Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: l4ZIDKLTrQ55wZ0FWmgyQomuJ4tkPO3137Ku1mi8AmI=
Subject key identifier: F4:D5:E3:A1:7F:EF:87:55:9F:92:E5:46:06:BA:EF:5A:44:90:C2:62
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019A0C390360D82865EB43192E56EA5E1F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0E2D
Signing time: Wed 22 Oct 2025 14:00:54 +0000
Manifest this update: Wed 22 Oct 2025 14:00:54 +0000
Manifest next update: Thu 23 Oct 2025 14:00:54 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: DKu2A7Yk41qfTIu9lHVS7z6P76+bA4RfwjSC4hYzKzU=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: KV03Rnxi6WRZwO1a4oGeC3HanlY.roa (hash: 7zq8HVJc+s32NHnBgUroFGKyISFlCLE015+0grkcycE=)
4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:39:03:60:d8:28:65:eb:43:19:2e:56:ea:5e:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Oct 22 14:00:54 2025 GMT
Not After : Oct 23 14:00:54 2025 GMT
Subject: CN=f4d5e3a17fef87559f92e54606baef5a4490c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:c8:63:78:03:09:11:eb:98:9c:75:14:ad:
98:18:c9:26:5c:64:8f:0d:87:00:47:82:77:4a:26:
75:6e:a2:dc:b3:d1:21:fc:7e:77:3f:d7:dc:5c:22:
18:96:9c:e1:ab:94:54:ef:de:b6:da:b4:ac:86:c5:
3a:c1:45:f6:84:a8:42:d4:cb:b7:6b:a0:21:f6:43:
60:2e:2a:c3:6b:d0:54:41:82:c0:c3:bf:80:d8:bb:
dc:5b:aa:6d:ce:89:22:92:5b:8d:6b:c2:7e:92:99:
05:89:f7:8b:54:2e:48:fc:b0:35:2c:5a:85:5c:b1:
a1:30:bb:c1:c4:c4:97:c9:94:3b:07:04:16:c5:c4:
a2:b2:13:e7:21:ee:8f:65:d2:23:1a:f7:10:20:ac:
c9:2f:27:4a:de:7a:ab:6d:58:2a:9b:e3:4b:34:55:
82:cb:ab:2f:db:8c:e4:13:2e:d6:bb:0a:e9:09:b9:
d5:b0:c9:15:0c:3a:bf:db:5b:2a:86:57:d4:34:53:
e3:16:0a:ca:60:89:a1:f3:3e:39:69:28:2c:0e:57:
23:83:e0:c1:93:b7:be:81:39:68:14:ba:4e:37:47:
50:a0:a1:d3:a8:93:3a:dc:28:5a:62:bf:98:3b:1b:
ed:f8:81:0b:b3:da:c6:69:4e:2c:82:6f:56:c8:cb:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:E3:A1:7F:EF:87:55:9F:92:E5:46:06:BA:EF:5A:44:90:C2:62
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:67:1e:27:51:7e:07:fe:cf:68:f9:64:42:92:80:ed:52:
d5:52:82:d2:b0:43:64:b7:1f:f7:6a:43:6e:82:09:6d:63:df:
49:4e:f9:a5:23:d0:94:3c:4f:21:c4:b2:50:3f:a0:9f:94:b9:
7b:c2:8f:bc:26:3f:49:87:46:39:6c:1c:71:cb:99:6d:05:ae:
ba:ab:54:92:ce:00:bb:c4:1d:00:11:3b:c4:cd:2f:59:a4:90:
fb:52:13:be:fb:e9:d8:f3:b3:e4:73:db:20:77:70:86:20:48:
98:c7:b0:b7:d7:4e:75:60:d8:dc:77:10:0f:d5:d5:36:3d:3e:
2f:75:17:d8:50:94:aa:b7:72:40:44:e3:93:f3:d7:e5:2c:d0:
cd:f6:2e:c7:37:2c:a1:1a:3f:a2:45:f0:c6:3a:3f:7e:46:4a:
b0:1a:59:e7:56:86:92:36:29:0a:f3:68:05:1a:6c:94:a3:ed:
a8:33:5e:55:f3:05:11:71:ce:8e:57:c4:07:b7:91:29:fc:28:
d5:0e:17:62:c8:d6:43:44:29:fd:a5:c2:39:ce:ee:b8:26:39:
4f:26:e2:d6:ff:3d:bf:a1:05:37:87:f8:8f:1e:b6:92:cb:ff:
3e:ac:11:4d:d1:c3:a9:db:f9:98:6f:6b:cc:6d:59:72:0d:08:
6e:a0:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:14 2025 by rpki-client