Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: /2PQCnO8ypShKu4WEXO2XLjQHTHqKGV9WiraEcnb8LQ=
Subject key identifier: 0D:18:3E:DB:C3:77:F2:09:B5:F8:44:08:CF:F1:EB:9E:E8:EB:84:07
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019A71EE6E2FAE824D4A4D80B570C5BED01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 1190
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: wWrEyWiAGyZkkzBtJWI+czo/1imJciqMfrgJ5cOMMxM=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:2f:ae:82:4d:4a:4d:80:b5:70:c5:be:d0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=0d183edbc377f209b5f84408cff1eb9ee8eb8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:8e:da:84:d5:0e:e5:52:ad:92:79:e1:17:
2b:75:03:0e:b8:c8:13:87:37:c0:61:a8:d5:59:2e:
75:19:88:92:d8:7d:55:e1:4a:fe:a3:2b:2b:52:9e:
2c:64:cd:da:84:0a:fd:a0:de:75:93:44:b4:29:71:
4a:cb:d0:11:0c:27:3c:fa:f2:9d:24:b2:dc:91:3b:
07:f6:a1:d1:30:dc:0c:a2:35:0f:5c:45:25:f2:90:
f4:8f:b9:fc:91:68:8e:e7:27:79:1a:ce:9b:48:b5:
1f:0f:4f:04:90:cb:3e:d5:25:d5:1d:92:24:69:56:
98:30:cc:89:8d:09:9f:09:a3:b1:9a:f3:6a:5a:b6:
f3:66:3a:1c:91:43:11:e4:0c:22:8d:a5:08:d4:94:
14:b7:71:e3:a8:d0:2d:95:2b:ae:c7:32:58:ee:f9:
29:71:90:7e:b6:8c:7d:df:22:8e:5f:ff:f5:3e:20:
3a:42:07:a7:68:12:be:7f:c9:92:19:ca:5a:a8:d6:
6f:0b:2b:34:b4:5c:33:43:fc:e4:ca:37:e6:bf:6f:
33:4f:ce:bc:44:fa:78:6d:3d:d9:59:e7:33:68:92:
cb:4f:97:35:50:c4:0d:52:19:ad:6a:93:c8:0b:79:
f9:fb:2f:fb:b7:b3:13:af:3e:ea:84:2c:e6:8c:a4:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:18:3E:DB:C3:77:F2:09:B5:F8:44:08:CF:F1:EB:9E:E8:EB:84:07
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:53:49:81:40:75:ef:de:5a:5a:4d:66:ce:eb:f9:e1:1e:
88:26:ca:b7:ac:ae:eb:85:2e:94:9b:28:6b:ba:1d:d7:04:61:
74:8f:02:ac:f5:d4:56:b3:15:a9:7c:6b:c4:79:0a:7b:38:18:
49:78:20:9f:34:76:77:49:5a:c8:39:46:53:33:a5:ff:77:27:
98:43:55:06:3c:b9:bb:37:f6:f6:d3:a8:16:96:8a:ff:48:bb:
17:43:f8:26:55:28:45:4a:63:6b:5f:52:3d:79:ee:07:f2:09:
2b:b8:49:a3:1a:58:ad:8a:05:1c:01:8b:cc:d6:45:15:9d:d7:
8e:58:e0:cf:c1:4c:14:cb:2f:1c:33:ea:8e:30:ef:94:c5:e8:
f8:ce:d1:d2:62:4c:7f:5e:ef:96:ed:48:41:85:5b:0f:45:b0:
82:80:c4:97:eb:73:20:da:39:46:a5:ad:cb:37:3e:38:1a:ce:
66:0c:52:0d:e5:f8:bd:31:41:de:5b:6b:43:c7:dc:bd:65:e3:
19:d9:35:0c:3c:6b:a1:96:9e:57:ba:10:df:bc:99:1b:80:b7:
54:d0:10:a8:b0:12:04:f6:4b:42:c2:d4:c6:40:78:8d:75:ff:
2e:c9:90:3d:d5:8f:ba:95:81:b0:83:a3:76:1c:1f:37:83:65:
50:cf:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:13 2025 by rpki-client