3b:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client