Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: fhifKah2ylgyb48naM0OU5jYZ/7qkWUxYybLhIkwsbI=
Subject key identifier: C1:84:E8:C6:7E:BE:5B:62:C1:7D:7C:7E:43:97:51:C7:9C:CB:50:88
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 019A71B825075FFDB5F6A4ACDAF08D6D1A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0F3F
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: HxBZ2yWwrxGFxOqVKJ+MMR/itdy6F+hea2ZwQ+8ZsAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:07:5f:fd:b5:f6:a4:ac:da:f0:8d:6d:1a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=c184e8c67ebe5b62c17d7c7e439751c79ccb5088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:2f:18:1b:4d:35:cf:60:43:d7:44:08:f5:
c1:f5:35:a4:dc:a7:aa:38:c3:e8:25:3d:a9:01:0f:
ec:36:ee:ec:87:d4:83:0d:ac:5d:0a:0d:86:4e:33:
bd:0a:43:93:ec:62:6b:88:9f:44:76:6e:cb:9d:7a:
1c:ea:02:91:cd:8c:0c:f1:f4:ea:d8:fc:0a:22:31:
0f:89:ad:b2:b2:7a:c7:15:09:8a:c1:21:d4:23:87:
62:85:3d:bc:8b:78:1d:c5:d4:11:c4:c6:12:bf:09:
3d:7b:c2:df:5c:5f:a0:c1:a0:fd:b4:98:6e:11:e4:
b9:5b:52:d3:e4:1b:a8:2b:ea:da:a3:4e:67:c9:29:
07:3f:d4:f9:ed:7a:bb:74:d8:38:12:04:be:f4:49:
55:f0:17:01:35:c5:a0:ec:20:1d:5e:a6:03:63:a0:
1a:45:18:fc:2a:33:16:a8:7d:b2:dc:9a:f8:c8:49:
da:07:f4:da:10:49:d5:40:44:e8:cd:4f:06:aa:fd:
56:de:43:5e:e3:f4:e4:6b:bb:a0:5b:ad:18:cd:26:
9d:70:cb:83:f0:a1:e9:58:0e:f8:e5:84:f1:67:ad:
61:1e:85:56:2c:94:aa:22:b6:e1:58:f2:6e:f2:52:
53:84:97:e4:13:53:1e:c5:6e:8e:62:ce:ea:05:c4:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:E8:C6:7E:BE:5B:62:C1:7D:7C:7E:43:97:51:C7:9C:CB:50:88
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:5c:73:9d:97:b5:bb:a0:1c:af:44:3d:31:52:f4:0e:57:
12:d5:da:ad:28:7c:e4:5a:4a:40:bf:ba:62:03:45:a4:17:e3:
f0:6c:99:4e:e6:bd:43:3d:ca:47:88:0c:cd:a1:d0:56:05:25:
b8:51:9a:86:fc:26:13:dd:83:ef:f3:83:d2:8b:4e:86:f5:d4:
e8:c4:2a:54:df:f9:8d:c0:15:8c:5f:d4:07:af:db:97:98:aa:
ff:0a:e5:75:08:65:2c:dd:a5:b9:f3:e5:b2:9f:6d:c2:d1:08:
91:63:45:87:5f:9a:42:da:2c:9c:c8:42:86:d7:83:66:bb:c2:
d6:5b:53:d5:68:ed:ae:7b:0a:35:8c:64:3d:6c:96:13:ad:1c:
de:36:da:33:2e:d9:2a:98:32:be:5e:60:5a:bc:04:ac:ce:d0:
cb:df:26:b6:1f:05:fd:f8:ce:95:97:be:aa:60:74:c7:ba:c7:
6e:0f:8f:87:8f:06:49:25:a7:f7:17:9e:94:3f:4a:64:8e:3f:
77:94:33:7c:ce:11:95:b8:f1:3d:9f:02:6a:20:a6:bb:aa:1e:
59:5d:06:fd:3a:73:89:9b:cd:74:4f:e8:96:6c:e0:26:4d:51:
49:2e:86:45:3d:53:fd:a4:6c:5e:40:86:07:4c:e7:fc:21:c3:
c0:3e:2d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:20 2025 by rpki-client