Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: lTrmmPXDlfyOh47AlpPHLxINO1IJyVe7R0xeXAezjIM=
Subject key identifier: F7:6A:5E:4B:0C:D9:44:48:82:28:92:6E:89:DE:B1:48:A7:14:A4:B8
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019A714A09344E3DBFE1A713B0AB76FC99E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0C5C
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: ZBDZeCDJQamKOekKEoAwfaehJtJSLOG8RVM+c7AA0p4=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:09:34:4e:3d:bf:e1:a7:13:b0:ab:76:fc:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=f76a5e4b0cd944488228926e89deb148a714a4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:44:33:c8:2b:db:7d:e0:61:70:e5:90:88:
f8:c5:d0:18:eb:7b:3e:58:3b:66:84:d6:21:5e:f2:
2d:f1:e9:c9:54:13:d0:58:c8:b4:d0:c6:eb:1c:10:
fc:de:6f:f0:66:4e:f1:f4:e3:2c:4e:1b:02:5e:04:
2b:6e:14:b4:f2:89:4b:84:a2:9b:be:bb:76:fd:98:
4e:86:a2:31:09:90:98:e3:34:bd:db:fc:01:e9:9a:
f8:3b:a2:e6:7a:99:b7:e4:c3:83:13:f5:61:dd:09:
a2:b6:84:aa:7a:e7:c1:d1:c3:1c:3b:ef:8b:25:3d:
d3:98:55:7f:ad:78:2a:84:c3:62:97:58:44:d4:2c:
3f:20:98:76:69:e1:0e:6e:d6:49:bc:34:05:89:fc:
20:6e:25:c4:84:63:0a:16:d0:75:72:e2:ba:20:b6:
30:a2:a4:7f:f9:20:c2:b1:13:88:e9:2f:87:d1:67:
8b:0a:5f:08:34:38:dd:4d:bc:ec:e9:7b:51:2d:e0:
e7:9f:da:98:90:ab:c3:d3:d9:3e:5e:62:f3:a0:d1:
ee:ac:a5:99:f6:a0:15:20:f8:2d:b2:c2:7f:a4:72:
45:8e:0f:7a:14:af:80:c0:45:d9:f8:c3:53:df:da:
0f:81:69:42:83:61:a9:40:70:50:e7:ed:48:2a:5a:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:5E:4B:0C:D9:44:48:82:28:92:6E:89:DE:B1:48:A7:14:A4:B8
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:93:af:31:cf:46:04:7a:57:36:7b:d4:cd:88:f3:9d:4d:80:
c7:19:c9:e8:14:0c:a3:fe:d3:9c:e9:8e:f4:ad:bf:da:9d:7c:
6c:c5:ce:12:b7:98:5f:53:bb:fd:89:40:52:75:dc:78:c6:f0:
7f:8c:5a:66:96:ed:e5:34:f1:f1:aa:d6:8c:57:cb:0b:77:06:
f0:05:e6:5e:6c:42:e2:38:a3:52:f0:6b:85:a8:20:c2:af:72:
a7:77:9f:e1:e8:cd:2f:ff:d8:ae:58:3a:23:7a:56:e1:31:ec:
a0:59:7a:92:f7:15:fb:79:61:f4:3f:0e:03:4b:ef:73:27:bd:
b8:62:b7:8d:94:f9:b4:7a:c9:7b:e7:e7:9e:72:3d:24:32:79:
b2:22:07:25:46:5e:bc:fb:7b:6b:3e:d7:fd:64:de:84:a3:03:
dc:b6:88:0e:72:17:97:4b:19:d5:74:d8:d3:81:e5:4e:69:08:
61:3b:1e:25:56:c4:cc:28:d5:d3:4d:4a:a1:cf:7a:a0:86:f1:
69:4d:36:c1:91:a2:a6:5d:32:ad:87:b4:55:08:d6:5f:87:cf:
b5:6c:84:20:71:42:1a:af:64:a3:ae:ae:b4:83:c9:fb:a1:88:
85:c4:98:a7:9b:03:ac:51:72:e6:9d:45:98:d8:b3:08:a0:87:
52:fc:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client