Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: 0v2QGQx0xsOGYQFR3H6uBFPFL1rT1Cz9EV92G+cSulw=
Subject key identifier: 65:AE:27:A5:B1:00:A7:73:E1:A1:8B:B4:3A:9E:AC:65:35:EE:AB:30
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019A71B7D0815CC72FADB155DE28E70F62C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: bURFpYGgbn1LQjgg+E1LMB+CKC5TiSlT0ivwhf/QC58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d0:81:5c:c7:2f:ad:b1:55:de:28:e7:0f:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=65ae27a5b100a773e1a18bb43a9eac6535eeab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:e5:54:0b:da:f9:64:3a:57:3e:f6:2b:1e:
88:a4:45:f8:c5:2b:13:93:64:ab:e0:6b:8a:1d:9f:
b1:8f:02:a2:74:1c:0a:17:f0:66:a2:31:7f:f5:1e:
88:8d:91:63:cc:8a:0b:1e:f2:5e:1f:06:29:02:f2:
58:d8:8b:b1:d8:74:b2:ae:4c:8f:19:f9:31:1b:87:
9e:b6:62:cb:c8:53:ba:83:7e:31:66:43:32:c5:43:
82:3a:2f:f7:81:6e:d4:85:f7:13:d6:2a:42:1f:6c:
fc:9a:66:23:d2:c2:70:5d:8a:7e:69:37:26:49:8a:
78:6d:2e:f4:df:da:02:1b:5a:eb:b9:75:67:95:b0:
16:ed:bf:b0:c2:77:3f:51:a6:8f:23:1c:72:46:95:
8a:65:ea:ac:d5:46:e1:e4:5b:11:a4:0a:2b:12:57:
fe:ae:e0:58:50:de:b4:0b:a3:ea:9c:51:e7:34:66:
41:06:10:bf:ba:4f:cb:2b:6b:d7:bf:f5:0b:26:09:
09:b5:85:8f:4a:92:9b:39:ac:2f:e8:c6:de:be:b9:
f3:6b:59:05:64:48:8e:07:44:80:9b:40:8b:ba:b8:
ff:1f:b1:6d:a8:13:e4:04:28:fb:57:07:28:a3:2c:
e9:b8:e3:95:1c:ed:c0:9c:1e:aa:56:6f:c7:1e:20:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:27:A5:B1:00:A7:73:E1:A1:8B:B4:3A:9E:AC:65:35:EE:AB:30
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:5f:68:de:09:0c:46:91:31:83:2e:70:03:95:30:fb:94:
e9:d8:4e:46:ad:06:27:e4:f6:c0:82:c1:f7:50:b7:73:c9:78:
3f:f4:ab:8c:d0:2e:b1:21:82:0a:d7:a1:af:96:8e:3e:cb:3c:
bc:ad:61:e0:be:58:f9:23:31:16:03:66:29:5c:07:fc:e4:c0:
bd:87:94:7e:40:a0:2c:f4:b6:28:e9:33:5b:5c:6d:22:5e:3c:
c7:05:73:f7:bc:7e:f0:c3:b8:a5:37:65:f4:31:47:b4:83:35:
8c:45:f6:e3:80:bd:7e:72:9e:3e:02:1b:23:e7:bf:d4:d6:3d:
37:d4:48:49:81:84:59:be:e8:96:44:f0:8e:d2:ce:f1:a7:e8:
5e:05:a8:2b:b0:47:b0:88:2d:18:4b:c9:33:d8:f5:29:4d:65:
5a:bd:4d:9b:69:36:de:c9:cf:25:f6:95:2f:e3:15:1f:d7:27:
3e:c0:d7:03:59:1f:9a:85:aa:e8:a8:92:9e:6b:c5:7a:2a:c4:
68:10:af:67:e6:d7:e7:c2:f1:6e:08:1e:02:2e:74:12:f3:f3:
2c:b4:da:52:56:e1:6e:a9:c4:8a:7b:61:d4:9b:b2:0c:5a:4f:
5c:a0:8c:4c:a8:2b:e7:21:17:de:3b:1f:69:2c:f8:0c:46:ee:
37:e9:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:51 2025 by rpki-client