Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: jsIe5pkG0DxmB8mkNuPoSXawq7Ka9DWrlPWcZaCD/yA=
Subject key identifier: D1:99:F9:3F:3D:78:0B:6F:BD:7C:B8:74:46:25:57:7B:7A:4D:2D:0C
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019A7301A74C6B5CC0B1928882292D923031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: Bafv2dZCwfnkJ23z4EsrNX0D/O3JffmgdN//gDWeLGM=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a7:4c:6b:5c:c0:b1:92:88:82:29:2d:92:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=d199f93f3d780b6fbd7cb8744625577b7a4d2d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:d4:6b:91:37:4a:af:9b:09:2e:f6:16:fa:
f0:ba:e7:bc:e7:e6:2a:05:80:d2:72:c1:88:2a:0e:
89:a6:f3:f6:22:37:a8:28:e8:88:fc:81:4d:b7:45:
d0:c3:9e:d3:13:87:b9:94:c8:49:ee:78:dc:99:49:
1a:a6:ba:f2:00:c3:97:0d:1b:59:01:06:5a:18:b6:
a1:60:6c:d5:41:bc:90:cf:b1:e9:4b:19:35:fe:cc:
44:16:57:59:0e:f6:9a:88:91:af:5e:55:fa:e2:6b:
fa:15:a1:13:06:52:6a:cb:ea:14:83:7d:90:ac:c1:
68:a4:e3:ae:96:2d:f7:bc:33:30:19:79:96:10:ca:
0a:c9:44:4f:c6:fd:2f:ba:82:ba:03:02:4b:9b:e2:
be:fe:e1:cb:98:ee:55:44:fc:3a:df:40:9f:00:aa:
0d:1a:01:52:25:e0:e1:59:da:b0:ef:af:d0:08:0d:
30:83:7d:28:69:c1:7e:2d:40:de:cb:21:7e:bb:52:
d0:b3:6e:59:0d:20:c2:6b:49:6f:f6:b9:3b:bb:bb:
16:b1:2c:56:2a:e2:e8:69:cf:4b:08:5a:42:2e:59:
7d:a0:83:03:5d:b2:e2:f0:60:fb:0f:40:0c:44:4b:
51:b7:d5:5c:73:ff:18:eb:17:2c:18:4d:02:39:df:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:F9:3F:3D:78:0B:6F:BD:7C:B8:74:46:25:57:7B:7A:4D:2D:0C
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:32:f3:de:2c:1f:0c:98:33:14:e5:23:22:b8:3b:ba:48:
66:1a:de:c7:a4:d5:56:db:4a:fa:a6:fc:2f:b2:bc:4f:01:fa:
fa:8e:f2:ad:69:68:06:5d:13:b9:90:95:db:ec:8d:35:90:5a:
b5:1b:1b:1c:01:0b:81:32:8a:70:2a:87:cd:54:13:ec:ed:f7:
f4:d8:d8:3f:90:29:61:06:c0:a8:0f:e9:27:6e:fe:77:85:68:
a0:42:48:92:d4:c2:f1:f3:c5:ec:0f:27:4e:21:14:81:86:c5:
2e:8a:45:f2:c0:87:99:d2:98:eb:fd:54:ce:f5:ef:60:28:6d:
c0:11:14:8b:d2:7e:79:73:8b:af:3a:35:52:5c:4e:e8:20:12:
1d:f1:a4:19:d9:11:7e:4a:f8:4d:15:ec:bc:01:2e:ce:47:d5:
21:3a:8e:dc:ff:f0:17:3c:3e:d8:ac:84:c7:2e:9d:34:a7:04:
4c:be:3d:6c:bf:57:76:78:ea:fa:fa:f0:7e:55:c6:76:f0:26:
73:0f:3d:dc:d6:28:9d:bb:94:b9:e5:7f:d0:59:b7:cb:26:85:
44:45:3d:00:e2:74:db:0d:ad:8f:3e:61:3a:d0:f7:72:0f:73:
5f:7c:20:fc:a8:e9:92:d8:29:90:ce:5b:81:48:b6:ac:ed:2e:
ae:69:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:13 2025 by rpki-client