Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: OvpnL04nXf8CXTOd1N3z4waA5+sI7+xqmDIQewXXzkM=
Subject key identifier: E5:4B:04:59:80:19:E6:66:E5:C9:51:A4:4E:65:56:C5:A9:EC:11:D1
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019A70A523C5F87A03C8BD82BF2197472E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: MHaAEqES9Th0YYCz/8OigFF1dG0/Ab94cMC22m4af/4=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:23:c5:f8:7a:03:c8:bd:82:bf:21:97:47:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=e54b04598019e666e5c951a44e6556c5a9ec11d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:23:a7:bd:7f:27:a0:8d:c6:22:05:4b:9b:
06:76:04:0c:f3:e9:9f:c3:06:e6:29:f3:03:20:1b:
b2:fd:13:fa:86:49:25:c1:fc:5a:c8:15:15:4b:67:
9d:d3:15:5a:13:5a:18:34:29:d7:a7:31:bd:e6:74:
03:30:1b:58:b0:a4:df:31:50:0e:57:a3:78:4c:71:
ba:78:2f:0d:4c:c5:9d:fb:3b:8c:fe:45:71:cd:8c:
26:f8:b2:bc:d5:a5:17:4e:c5:03:35:95:40:af:d4:
3f:10:50:6b:ca:cb:44:97:de:72:4e:e5:9b:21:35:
84:62:99:b8:f4:51:cc:79:a4:e0:12:1c:a6:06:cd:
19:6e:3c:61:75:8c:d5:ce:86:42:cd:f8:b6:6d:68:
73:81:f9:14:a3:c4:6a:3f:2e:a4:f4:e5:91:8f:1e:
ba:e8:9e:d1:d9:d5:e2:78:22:79:cc:5b:cc:47:f2:
29:39:08:d7:a5:03:68:80:5d:cf:c8:6d:3f:2d:3a:
13:4d:92:2b:2c:17:f5:f0:ba:2e:03:fc:4c:81:16:
74:fa:95:5a:75:ac:51:60:0f:4d:49:e9:e7:e9:5f:
46:af:3c:e7:d8:64:ab:77:58:65:8d:b1:c6:7c:2a:
0f:88:81:a0:8c:fd:5c:80:5c:bd:ce:5a:6c:6a:00:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:04:59:80:19:E6:66:E5:C9:51:A4:4E:65:56:C5:A9:EC:11:D1
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fc:8a:8f:b6:1c:80:60:45:90:88:60:33:4c:d0:5a:8d:34:
3d:ea:c4:13:a9:72:88:9a:a0:ff:66:b1:11:09:3b:d7:a3:9e:
b4:1e:86:83:75:01:1d:bc:eb:4d:de:18:2a:c3:2b:74:84:c4:
e7:81:bf:71:ca:c4:d1:0c:97:ff:f5:5c:1d:04:14:5c:11:ce:
83:1f:cb:2e:7e:1f:32:ee:b3:00:98:b2:1a:c3:12:c2:5c:b9:
41:b8:54:43:68:e4:74:c5:8b:83:38:79:f6:22:56:4c:04:0c:
03:ed:df:57:69:ac:ca:0f:ba:c1:b3:d3:83:0e:83:b3:1a:2c:
29:44:12:d1:d9:05:3b:e8:85:40:86:54:4f:3b:2d:62:ee:16:
d5:84:78:ea:fd:c4:b5:18:b3:d9:3f:f9:68:e6:67:03:05:52:
0f:14:2c:29:97:fd:0d:7e:2a:0e:99:c3:d7:13:ec:0e:18:b6:
30:99:a4:ac:3a:e0:1e:f9:e4:d0:8d:fe:c6:ca:bc:de:6a:bc:
d3:53:d6:ef:25:f2:4e:93:92:e1:ad:46:d5:ad:a4:b0:5c:1e:
3c:1a:ac:ea:15:50:81:cc:46:ff:30:3b:5f:ee:d5:f6:ef:9f:
b6:55:fb:14:7f:eb:fb:f6:c8:49:12:e4:ad:89:73:e7:31:5a:
e8:fb:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:12 2025 by rpki-client