Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: HXu8UjQcizGTANKmqOAyqvbiIyomKnKYv6G12zGo7Zg=
Subject key identifier: A6:20:C4:44:AF:5B:46:6C:05:B5:62:46:F0:88:1F:EF:88:94:59:FC
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019A4F9993EBA1572DB210A9B6A0E6792ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: AtfgacgwtdwlNqeoDOGVPnvoebz8E7laUt0yeFSLz4g=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:93:eb:a1:57:2d:b2:10:a9:b6:a0:e6:79:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=a620c444af5b466c05b56246f0881fef889459fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:5f:5e:e6:e1:f1:01:85:46:59:4c:50:91:
60:7e:d1:58:fd:b4:88:81:04:37:78:60:01:b1:34:
43:32:d4:eb:2f:cf:e4:cb:2c:ff:b0:e8:34:8e:b7:
78:57:26:3b:97:b6:3e:c5:98:0a:0c:d4:3b:45:d6:
d7:74:95:12:87:be:a4:b9:48:b8:20:d5:e9:b4:cd:
9f:0e:7e:70:77:63:ee:cd:3d:f4:7e:3f:1f:88:b3:
d7:9d:ce:62:67:40:29:2f:87:a8:01:f3:9f:96:72:
d1:0b:2c:2c:f0:ba:cd:d6:19:96:f9:46:a1:2a:19:
30:d6:55:29:38:f1:03:58:66:1f:7e:51:e6:0b:00:
68:a3:ce:b7:0b:ef:0d:c0:79:41:13:57:28:b0:9a:
07:bc:12:37:23:f4:82:d5:fd:f0:dd:97:3e:da:84:
d9:23:0d:38:72:33:5e:fe:49:70:75:37:f5:b8:9b:
21:0d:7f:23:62:c9:de:b5:34:97:e2:40:13:d2:19:
83:40:53:f8:9d:a8:72:97:2e:25:70:5a:54:ed:b2:
7c:ab:a5:c6:77:98:3e:0d:e3:ea:3d:a1:a2:ef:85:
40:2e:d5:54:22:c8:42:51:da:29:b3:4d:52:5b:5d:
06:81:21:4a:a4:62:2f:36:49:03:6e:d3:30:9b:42:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:20:C4:44:AF:5B:46:6C:05:B5:62:46:F0:88:1F:EF:88:94:59:FC
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:90:c5:ef:e2:5a:2f:7e:f8:4a:76:1e:f1:7c:79:13:5e:
21:06:bd:45:59:d1:12:20:a8:29:3c:f3:65:76:7d:fe:3f:a8:
28:34:e8:a5:e6:56:75:8a:e2:c3:3c:bb:82:c4:29:fb:ba:d5:
6a:ae:75:79:8a:6c:dc:1b:57:9c:57:03:40:4b:a1:da:af:97:
97:bf:b0:d7:a0:c1:be:d3:0f:18:a3:61:34:64:64:5a:9a:fc:
ba:c7:93:81:77:5e:42:9d:5d:af:42:de:9d:10:fb:62:22:8b:
ed:58:ae:46:b3:16:b8:03:b0:e1:5b:40:14:8a:3b:2a:59:f2:
fa:f2:e2:9b:52:f5:f9:06:4e:5b:57:06:24:e6:3e:99:04:88:
13:df:59:f0:e9:78:92:9e:a7:a5:6f:e0:25:2d:97:57:85:b8:
0e:1e:c6:92:40:ae:c1:36:2f:2c:5f:a3:6e:cb:ba:b4:81:83:
b8:8c:e7:f6:2c:aa:0a:77:d6:6a:03:e7:d2:61:71:eb:26:e4:
4c:40:25:22:7f:b6:8b:a5:d9:3f:ee:70:e4:7d:b3:a3:28:86:
15:d0:25:2c:da:b5:04:dd:59:dc:50:27:2e:ca:7c:1d:97:5f:
3b:52:92:b3:1c:1a:e1:35:d6:a5:9a:c5:71:29:ef:56:83:b3:
ef:fd:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:22 2025 by rpki-client