Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: pBnu5W1e2tIygycwMl4ci82RN/G3f6keGFeIA9MlBYw=
Subject key identifier: 40:AE:D4:98:D5:37:BF:EE:42:09:63:0F:74:CD:9F:E8:C2:8C:6E:62
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 019A71EEA65A9BB060A32A7F40A6E1DFED50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: zX144scslwriWQATu3wZbzXq3OxBgfMmZbxmQwa3A4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a6:5a:9b:b0:60:a3:2a:7f:40:a6:e1:df:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=40aed498d537bfee4209630f74cd9fe8c28c6e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:f5:c6:fe:d1:24:8d:35:f0:95:6b:a4:37:
71:a0:16:91:82:3e:ac:c8:36:d2:b9:2c:2a:f0:1e:
ab:ef:4b:4c:0a:c4:5c:5b:a6:41:86:42:b7:91:1b:
14:ec:28:1d:33:ec:f9:14:43:48:78:02:00:51:00:
73:c1:7e:20:ab:0b:41:e2:e0:cd:01:ca:a5:ad:8b:
ec:bb:71:b5:0d:79:90:6a:60:aa:d8:7d:ff:78:46:
ed:d0:de:f2:2d:58:b6:a1:64:b2:90:c2:03:5f:9c:
2c:d2:b5:30:1e:c4:b4:39:07:51:8c:30:f9:1b:6a:
5b:86:8d:e8:f7:69:05:9b:74:9b:dc:4e:92:c2:b1:
67:46:a1:83:4a:39:04:d8:87:25:db:c5:30:4f:3a:
78:5b:97:62:88:4d:37:e3:b5:60:d8:ed:ff:2f:7f:
91:56:14:68:f5:72:79:37:31:bf:c2:0d:21:20:e7:
b0:ca:81:57:12:db:3d:6f:c5:8b:70:fa:56:9f:15:
b5:9e:94:1f:85:b9:dc:13:b4:99:1f:8f:c3:4a:18:
3b:67:ca:51:b8:5a:c4:a4:0b:1b:7d:8f:c2:b3:94:
13:af:9b:eb:49:bb:cc:cd:f1:4a:38:6d:bd:5b:a0:
67:7c:5b:f5:44:bd:d8:33:51:69:be:87:a6:66:08:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:D4:98:D5:37:BF:EE:42:09:63:0F:74:CD:9F:E8:C2:8C:6E:62
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f3:d7:72:a4:68:38:c0:07:45:7e:dc:3d:e1:58:15:1b:be:
6e:45:94:db:ea:ab:c5:47:02:8d:28:8e:ef:3e:e2:10:eb:d8:
31:bd:4a:c2:c9:af:51:a1:c4:08:b6:d5:cf:f3:ac:cb:40:db:
cd:cd:0b:65:4c:85:93:d5:9d:df:20:fa:24:2c:06:6e:1f:33:
84:ab:26:e5:ce:52:a9:fc:34:43:90:78:df:13:ab:27:6e:ce:
8e:4d:77:ff:89:f1:28:34:b3:81:95:ca:99:c6:98:7e:9b:d8:
a9:4d:c2:5f:c1:4a:e7:ef:16:8f:7a:18:ec:34:e4:85:af:ab:
de:ce:b4:d5:f3:0f:ae:b8:40:fd:4f:12:97:31:6c:9a:f4:99:
85:a0:df:f1:a1:1e:3d:6b:92:28:9a:7b:8a:5b:4b:e9:0a:04:
c7:78:c6:b9:2e:bf:8b:24:9b:a9:81:4e:f2:4c:40:19:a7:ae:
02:da:02:7c:d1:a8:20:54:ef:81:5d:43:33:04:20:bf:10:5c:
4a:13:3e:61:19:9c:a6:a1:92:d8:9e:6e:b2:d6:37:81:0b:67:
01:db:8f:1e:fb:70:13:6f:00:53:8e:6a:e6:c0:88:f3:45:90:
fa:2d:57:20:3e:8a:90:88:84:18:75:35:55:4f:f2:6f:74:39:
d7:22:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:19 2025 by rpki-client