Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: 1U3/Tu/3Jw3W0yFeXm3AzbzXo7E87eVXrggjNI5pR+w=
Subject key identifier: EE:3E:D9:7D:58:8E:99:32:24:2C:2D:48:09:37:57:13:CE:10:E5:6D
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019A5307C6491031B51C9214E9BF0EF7DEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0B3F
Signing time: Wed 05 Nov 2025 08:00:09 +0000
Manifest this update: Wed 05 Nov 2025 08:00:09 +0000
Manifest next update: Thu 06 Nov 2025 08:00:09 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: VmRV3lFn6wihodkLqWNcdjpGvq43RsF/mKIxDjpoAQE=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: N_353yN0ZVbWs_anZKkB7VFDxu4.roa (hash: hMwRKapbkWsadMleA5KvqY1DK5C4Jjvpw+7CS/Z4ugY=)
4: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
5: szebc8-7Bd4DeQn1tSqrBS_dc4M.roa (hash: SIVCM9gif1wAhePpBb3dd2HLPRS90t/xDCg6lweK9EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c6:49:10:31:b5:1c:92:14:e9:bf:0e:f7:de:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Nov 5 08:00:09 2025 GMT
Not After : Nov 6 08:00:09 2025 GMT
Subject: CN=ee3ed97d588e9932242c2d4809375713ce10e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:52:d0:9f:b8:5e:19:c5:c4:a9:1a:6e:95:
a9:7c:af:30:0d:d9:d8:08:3e:12:34:a3:64:0d:4a:
26:d2:13:fe:f4:c4:67:49:74:e8:91:21:3c:ff:27:
10:6a:31:6c:12:37:ab:f6:27:8c:6c:47:0b:97:69:
ef:88:2b:ef:43:b2:23:cb:4f:41:f9:f9:69:e5:97:
9b:d6:59:8e:43:1d:5a:1b:50:e5:27:21:22:ab:d3:
ac:cd:e3:18:ff:a7:e0:45:8c:63:bb:8d:4b:2c:e7:
4a:3b:eb:25:00:1e:3f:de:dc:89:ad:84:3f:c9:42:
5f:26:af:23:01:e7:f6:44:c6:78:1f:69:d2:83:df:
1f:12:7f:92:04:54:08:95:ca:1b:7f:b7:65:73:86:
d0:b4:4f:9b:c5:b3:8d:71:2b:69:a2:73:86:db:f7:
e2:83:fd:88:1d:c8:6b:c7:08:5e:9d:42:3a:1c:d7:
f8:2e:a2:69:da:fb:92:07:f0:db:44:de:d3:fe:58:
78:62:9e:f7:cd:cd:80:06:db:d1:5b:f4:26:d3:1c:
43:f2:db:d1:7a:a4:f5:d1:3d:ae:27:a6:d0:a2:ef:
f6:c3:f7:b7:d4:3c:d6:7b:6a:12:02:26:27:82:39:
ce:7e:cf:9a:c6:41:3e:57:d3:a6:94:38:fd:99:e5:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:D9:7D:58:8E:99:32:24:2C:2D:48:09:37:57:13:CE:10:E5:6D
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:c4:27:c4:06:ba:ed:2f:63:12:ae:67:76:f8:bd:b7:fc:
b2:c1:c2:8f:13:6a:db:aa:6e:39:0c:ec:0f:50:69:6e:d5:b0:
0a:4a:42:ff:7a:db:a8:79:e8:82:8f:f9:ba:74:b2:55:09:29:
b6:16:3d:af:b5:2c:41:c1:bd:47:80:fe:17:56:29:1e:da:b4:
bb:27:83:8a:e9:c8:29:c5:53:ff:6f:fc:22:74:7b:00:66:66:
62:91:79:8b:31:4d:cc:4b:85:14:1e:e8:b3:4b:a6:c0:d0:a3:
df:29:e5:d2:e6:57:ec:46:7f:82:74:a7:1c:ae:f4:80:27:18:
72:d8:04:30:a9:dc:41:2f:45:f5:cb:0f:f4:af:b4:51:99:4e:
95:4b:dc:e8:8f:72:7e:77:61:08:f8:1c:42:5b:c0:4b:87:5d:
4e:2d:89:d1:20:17:7a:5a:c2:f3:08:72:87:c1:1c:b8:e8:8a:
fa:93:51:70:e9:aa:44:6b:a3:74:02:08:b2:95:4d:e9:4a:63:
0a:53:b7:83:53:85:2b:7d:c6:bf:05:89:9d:8a:76:fa:63:8d:
9f:5b:a2:9b:7d:7a:cd:4b:ce:ba:9f:f8:c1:3f:a9:5d:d1:cf:
7b:e1:49:82:fd:c6:42:50:de:05:b6:99:93:f3:0f:bd:5e:66:
c3:be:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:07 2025 by rpki-client