Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: MmKN+p/6pmJ4EofUIDGkEGD5L9qOiodc1EWQl5KVyqc=
Subject key identifier: E7:0C:BA:74:E1:E3:59:A9:E3:3F:49:F0:9E:80:54:66:E1:99:0E:95
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 019A73018862A5C52411062CE524CEBEA36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: 018A
Signing time: Tue 11 Nov 2025 13:01:11 +0000
Manifest this update: Tue 11 Nov 2025 13:01:11 +0000
Manifest next update: Wed 12 Nov 2025 13:01:11 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: fs/71YXGm5+RYYFU4v4TmwNLoXlKbgl27BSQHfwQ2y4=)
2: KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa (hash: h7WOd3FoOyE3z3s6Su64D7SfxJalvzda0YokBEiVb1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:88:62:a5:c5:24:11:06:2c:e5:24:ce:be:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Nov 11 13:01:11 2025 GMT
Not After : Nov 12 13:01:11 2025 GMT
Subject: CN=e70cba74e1e359a9e33f49f09e805466e1990e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:3a:7e:e9:6a:bb:79:d9:56:87:99:ec:fc:
6e:d4:eb:2c:b3:8d:da:4b:2e:bb:84:fd:f8:3d:5c:
69:94:0a:35:9e:b2:96:4f:5c:a5:cb:60:c0:a9:18:
94:b4:b4:69:e5:b9:2f:7e:c5:22:a8:9d:e3:6d:84:
75:61:11:6b:44:70:a8:0c:c8:63:26:86:59:11:9e:
fa:43:b0:88:4a:48:78:fb:2e:b1:cc:2e:7f:e7:8e:
2f:70:d3:2f:33:c8:1e:7a:2c:1f:4c:36:1e:26:86:
cd:e0:9f:b2:b8:37:9f:e4:a7:78:d7:28:63:13:fd:
12:33:2f:be:6e:3e:40:b3:f2:99:b2:16:14:f0:93:
44:54:9e:7d:8b:24:8e:a2:8c:64:ad:38:0b:98:3d:
05:aa:6e:58:bd:a1:59:d6:0e:b6:93:a8:88:27:0d:
44:62:6e:af:04:23:ed:fe:8c:a2:a8:40:d9:b8:8f:
7d:62:da:25:a1:be:3a:9a:33:6c:8c:43:01:ac:33:
dc:17:5a:e3:de:20:4a:a5:9f:84:c9:01:34:ab:99:
25:54:50:10:08:e6:9a:f9:e5:e2:e2:04:01:1c:5f:
78:31:46:91:32:c0:c2:89:6c:57:30:ea:df:29:db:
69:71:2b:83:fd:fd:8b:26:c1:c0:e2:5b:68:c1:18:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:BA:74:E1:E3:59:A9:E3:3F:49:F0:9E:80:54:66:E1:99:0E:95
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:a5:3b:2f:57:6b:57:09:2b:92:a6:7f:f7:9e:a8:c8:76:
71:f9:4c:f0:d6:8d:42:7c:9a:2b:a5:fe:3a:56:7f:9a:4b:a6:
51:5b:37:fe:57:62:d4:54:70:02:08:37:e2:70:f6:b0:a9:e1:
07:fa:cb:b5:56:c9:2a:e8:3d:21:15:2f:f8:95:da:cf:d1:7b:
c7:bd:ac:0f:38:d7:82:97:5d:a5:70:b7:cc:69:db:0a:1b:b3:
90:a7:d2:91:1f:ce:02:68:7a:65:12:9c:5b:2a:5b:f0:ea:de:
13:0d:7f:6f:41:5a:f8:6e:9f:db:31:d1:06:0c:4e:41:5e:eb:
34:2c:5e:8e:90:49:ac:c7:18:50:5c:21:0f:c0:39:f4:d9:b4:
2f:fd:27:ef:4d:78:e8:0c:40:35:e8:ad:04:a9:04:6d:93:14:
24:6c:6f:43:64:a7:24:15:fa:35:9f:6e:47:3c:b0:97:93:95:
3a:5d:5c:37:f4:62:fd:8d:32:21:81:86:d8:b7:04:bb:15:a9:
a1:9f:2a:f1:5c:98:ee:1d:50:b8:8f:10:0c:6c:52:88:5e:a8:
e2:f6:f2:49:09:f7:39:ad:46:e2:80:a8:e7:76:71:c8:86:9d:
00:79:70:f2:f2:bb:a1:41:6f:3a:1f:ac:59:8e:da:7e:fd:73:
63:dd:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:08 2025 by rpki-client