Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: AwtNu44AQ+UagVeryHtfq53p6LiA49OMnG5eoy12JdY=
Subject key identifier: 3A:47:D1:55:6A:CF:9F:B0:86:E6:34:37:20:D7:EA:67:7C:68:43:B9
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019A4C612AFB6D41F9948C0DB556487A4645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 042B
Signing time: Tue 04 Nov 2025 01:00:27 +0000
Manifest this update: Tue 04 Nov 2025 01:00:27 +0000
Manifest next update: Wed 05 Nov 2025 01:00:27 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: w8yA3TA9YAmzMoOPbVo31cDkfNyH/gG9skAE4/ET2IU=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2a:fb:6d:41:f9:94:8c:0d:b5:56:48:7a:46:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Nov 4 01:00:27 2025 GMT
Not After : Nov 5 01:00:27 2025 GMT
Subject: CN=3a47d1556acf9fb086e6343720d7ea677c6843b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:84:f8:d7:44:0d:a2:ee:76:b8:9d:cb:d5:84:
52:f4:cb:13:12:18:20:5a:ae:03:b6:f5:8a:80:73:
bc:ca:a9:6a:e8:d3:04:58:b4:6d:74:82:7c:61:50:
fa:48:03:07:3a:08:87:c7:33:9b:ca:f9:e7:77:04:
4e:b2:9b:b3:a6:59:82:49:b7:2d:77:d1:0f:fe:06:
9e:3c:d0:00:d8:1b:50:25:bd:a8:a9:e5:cc:dc:2f:
73:9d:d0:92:ff:03:88:7a:1d:09:49:71:2d:b6:56:
fb:31:6c:b4:0d:c3:88:e5:35:5d:d6:b8:a6:80:79:
f2:dd:19:a1:b3:2d:5f:b4:a0:d8:70:85:ff:d1:6f:
9b:1d:95:9d:24:1f:6c:00:ab:73:51:6c:06:76:1e:
13:5f:4a:9e:45:c1:3f:93:73:88:5c:e8:a6:71:65:
01:cb:13:44:0b:29:1a:f4:37:73:c6:2b:5a:61:13:
58:e0:58:07:d9:fa:8d:66:d8:7a:a1:36:00:5b:39:
4b:35:64:06:0e:b1:ad:1c:b6:04:61:e1:b6:44:3f:
90:bc:bc:f1:fe:38:d0:4f:a7:c4:23:94:cc:cd:e9:
61:f9:f1:bc:10:45:f5:3d:10:c4:22:17:43:b4:37:
bf:7f:28:ba:43:89:fc:0e:90:87:fd:84:7e:52:c1:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:D1:55:6A:CF:9F:B0:86:E6:34:37:20:D7:EA:67:7C:68:43:B9
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:1a:7b:a8:7c:09:af:93:c6:2f:e3:04:99:58:e7:ad:3e:
a8:24:ed:6e:59:0e:eb:f5:6f:64:ed:e3:32:0f:20:86:82:1c:
2c:12:c2:17:33:0c:41:53:48:0c:89:7d:ae:26:2d:4b:b7:31:
79:ee:f2:bb:ba:21:02:41:ea:ac:89:20:4e:e2:3f:82:ab:da:
29:48:b4:27:be:5c:e6:01:83:54:c6:17:2c:69:41:17:de:d2:
08:66:ba:94:cc:88:39:2c:4a:83:4c:e3:67:fc:71:9a:db:b3:
45:cd:9d:72:b1:87:8b:20:bb:c0:fe:e1:66:0b:7b:08:a5:e4:
e0:74:b1:66:25:6d:65:a8:e4:98:9d:c5:16:da:f9:35:aa:b8:
a2:3f:b4:a1:b0:8c:3f:0d:bf:1e:f2:0e:5f:21:d4:b6:ee:9e:
0e:76:b8:1a:1c:a1:a5:b9:39:5b:13:14:b3:35:a5:44:82:31:
e9:66:69:f3:44:94:eb:3d:02:a0:5a:a2:6a:61:79:1b:0e:89:
1f:b5:a4:7d:3d:da:b7:6e:e2:f9:18:28:59:99:6a:ca:1f:48:
25:1e:83:49:ba:42:61:b5:cb:1a:cc:9d:41:91:55:a5:70:00:
96:b7:2e:1e:22:ae:f4:fb:ca:0c:4f:9e:93:59:0f:ca:06:45:
ab:f0:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:27 2025 by rpki-client