Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: MnVKlOzTB23TBDO5eWclhu/f9Nuav1FX6P2TgzVrs4I=
Subject key identifier: B3:0F:68:41:50:0C:7B:99:FA:8F:22:16:13:A9:AB:35:DB:E9:49:CE
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019A71B7A6D718CD9A9C04386BD90CF072B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0C85
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: 9Xw+VczuB+WD6yl21DzMq3UmsR/7bj0M/nEXrEUeyJY=)
2: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (hash: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a6:d7:18:cd:9a:9c:04:38:6b:d9:0c:f0:72:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=b30f6841500c7b99fa8f221613a9ab35dbe949ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:da:be:f5:f4:7c:02:14:a1:9a:b6:29:69:
e2:5c:aa:c2:7c:47:4f:05:c8:c2:d3:2f:9f:02:52:
9f:2b:82:89:87:31:5f:11:77:67:b8:b6:2d:d8:c2:
b3:4d:94:d1:bd:31:d4:52:4a:7c:2d:55:1e:c7:dd:
37:86:74:62:8b:6d:d4:81:5c:9e:d8:70:ee:24:97:
5b:af:26:ca:ae:63:b6:d0:2c:69:cc:15:4d:01:de:
86:be:5b:47:c7:7a:0d:bd:26:43:66:f5:77:38:8e:
ba:57:c7:48:60:52:70:18:bf:33:44:3d:53:54:e7:
20:b5:52:f8:9d:5a:db:2a:bd:24:3d:59:3d:27:cc:
31:b6:ae:c2:79:f7:a7:16:6f:c7:43:74:a0:86:00:
da:2d:dc:6c:d7:0e:3b:71:80:f7:c2:f5:b5:bf:05:
1d:13:d8:c7:be:6c:26:55:55:6f:a3:91:aa:17:6c:
8b:16:87:78:c2:21:65:36:84:1c:f9:51:61:fb:f8:
01:84:c6:eb:b7:e7:b6:02:02:c2:ed:d0:28:e2:2d:
00:64:90:76:78:8e:25:d8:31:1a:f4:d6:52:f2:03:
d5:19:02:41:43:e2:0f:9d:8d:f0:50:42:9e:31:32:
00:80:28:00:be:ce:b8:93:d6:1c:c3:d0:7f:40:c5:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:68:41:50:0C:7B:99:FA:8F:22:16:13:A9:AB:35:DB:E9:49:CE
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:e7:67:8f:a1:4c:fa:e6:9c:1f:95:d7:57:c7:d4:d3:c9:
c1:47:1d:f9:a9:a9:19:d6:d2:f5:8e:d1:d3:d2:42:f4:67:40:
9f:c0:53:f6:24:7d:b5:27:49:c9:39:c0:c5:8d:52:58:d4:eb:
e1:13:cd:e1:a5:f7:3b:f6:74:c4:04:80:f0:3a:f3:16:9a:d9:
b0:18:ac:6e:59:49:5b:8c:bc:a4:6b:4d:b8:3e:d4:c5:4d:f2:
88:61:86:19:18:bb:66:06:bd:26:ef:08:1d:3a:84:02:c3:df:
c0:0e:a6:90:ad:45:74:a0:d0:ce:8d:04:2a:7f:79:aa:21:68:
62:96:25:20:44:72:bf:ad:90:ef:9d:5f:e6:9d:d5:5d:1d:fc:
da:96:f1:31:41:cb:36:86:b1:09:b4:bc:ed:49:1c:b7:bc:fa:
fc:10:b8:78:da:e8:8a:8a:35:ef:5c:2a:f6:e9:aa:68:70:96:
4c:39:01:35:ef:60:65:1d:69:44:dd:a1:f6:9f:e3:58:53:53:
26:e0:c5:76:92:78:7b:91:5b:91:1b:86:d6:5a:f8:63:e2:24:
d9:81:83:08:a5:27:6b:2b:c0:09:37:71:91:1c:09:83:20:b1:
af:7e:95:d9:8f:62:62:d1:91:f7:1e:ad:66:fc:49:23:1b:c3:
c4:a8:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client