Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: E6PYP7Ee1L+8ENRNG+OydKlNLdOVBgnCs/1N8ny+/B4=
Subject key identifier: 79:B1:9A:18:CF:38:CD:02:32:EF:13:60:E7:48:90:15:E3:63:83:1B
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 019A7293AA5CF94A1BD94F6563CA14846DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: VMwbx8yAq73fyijph9skolxWFka7+ymMC/gcb6oLYwA=)
2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:aa:5c:f9:4a:1b:d9:4f:65:63:ca:14:84:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=79b19a18cf38cd0232ef1360e7489015e363831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:a7:06:34:5c:dd:59:ab:df:cf:55:75:30:
0c:dd:fa:7f:d8:f0:e3:9e:f0:2f:c9:bc:1a:34:06:
b0:22:37:06:d2:92:c4:66:8b:42:1f:90:20:99:d7:
ea:84:71:e7:26:10:87:b3:17:33:f5:46:80:8c:6b:
cd:d2:fc:46:b1:90:6b:c1:46:93:26:20:96:25:03:
8c:48:47:7d:c2:0e:e3:47:48:fd:35:a9:96:a6:20:
e2:1f:e4:85:2d:c3:11:05:a1:a5:b0:a3:6a:4e:73:
14:50:e5:57:ca:59:5c:ef:2c:14:92:9a:2d:a7:10:
78:33:3e:5f:06:c1:4c:ab:7f:d4:95:a4:40:f1:92:
f8:21:be:7c:67:39:79:9f:60:8d:d9:33:96:b7:88:
ca:a9:d4:20:38:46:0e:7e:81:4a:58:49:7b:bc:73:
a8:0a:51:28:df:a7:8b:fa:fb:4f:e3:93:84:c5:3f:
b4:cd:a5:1c:65:1b:3b:0f:aa:b8:53:fc:06:7f:34:
de:ff:1a:18:78:4c:5a:e0:b5:9d:b2:6d:9c:11:58:
b3:63:80:a9:a5:8a:7b:ce:68:5f:0e:fa:0c:67:11:
f9:d4:97:93:2c:9a:7f:aa:e4:05:6e:30:6a:7c:06:
1d:f6:9d:ec:c1:ef:5c:38:5d:32:03:4f:f3:68:6f:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:9A:18:CF:38:CD:02:32:EF:13:60:E7:48:90:15:E3:63:83:1B
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:90:de:4f:73:bf:00:d7:83:3a:e5:23:9b:e1:8e:0e:c8:
35:fa:0c:de:74:76:74:c4:82:32:5a:50:eb:18:54:28:30:8d:
37:28:6c:6a:84:59:b5:18:82:25:2b:53:66:21:b6:4f:ff:57:
74:36:a2:fa:0c:4e:36:0c:61:99:fd:71:25:af:dc:61:25:fa:
eb:d7:c5:3f:6c:d5:c7:a8:a0:b5:54:c0:98:8f:ef:c2:a1:72:
13:b0:81:4c:10:76:aa:67:99:3b:f5:c0:88:72:6e:e1:90:f8:
f2:f8:ba:ca:fc:56:d1:4a:08:50:20:45:65:e6:34:1a:97:86:
48:67:ce:02:87:b9:8b:c9:0c:66:68:76:05:a4:bb:ec:8c:ee:
b1:dd:3f:23:e2:f0:fa:1e:b1:e8:b0:e2:c9:75:b5:10:e2:2d:
28:33:46:54:09:27:da:ad:c5:ac:11:70:fe:db:fd:6a:ec:1b:
de:9d:c3:98:4d:30:4d:34:17:94:33:7c:ac:b9:4b:14:92:69:
7e:a4:08:cb:b2:34:74:93:da:19:3a:bd:9f:d3:cb:27:d7:f9:
da:61:e0:83:65:4f:eb:cc:da:67:d2:ff:a0:27:08:3f:46:78:
19:9e:13:1e:a3:1f:9d:a4:26:88:b8:ac:de:a2:d4:cc:95:6d:
98:9e:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:11 2025 by rpki-client