Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: JqmxnkYz1qZKjeU4X0IpgHaQk2QUgTTNxTHjpvpj2k4=
Subject key identifier: 94:CE:1C:99:FC:77:CB:5B:FF:E9:BF:11:78:D3:AA:09:02:4B:34:B8
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019A4EF5CBEBC690E3296D352FF61C516B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0F0A
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: o4jY8j57MFWGGYiEiPqF2NLBYYUuJz9B91EPscfAeb4=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cb:eb:c6:90:e3:29:6d:35:2f:f6:1c:51:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=94ce1c99fc77cb5bffe9bf1178d3aa09024b34b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:96:57:b9:bc:09:e5:22:d7:60:28:65:2f:
52:63:99:3b:5f:a6:92:1d:bd:78:0d:c6:4d:2f:6f:
30:61:c0:ad:0f:70:f9:d0:7f:86:c0:e1:a4:c6:74:
f9:dd:55:01:36:9d:02:00:da:f3:bf:ca:9d:ff:45:
b7:1c:78:c3:8d:7f:9e:00:5f:38:82:c7:6a:f1:5a:
2a:7e:e0:42:ee:21:3f:6a:00:0b:2e:ef:32:54:5e:
98:1d:bf:94:56:69:92:d4:df:05:23:72:66:a0:03:
d1:8d:8a:83:4a:6e:f5:b6:07:fc:63:86:c2:0f:cd:
d7:43:4a:6b:20:18:8a:31:1b:a2:ef:71:33:94:8c:
e0:f7:e1:79:a4:c2:da:5e:88:28:bb:b2:4b:9d:8f:
11:6b:c9:01:28:6b:44:dc:e7:8c:f0:16:2a:65:ce:
d2:86:ba:c5:bb:79:45:58:c1:fa:40:e0:85:76:a0:
03:96:81:46:f8:7b:33:53:a5:25:c6:d3:cc:b4:8d:
c9:98:85:f7:c7:fd:b1:9c:5b:a5:3b:da:f1:f2:ee:
83:99:c2:cd:aa:c5:24:71:92:0a:f9:3f:2b:ae:f7:
7d:64:d3:67:ff:64:81:06:6a:af:e2:43:74:bf:fb:
ee:08:e1:e8:4b:d1:bd:20:3e:f5:b9:18:e9:08:68:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:1C:99:FC:77:CB:5B:FF:E9:BF:11:78:D3:AA:09:02:4B:34:B8
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:dc:85:10:35:79:e1:ef:2f:05:b2:47:d0:bc:36:7d:a5:
a3:8d:b7:f6:a3:f2:22:a2:72:45:06:a6:84:1c:2d:88:7a:dd:
ea:5c:d9:1a:d6:ac:2a:6b:64:0c:61:e3:24:1b:d7:ce:1e:5b:
de:ac:0f:ae:6c:e0:bd:7a:4e:bb:27:da:b6:31:ef:bf:92:83:
b4:d2:ff:76:1c:28:81:95:d3:78:47:cf:db:1e:1f:ab:04:d1:
23:cc:f3:ca:ac:9b:71:ef:ad:7d:87:a9:41:bb:f3:c6:18:f1:
2b:bc:2e:60:fd:9b:67:14:3f:44:90:1d:32:f5:d2:14:90:dc:
63:97:91:8b:3a:5a:b0:59:47:e8:3e:66:fc:8b:8e:16:33:93:
54:aa:9d:96:2a:48:88:89:8f:ab:b7:df:9b:8c:9a:d9:6d:17:
01:cf:86:50:45:a5:36:da:0e:10:4a:ac:a4:80:0b:3a:74:77:
59:66:bf:42:7b:07:39:8c:63:0a:59:aa:00:d5:56:85:39:4a:
2a:df:3d:fd:b3:90:dd:5a:0d:98:ff:5f:63:f3:08:cb:d3:d9:
92:37:c4:86:fa:86:d3:6f:87:34:84:a3:78:0b:33:fc:c5:74:
97:2d:12:d3:75:91:61:88:c7:08:b2:7f:5b:12:87:8c:7c:22:
f4:37:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client