Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: r75IiqCAMqcNpLQL3AwNVKiCXs0QFI1m1uKi6OBoQqs=
Subject key identifier: EA:BC:90:8B:AB:F5:C5:A4:09:BE:12:A3:ED:D5:69:F5:5A:3D:3C:AD
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019A515052BE878FC53BE3B9766B1ADBB835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:09 +0000
Manifest this update: Wed 05 Nov 2025 00:00:09 +0000
Manifest next update: Thu 06 Nov 2025 00:00:09 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: TU9aLjM8QNx/hzO3yk2mqDQry/ECrBnZXJouzMPOB3M=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:52:be:87:8f:c5:3b:e3:b9:76:6b:1a:db:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Nov 5 00:00:09 2025 GMT
Not After : Nov 6 00:00:09 2025 GMT
Subject: CN=eabc908babf5c5a409be12a3edd569f55a3d3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:79:ea:a3:a7:f1:bc:c6:86:ec:9c:45:cc:
4e:b7:17:c0:ad:f3:c9:7b:15:41:ca:0d:69:dd:f2:
a8:2f:cd:e4:bd:df:68:f8:c6:ad:5c:a6:ca:ed:83:
ba:a8:9a:95:69:6b:51:1b:ea:cd:4e:2d:ed:9a:ff:
21:cb:b5:95:e0:bc:0b:d7:f4:cd:c1:89:78:9d:61:
38:31:2a:aa:32:e3:c0:1c:18:4c:21:14:1e:b5:45:
bb:f4:91:d9:50:2b:e6:eb:b9:4d:aa:0a:5e:71:2e:
b4:38:e4:3a:7d:d7:40:db:b4:ef:8f:bb:1d:ba:3a:
80:44:a0:70:eb:49:37:5b:76:c7:f2:56:73:f4:7b:
8f:14:a1:b5:91:61:de:d2:d0:d5:0f:2d:a1:f7:2c:
3d:e1:9e:62:32:21:0e:0e:d9:f5:b6:ea:08:4d:44:
4e:a0:a0:a2:6c:d6:8f:65:fa:ac:3b:67:c4:60:4d:
52:75:9e:b7:59:a8:1e:3d:b1:64:59:a1:61:0a:90:
9b:ea:b0:b3:af:af:62:78:89:77:30:24:fd:bb:13:
e5:46:13:1a:31:11:7d:dc:e2:b8:97:31:74:c8:ad:
fd:fc:63:e7:16:f5:32:7a:ef:96:2a:b9:aa:14:33:
10:a1:50:63:49:51:ec:31:11:f4:2a:ce:e0:b1:61:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:90:8B:AB:F5:C5:A4:09:BE:12:A3:ED:D5:69:F5:5A:3D:3C:AD
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:2d:fd:e3:44:3a:fa:8e:fc:c6:3e:96:a1:a5:2d:db:c1:
89:d1:a4:72:21:24:30:06:5e:28:2f:8f:30:a7:fa:aa:80:56:
cf:dd:76:c6:6e:ff:01:dc:2c:28:5d:a3:8d:57:40:94:c6:93:
a9:cb:28:29:26:6a:46:4e:a9:e4:3a:48:37:94:6b:81:bc:51:
f5:69:af:32:aa:6b:78:5e:87:a6:ed:80:f2:26:fb:d4:8e:4a:
fa:b4:78:b4:a7:3a:26:27:18:6f:f6:8e:5b:1e:62:ba:1a:74:
59:43:4c:58:59:9c:3c:4e:1e:57:a2:a2:6b:f5:c2:2e:ab:02:
b8:bc:c1:71:84:64:49:0e:03:fe:21:98:e7:27:a5:b5:4b:75:
6a:cf:64:f0:e9:c8:2f:12:5b:ed:f3:95:82:92:fb:0d:66:c4:
cf:f4:3e:2f:d0:17:f5:85:bf:65:d1:98:08:a2:77:5f:67:f9:
6d:19:36:2a:d5:69:9b:ee:57:ff:f7:b8:3d:fb:32:93:b9:7d:
32:2c:c6:51:ed:77:84:ae:85:18:1e:00:4b:43:55:46:b8:8f:
33:fe:e2:d4:87:ec:09:45:98:a6:cf:3e:8c:c8:eb:e1:16:87:
a4:21:19:93:ee:fe:32:c4:a1:d2:2c:0d:71:d9:95:b1:af:b0:
3f:1a:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:30:39 2025 by rpki-client