Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: QgNPuuD/l/O8xejuEP1wx/sGssAX9igVaFX8A0mcg80=
Subject key identifier: E5:64:F0:B8:94:63:8F:C6:B7:D7:05:F1:0D:FE:42:19:E4:E5:6B:A7
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019A70DC4BC96DB08BC99341877A0540DA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 0EB3
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: YxMz8Ls99uzBxgICK4lSlcfqOEhjGYqQnO3scvZvY4A=)
2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4b:c9:6d:b0:8b:c9:93:41:87:7a:05:40:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=e564f0b894638fc6b7d705f10dfe4219e4e56ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:27:a7:f0:4c:4a:67:23:ca:b0:2e:37:ff:
e8:01:81:d6:d4:86:a8:db:98:ad:d5:6e:07:db:c4:
6b:00:1e:d5:f2:72:8f:58:bc:36:4a:f4:ad:19:e8:
c5:8b:f1:81:70:d4:a2:c0:13:54:9e:c0:8f:da:41:
28:d0:18:2e:6a:f0:ef:c1:a1:a0:77:98:6b:e9:52:
8c:f4:14:5b:1b:90:47:55:00:ca:8a:68:e6:2a:55:
dc:b0:6b:59:4e:db:86:9b:e4:46:17:79:62:12:74:
d7:e7:61:9e:c8:0e:4e:93:63:74:65:cc:e4:20:2a:
36:4d:dc:b6:b9:44:69:2f:dd:05:11:c5:b6:33:a3:
5b:7e:b7:dc:18:a9:ff:8a:aa:f2:46:e3:36:05:e0:
86:85:64:28:58:ef:70:8a:8e:4b:79:cd:5e:e4:ff:
2c:3a:ab:44:4b:f9:8e:90:70:1d:c7:37:73:b5:e2:
70:51:98:ed:f4:11:4d:86:e9:64:3c:cd:f9:55:aa:
2c:9d:d3:05:cc:5e:ee:ac:25:0c:d4:8c:a0:49:c8:
48:67:37:3a:84:ae:f6:ce:7a:c6:54:dd:e4:26:58:
c3:6b:6d:f9:0a:f3:d9:da:8a:76:21:3c:1f:13:f1:
c9:fd:1c:94:1e:7f:b2:c0:4b:41:87:5a:30:99:ef:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:F0:B8:94:63:8F:C6:B7:D7:05:F1:0D:FE:42:19:E4:E5:6B:A7
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:d4:42:7d:fd:93:22:7f:91:0b:8d:11:93:99:74:d7:2f:
98:ee:bd:77:b9:dc:8f:1a:c0:f8:5e:37:74:94:af:bd:1f:cd:
14:2c:01:bf:91:25:02:67:9f:a1:43:1f:d2:bd:ef:d5:3d:a1:
48:6d:03:93:4e:a9:e2:a8:b2:15:af:a1:fc:bb:ce:e9:f2:2e:
c4:47:fe:8c:6b:f7:92:87:c5:d3:67:7a:89:2c:95:9d:8b:89:
12:70:9a:b9:32:80:48:3d:ca:b3:e8:90:fb:29:a1:10:f7:61:
03:9c:78:74:73:c9:9e:44:64:8a:c4:01:f7:f8:31:2d:b7:a9:
dd:31:26:75:e8:4c:c2:7a:67:7f:5c:22:fb:f5:1b:ba:8e:0e:
2b:9b:56:45:45:e6:0c:40:d6:24:97:7c:ed:6e:22:ed:ee:85:
03:4c:74:d8:78:af:7e:c2:3f:fa:3b:79:2e:42:e4:68:e1:d5:
8a:38:6c:2c:e7:3e:6b:cf:0e:62:02:33:27:34:52:21:ff:83:
56:2e:96:cc:5d:ed:fc:89:68:05:30:bc:3b:6f:5c:1a:48:2d:
57:93:57:be:e5:ba:8c:cf:e6:cf:7d:34:80:13:f4:b4:78:b6:
4f:13:f9:02:57:bc:a9:11:88:2d:07:e6:4e:ee:5f:ef:dc:41:
c2:ed:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client