Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: VxFRXqhWJQJBPGmouv/lxrXCPP3M8RnVTNM45FW6XUQ=
Subject key identifier: A3:90:DC:C9:CB:18:87:14:53:8D:4F:6F:46:13:84:D4:ED:5D:6A:C1
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019A56AF1B72247DDDD5EF3E024C537B4425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1715
Signing time: Thu 06 Nov 2025 01:01:47 +0000
Manifest this update: Thu 06 Nov 2025 01:01:47 +0000
Manifest next update: Fri 07 Nov 2025 01:01:47 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 6ABKCHvhNh9hlNIbVsvnNi3lUNILrdsYyG8xl9P4d4o=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:af:1b:72:24:7d:dd:d5:ef:3e:02:4c:53:7b:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Nov 6 01:01:47 2025 GMT
Not After : Nov 7 01:01:47 2025 GMT
Subject: CN=a390dcc9cb188714538d4f6f461384d4ed5d6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:f2:f6:04:83:4a:39:8c:16:6b:a5:f0:1e:
6a:34:88:b5:ad:1b:7e:46:92:32:b3:07:e5:e1:00:
89:ef:86:a3:23:f2:d1:0b:12:48:cd:55:60:fc:79:
ad:c1:45:d2:4c:42:a8:33:4d:00:6b:87:a6:be:8d:
46:3e:ab:2a:eb:f2:07:3e:33:c2:4b:5a:24:3c:6d:
93:e4:4a:c6:e5:c1:62:86:ad:8b:98:04:7c:8f:1c:
cb:11:58:0a:0f:f1:97:a7:82:42:f0:fe:88:ac:1d:
4b:12:b1:09:d0:a9:c0:51:e3:dd:46:ec:22:61:97:
0b:18:52:d9:48:b2:4a:25:c1:9c:40:9d:fe:ae:b7:
47:53:4e:39:e1:af:40:b7:c9:11:f6:a4:3d:ec:31:
1c:f8:ae:70:dc:50:a0:03:fd:95:21:5f:29:ee:a7:
65:7e:78:01:b1:fe:53:da:97:ea:6c:77:a3:10:ff:
82:44:86:4b:84:b0:cb:9b:b4:ff:b9:5a:27:8b:72:
b8:cd:93:82:c7:14:3f:96:bb:ff:b5:8b:5d:38:63:
33:89:e4:44:c4:1e:c2:76:e6:3b:3f:f4:3e:de:02:
86:44:c1:b2:98:6b:55:7e:21:b5:7d:89:89:46:49:
42:0d:c7:8c:18:54:f3:1b:07:ac:29:84:07:b9:b4:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:DC:C9:CB:18:87:14:53:8D:4F:6F:46:13:84:D4:ED:5D:6A:C1
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2f:b2:ad:3d:34:5a:fc:d2:53:cc:87:65:74:b4:b9:2b:d0:
a5:3d:5f:d9:d9:97:a8:08:56:f6:ca:fa:ba:86:c9:f8:32:04:
b4:10:c6:75:a9:c8:90:d7:f4:30:df:3a:2c:b0:99:49:e7:26:
cc:d1:d2:1d:63:b3:e3:c5:d0:46:8c:1e:24:6b:0a:e1:d6:1e:
35:50:54:22:73:f5:9c:8a:41:64:7f:b0:e1:13:3a:02:fb:a8:
ca:4c:15:f0:99:78:84:d8:11:b0:6f:c0:82:d6:de:68:3f:46:
ce:bc:c1:92:5b:ed:f7:8b:f7:b8:2f:7e:a4:3e:ae:39:cb:cc:
c5:dc:03:30:b7:0a:ed:0d:72:ff:3d:3b:20:05:60:0d:96:2e:
21:12:eb:88:9a:56:cf:d1:08:7f:82:ae:01:72:aa:02:20:90:
1c:a8:03:c1:ab:40:69:e2:1d:06:a9:d3:f2:95:3f:cc:d1:40:
19:db:18:a6:8e:5f:7d:22:8e:1b:4b:f6:43:b7:d4:b6:1c:43:
7a:f8:9d:3f:fb:d1:51:7e:85:f3:fe:7c:b1:0d:eb:d3:6a:3b:
b8:e9:c6:0b:d7:03:96:d7:11:1b:c5:be:66:2a:b3:0f:a1:92:
d0:05:5d:58:af:52:17:b6:fd:60:73:68:57:49:75:e5:87:77:
f1:f0:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:03:56 2025 by rpki-client