Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: Y2FjBDAiNQ5NkMymlr3rB+yxGPwLORJnfK5vFVC6Msw=
Subject key identifier: 2C:86:D0:92:97:89:55:5E:C5:C4:8C:CC:0F:B0:71:A6:77:0C:B2:11
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019A71B795399D72908C04688A6F7A04310F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: kC0KanxJ1RYyRn/FdXMH2GRif1uHzjhdfrntMBrj2Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:39:9d:72:90:8c:04:68:8a:6f:7a:04:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=2c86d0929789555ec5c48ccc0fb071a6770cb211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:8f:dc:2a:10:03:f1:94:8f:9d:ca:29:72:
a7:fd:49:d4:72:9b:66:cc:33:c6:ef:bb:ca:64:03:
1d:5a:d2:d1:29:2e:c1:2f:19:e2:cf:6c:dc:ac:12:
bf:4a:12:52:b6:16:cf:d9:a3:5e:2c:b7:84:46:00:
88:7d:aa:36:39:fd:3f:d1:28:5a:4c:03:96:e2:02:
77:ba:e1:4c:b7:5a:a3:4e:44:59:9a:0f:3a:2c:46:
23:22:85:60:c4:14:69:12:52:ee:ac:02:79:d0:58:
2e:78:25:02:d1:4d:a3:7e:68:81:b2:0e:5c:d8:8d:
e8:ab:ac:f6:bd:fc:3c:75:27:66:e9:84:e4:28:50:
1f:62:d0:e7:61:5a:00:5e:54:90:0b:e4:89:3f:03:
71:c9:07:dc:7a:1e:ed:70:41:8c:f0:59:20:ef:3d:
59:a5:42:56:90:78:76:e4:2e:f1:5e:fc:67:d0:da:
97:ea:8f:8a:c3:c1:7a:b3:25:4f:53:0d:62:f5:13:
fa:51:6a:80:9f:4b:88:80:e5:b6:51:64:18:7c:21:
25:62:4f:f7:51:7c:2a:d9:cf:c0:e6:b2:eb:d6:60:
69:bf:42:86:76:fa:7b:db:3f:87:13:96:a7:77:c1:
24:62:2a:ee:ef:ee:03:a0:78:52:7d:0d:4d:6a:09:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:D0:92:97:89:55:5E:C5:C4:8C:CC:0F:B0:71:A6:77:0C:B2:11
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:64:62:c3:fb:bc:6a:3f:51:7a:bd:8e:8a:1a:42:87:2b:
30:ac:8b:22:8f:32:03:b8:c3:73:82:4a:64:25:4f:ab:60:26:
8d:34:1f:51:1e:60:2a:ea:8a:3e:55:63:5f:a0:5c:77:d3:48:
83:ca:37:f3:ff:d0:c8:f8:86:84:7c:3a:f7:36:27:0d:08:f8:
b8:73:a3:df:10:3b:65:ab:cc:73:ff:99:bd:5a:43:35:27:96:
58:8d:b6:28:25:5a:41:1d:15:4c:51:f6:df:35:26:17:3a:ab:
6d:b6:25:fc:2f:4b:00:2d:ff:e6:e6:8d:8a:65:51:c2:3e:19:
3f:84:5d:5c:8c:3f:13:18:7a:a5:8b:e2:cf:c6:7c:5a:a2:7f:
d4:1c:84:ce:c3:22:f7:d3:10:40:30:a4:db:e5:1c:18:1b:6c:
83:a4:62:04:51:c8:25:fc:e2:4d:23:07:89:5b:d2:f1:c2:2e:
5d:78:30:ad:32:ce:ea:65:10:aa:36:d3:b5:08:26:0d:25:ab:
58:de:b6:e5:e3:b5:90:88:28:67:43:32:b8:8b:ae:37:f9:12:
bf:2f:4f:ce:d4:7c:b0:66:9c:8a:c3:2f:94:a2:78:d2:9e:fc:
de:a0:88:f5:ac:a0:05:61:80:ac:85:b7:cd:fd:f5:a4:bb:2e:
e4:b7:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:42 2025 by rpki-client