Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier: T/XiwqEczqhNB5ubwI0k3l9a1oqO4gTyafjhFDB0auA=
Subject key identifier: 41:B4:BA:28:A4:1C:EB:CB:76:2E:A6:4A:AD:F5:EA:D0:C8:65:3F:21
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial: 019A7293531CCE90D21BFCB65CFA3591F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number: F5
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: 2E3e+1cUy/6tzkoanDH0MBMQfDGdCviRJUzUnBs6IsQ=)
2: l2jBV0bVg0CQFfEWYmZGcUnNWs8.roa (hash: I43WzSD4plBzSNiTRFYHSTVDaLrtL+SCq1cjo57LmDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:53:1c:ce:90:d2:1b:fc:b6:5c:fa:35:91:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=41b4ba28a41cebcb762ea64aadf5ead0c8653f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:ff:69:65:a0:fb:0f:94:fb:cc:0b:7e:be:
98:0a:1f:d7:31:a3:f3:65:85:47:8c:f3:bb:ac:de:
66:05:af:47:9f:be:a9:47:c0:88:20:8d:ab:27:74:
6a:dd:f9:79:9c:ef:6e:78:c4:4e:6c:7c:96:0d:5d:
21:1a:c7:21:2f:fd:21:96:c7:4a:a6:1f:58:8f:9e:
cb:13:72:22:ab:38:3a:a2:bf:30:72:0c:f4:a8:7b:
bf:2c:07:19:55:5d:3c:13:85:f7:70:62:7a:23:a4:
9a:6c:6a:f8:44:d1:92:ce:2b:59:e0:2f:62:1c:40:
ab:20:0f:ea:f2:cf:52:2e:07:7f:53:d9:94:a4:76:
7d:86:92:7f:d5:46:0e:3e:d1:8f:0d:4b:f9:58:ae:
23:d0:c5:ef:54:9e:c7:e0:99:63:31:de:23:5b:09:
7a:33:97:af:95:f0:5a:67:df:d3:69:e5:e0:00:e4:
30:7b:88:05:fe:8c:d3:c6:ce:1e:59:af:30:6a:71:
35:15:24:8e:f5:c5:20:78:6b:e8:34:5c:d2:fa:94:
46:b5:3b:d6:73:fb:84:17:c9:fa:13:84:33:80:3f:
34:44:83:67:1e:67:c4:b6:49:fd:d6:79:de:8e:b6:
7d:04:2d:3c:38:f9:ad:de:02:ae:1f:d2:c4:d0:b9:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:BA:28:A4:1C:EB:CB:76:2E:A6:4A:AD:F5:EA:D0:C8:65:3F:21
X509v3 Authority Key Identifier:
keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c7:e5:d1:14:85:9b:c6:41:29:05:7e:54:86:4f:71:c7:94:
d0:1e:f6:f6:90:e6:b3:f3:44:1e:e1:75:f4:d2:ca:48:c2:06:
43:76:69:b2:0d:2d:35:c2:94:8a:55:98:a8:78:a7:63:5f:71:
e2:ea:02:32:ba:d4:4e:76:b0:d2:53:8a:59:ed:0b:56:b8:74:
32:6b:01:0e:7a:c1:1d:40:57:86:54:55:2d:0e:35:f0:1a:a3:
8c:45:8c:4a:07:49:4f:3d:50:25:7b:33:51:eb:8d:81:2b:85:
83:64:6a:b6:44:26:bf:8e:2a:7f:95:05:85:b6:1e:98:f5:b4:
23:59:d8:8e:b5:43:40:93:b3:9d:c8:29:b0:c8:f1:93:73:57:
91:93:9b:5a:c7:72:03:d9:de:18:3f:27:3f:08:7b:99:3c:a5:
28:ea:2c:0c:20:9e:cd:06:56:48:df:1e:1a:21:3f:dd:4e:94:
c5:cf:4b:0d:49:ec:f2:b5:28:28:57:0c:29:00:e4:10:4b:8b:
83:5d:f4:af:d2:ac:ad:e3:06:b7:b4:04:f3:4b:58:2a:61:63:
84:15:1e:1d:57:01:4f:b7:75:2d:23:01:91:53:b9:73:fa:5a:
4e:44:fc:7d:b4:b0:b5:5e:c8:a4:e2:80:e4:4e:95:9a:33:55:
1b:1c:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client