Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: YaFMpBn/vCNu8qBUmZgTethZcpyOQoREAjYz4X+3yQ0=
Subject key identifier: 09:BD:3B:CB:04:E2:46:A4:2B:A1:02:BD:84:E5:36:FB:C8:1A:29:88
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019A71EE6031BC7126AF7A1B99DC624641E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: cdMjvkWTRJPHgwQmcVjJbBiYfkoSTwV6BDw49TDUelo=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:60:31:bc:71:26:af:7a:1b:99:dc:62:46:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=09bd3bcb04e246a42ba102bd84e536fbc81a2988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:2e:d4:df:79:c8:3e:d8:31:54:57:8e:a0:
44:e5:aa:42:72:fb:1f:18:78:91:c4:33:f1:f0:20:
39:e6:95:ed:1c:6a:37:4c:7e:5a:7d:db:52:05:5b:
c1:42:e7:31:ce:56:12:68:ce:94:e4:d7:2b:cb:b8:
fe:a2:f2:03:96:df:f0:19:62:0f:80:51:91:4c:ac:
22:ea:fa:6f:5c:55:8d:4f:eb:31:39:30:69:1e:9d:
66:28:b8:5f:4f:f5:23:92:d7:b1:fe:a1:d9:eb:2c:
05:17:62:f7:5c:f3:b7:a6:ce:d6:12:8b:fa:94:70:
8a:a2:0e:96:38:8a:30:c4:78:73:2f:0c:38:ac:5e:
f5:a2:89:1b:ba:39:3b:76:f0:85:f8:fa:64:a0:df:
1b:37:c7:e6:e5:4b:54:e9:d8:d5:41:13:94:45:8f:
93:ad:05:1e:51:ed:bf:a2:36:17:5f:f2:cf:f2:60:
b2:d3:09:00:2e:6e:a1:7e:a8:50:1a:13:e1:2d:d0:
49:4e:06:32:5b:1d:85:2b:ab:16:3a:17:61:bd:56:
df:d2:f8:7f:5c:90:ed:75:f6:27:44:ad:bf:81:fe:
7c:ab:b8:51:89:60:bf:01:c5:de:74:2a:22:47:de:
4e:45:31:da:fe:6b:f7:7b:25:1a:c1:f8:4e:e0:01:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:3B:CB:04:E2:46:A4:2B:A1:02:BD:84:E5:36:FB:C8:1A:29:88
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:af:9f:1c:9e:fd:e0:9b:13:bb:d7:aa:78:82:9c:44:68:
b2:e2:dd:98:56:2d:a9:2b:4e:bd:24:91:e8:63:a3:03:c4:29:
2e:f1:e2:b6:6d:de:06:12:4f:4d:d1:35:2d:ad:3e:db:dd:35:
4e:2a:56:f5:c8:5b:77:bb:01:f3:4a:76:31:de:de:01:64:7e:
ab:7e:00:83:8d:b5:96:58:69:9d:e1:d1:0f:f8:e4:5f:ea:51:
7a:bb:06:67:58:8e:88:bc:3e:a9:98:c8:b1:0d:8c:26:6e:48:
88:08:4b:d2:60:3b:04:13:34:ed:f9:28:d8:08:88:8e:81:d4:
1d:4a:06:47:2f:8e:67:e1:94:75:78:00:44:42:8d:66:4e:78:
83:8f:46:37:3c:82:b6:36:8d:43:04:db:c5:8f:7a:b8:f0:bf:
44:48:39:39:01:6a:a3:20:b4:eb:1d:9c:71:7e:be:e0:90:e2:
02:77:01:7d:ec:1e:c1:0b:49:54:b5:b4:99:58:3c:6d:02:6f:
ea:9f:0a:57:3f:3b:bc:cd:46:62:1b:4f:3a:4d:72:50:98:dd:
79:f2:37:4c:cd:71:9d:65:64:ae:d3:47:3a:61:b6:30:e2:f7:
80:28:4f:f8:6c:60:bd:6a:bd:a4:8f:aa:86:aa:7d:36:d9:f6:
7b:2b:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:25 2025 by rpki-client