Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: l+qMD+COOKSCClIEWKCRTD6ZHly90ojh1FK65QvnM4c=
Subject key identifier: F6:F0:DF:A4:FC:54:58:BB:00:A5:7C:B3:BE:E5:5E:F5:10:BF:9B:C7
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019A7149AFA63A22DEC717E30DE5597BB03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: tGeX+UWkTBnunK5owzswkY53Qn4Wv2468yCWcKBeOA0=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:af:a6:3a:22:de:c7:17:e3:0d:e5:59:7b:b0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=f6f0dfa4fc5458bb00a57cb3bee55ef510bf9bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:a1:53:76:1e:04:7e:87:c3:de:0a:ac:f3:
57:75:54:52:da:54:e9:ba:d7:d1:e5:ed:4f:bf:e9:
e2:79:7e:ba:cc:25:5a:0c:2b:3c:f4:31:65:3a:1f:
bb:40:2a:39:16:5e:9d:91:aa:c2:e0:29:6f:1a:8d:
3c:b9:6b:8d:69:45:7b:b4:dd:18:6d:97:70:d0:64:
aa:9e:e3:ff:75:95:84:43:81:c4:f2:7d:a4:9c:7a:
9a:fc:47:5b:97:3b:4e:eb:11:20:e7:02:79:58:55:
4e:4b:5d:8d:5e:90:93:cf:92:db:60:ce:9b:7c:a3:
cd:ac:82:32:13:7a:36:a0:be:0f:1f:64:f6:a9:e4:
32:e8:78:23:43:b0:c4:7c:44:b1:a4:d6:3a:5b:77:
d5:05:50:9a:3e:59:02:7b:86:66:70:bf:f4:73:b0:
56:cf:f9:f9:da:bb:46:4e:0c:c3:74:bf:f9:68:08:
5c:4d:a9:df:84:20:3d:d4:42:69:ba:64:a9:c2:9c:
76:5f:ee:4f:68:51:09:bf:08:bd:95:92:6a:c2:da:
18:e1:54:b2:2f:01:26:7e:8a:df:cb:a7:ce:d1:a1:
09:83:a3:aa:72:9a:8c:7d:9d:f4:1b:aa:44:4f:e2:
81:3b:05:1b:76:8f:da:3f:d4:43:86:68:30:ac:ab:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:DF:A4:FC:54:58:BB:00:A5:7C:B3:BE:E5:5E:F5:10:BF:9B:C7
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:01:bc:0d:17:95:04:04:94:ac:6b:95:f6:46:1b:20:03:92:
0a:04:4c:4f:0b:7a:9f:bc:5f:81:fc:7a:c4:6e:a7:c7:9d:24:
88:b4:bb:7c:b7:be:6e:6a:a9:f5:d7:8f:07:1f:50:fd:80:51:
b3:e2:a6:b8:36:4b:73:bb:75:bc:c0:45:0e:39:86:b8:9d:2c:
d2:4c:f9:c1:8c:19:2b:1a:18:cd:dd:82:5a:2b:c2:23:50:75:
6f:1f:d1:50:20:55:26:40:c7:cb:b1:8e:b6:43:d2:e5:4f:be:
56:0e:47:81:9a:bf:26:2d:a3:b9:9f:8c:bb:05:d7:dc:3e:5a:
9a:7c:8e:ba:d9:0f:99:af:1d:58:19:90:13:d1:43:4e:0a:bf:
d0:0e:45:b0:c7:66:25:b7:67:fa:55:ec:d6:b1:c5:a3:63:d6:
93:cf:ab:f8:31:ed:7e:08:98:56:a8:0d:34:bf:90:e6:88:1b:
ff:39:fa:0c:db:1f:55:ed:3e:45:7f:14:09:94:0b:a3:f3:85:
5d:2f:b0:18:f6:72:09:cb:de:8b:6b:05:ca:33:f8:c4:41:e4:
3f:e0:24:ab:55:16:f7:59:22:b8:a1:00:38:f9:0f:ef:01:b1:
59:3d:53:1b:13:d0:4c:a9:53:5c:40:80:d7:a9:d7:75:7f:dd:
72:79:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:36 2025 by rpki-client