Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: SiFLNqWcrMoTDUMruFdNPEWXGWUzan1V+6C6pZMLXno=
Subject key identifier: AE:0D:9D:D4:26:CA:11:BA:E8:10:CB:21:E9:40:76:E5:97:E8:A4:0C
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019A3F1339AE983C4D0BE21CCA8EACC6B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 170D
Signing time: Sat 01 Nov 2025 11:00:15 +0000
Manifest this update: Sat 01 Nov 2025 11:00:15 +0000
Manifest next update: Sun 02 Nov 2025 11:00:15 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: H3MOSqPBJjjqB9+g/s0TFPt6JnUA6ERSb+lxlDBZk+c=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:13:39:ae:98:3c:4d:0b:e2:1c:ca:8e:ac:c6:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Nov 1 11:00:15 2025 GMT
Not After : Nov 2 11:00:15 2025 GMT
Subject: CN=ae0d9dd426ca11bae810cb21e94076e597e8a40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:03:d3:88:51:75:3b:9e:df:97:1f:d8:04:
70:0d:2a:1d:31:3e:3c:c8:46:6d:48:47:9f:62:40:
aa:31:60:58:b4:ee:8e:e8:a6:c8:e9:30:de:2e:ab:
1e:06:cf:e5:1f:03:b9:7d:3c:81:8e:29:39:0f:69:
65:6b:90:19:41:24:a4:e3:6b:e3:da:42:e0:07:ef:
16:73:f6:69:4e:b0:9f:13:77:02:23:51:a1:13:1a:
c6:d2:6b:9f:48:42:a5:47:c4:de:9e:d1:14:02:8c:
ea:3e:50:a3:9f:60:0d:ac:55:1a:3c:d3:17:cc:24:
96:d1:ac:1a:5e:92:0e:12:98:0c:d3:42:7e:50:05:
df:a5:9f:bc:0e:64:26:ff:8c:36:c4:79:e2:dd:4d:
4e:d8:d0:96:4f:2a:48:eb:d8:2a:c2:5f:3c:f2:80:
c1:e0:c9:0c:44:66:84:7f:96:e4:a0:aa:62:c2:c0:
45:15:54:f8:2f:10:8d:da:88:41:9d:04:06:3d:36:
31:a2:f9:d6:84:d1:0b:51:20:61:de:58:22:fc:cf:
29:fc:9f:b3:cd:7f:5a:b8:e2:c2:0e:69:ee:05:3a:
87:24:1f:b8:67:79:9e:23:81:6f:e4:2c:1d:4e:6f:
91:0a:88:df:02:1b:cf:fc:12:ff:b3:55:b6:94:52:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:9D:D4:26:CA:11:BA:E8:10:CB:21:E9:40:76:E5:97:E8:A4:0C
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:a2:0b:91:e4:9f:37:d2:a3:70:cb:d4:38:1f:96:d7:9f:
1c:8e:73:44:6e:21:e1:87:1a:13:e9:aa:48:82:bd:88:2c:4b:
fd:96:e6:27:38:cf:8b:31:18:15:79:4c:ed:68:cc:94:3c:7f:
8b:cb:2c:ae:3e:e6:ac:31:d2:33:80:50:e2:67:0e:05:ec:42:
85:0b:41:45:fe:42:57:a8:14:58:62:9f:5f:f8:3b:f4:c6:de:
4f:92:d8:d7:e9:c5:9d:06:ef:65:f4:52:d5:c0:81:a1:04:c0:
de:e6:47:3f:f2:7c:f9:f9:8f:fe:b1:eb:f1:83:b1:a5:41:87:
e5:48:d9:ac:d0:6a:87:af:c6:cd:aa:be:d5:f2:79:bb:5d:b6:
bf:0a:48:73:ee:fe:f5:3d:f9:67:64:66:03:ed:1d:e7:ab:21:
63:e7:5a:ec:5f:b2:08:1d:c9:f8:1f:5a:6a:b7:55:ae:34:35:
e2:b7:43:52:c3:19:54:50:1d:3f:8f:db:b3:d5:e3:75:22:7b:
c5:78:b5:b4:ed:3f:a8:c6:13:e5:e1:6c:87:37:2d:8f:4d:da:
fc:81:b2:cd:86:16:b6:20:6e:c4:23:e8:6e:52:e8:d3:91:2c:
45:62:e4:27:c5:aa:6b:00:9c:3b:82:c0:63:fb:a8:17:e0:ac:
33:05:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 17:49:26 2025 by rpki-client