Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: TkYpS38wxVvzTohrcw2pTFyCBF1JEm69npU7K8bWAfY=
Subject key identifier: E1:20:C8:8E:CC:3B:FC:C1:C9:66:F3:72:03:97:46:D2:B1:F4:51:B0
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019A5451F44613A56477E852B2F041DB536B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: AA
Signing time: Wed 05 Nov 2025 14:00:48 +0000
Manifest this update: Wed 05 Nov 2025 14:00:48 +0000
Manifest next update: Thu 06 Nov 2025 14:00:48 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: wr/PqBM6CSyoxPp7Gj9W3Ix+jHA7AOQLt+u4NCxtIhc=)
2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:f4:46:13:a5:64:77:e8:52:b2:f0:41:db:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Nov 5 14:00:48 2025 GMT
Not After : Nov 6 14:00:48 2025 GMT
Subject: CN=e120c88ecc3bfcc1c966f372039746d2b1f451b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:ca:4d:63:5a:8c:c7:55:d9:b9:22:e2:6a:
9f:bd:73:8d:8b:e9:cd:4b:14:d6:fc:fe:52:72:94:
15:7c:20:6f:6f:e6:5c:64:1f:2b:0c:f9:a7:5e:ae:
e4:24:0e:81:c0:1b:59:88:90:1a:f7:24:73:29:b8:
c3:3a:21:d2:b6:4e:7a:11:5e:cc:41:fb:6d:d9:63:
69:e3:cd:8f:a7:9c:2c:69:ea:f1:35:7c:7f:38:9c:
30:0d:9e:da:4b:c6:28:9c:9e:c8:9c:90:80:4f:e9:
77:6e:03:0b:85:b4:6b:48:ee:63:7d:80:01:0c:45:
93:df:d7:c3:ad:1d:0f:03:dd:06:b4:92:93:57:6c:
b6:f8:79:63:f3:09:1a:96:3a:9e:ad:9f:6d:3e:ce:
47:bf:57:dd:65:b7:9c:c0:f3:18:34:bc:f0:16:e5:
43:a6:36:a8:2e:54:29:9c:d7:2c:43:ee:5e:0f:a4:
39:e7:1e:5c:48:e7:76:40:4c:8f:59:ba:d1:e4:a6:
ef:18:3f:fb:ea:e5:2e:2f:88:a2:42:a4:7b:39:bb:
d8:db:16:75:49:81:8e:b5:de:56:85:64:2e:8d:9c:
97:e8:84:53:e7:52:cf:44:4c:90:96:4c:79:20:3c:
c3:67:2c:57:24:fd:cd:f6:ef:b9:d0:4a:b0:23:2b:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:C8:8E:CC:3B:FC:C1:C9:66:F3:72:03:97:46:D2:B1:F4:51:B0
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:23:94:37:3a:a6:8e:50:40:c0:97:3c:f2:69:fa:25:9b:
3b:cb:3b:89:9f:ac:0e:aa:c5:1e:3d:16:e8:53:ca:4a:a5:4e:
22:a1:34:6b:6e:f1:90:d5:53:5d:43:c0:53:88:8b:80:83:db:
15:bd:6c:2e:23:c0:b9:0a:ce:f3:2a:0a:81:f9:49:f8:0d:13:
4f:9e:b7:19:0d:b0:30:92:41:3f:5e:e8:7a:21:3b:4b:8b:5a:
87:89:68:d6:12:7d:dc:7f:99:d7:a2:a5:f9:6e:cb:39:93:b6:
a9:40:c7:c0:c4:c8:3d:78:b1:5c:3d:f2:78:d2:2e:59:89:60:
f7:5d:00:78:bb:a1:75:7d:5d:83:50:9d:cb:f5:ff:35:2b:9b:
18:88:d3:b2:39:41:a6:18:88:43:ba:b5:ff:40:d9:76:a4:1b:
bd:7f:ef:d5:4c:84:c7:e6:7d:77:38:c1:be:7f:84:dd:58:92:
f1:36:b6:b5:61:c3:05:e1:fb:23:ad:dc:be:48:23:ce:e4:d0:
e2:c5:2a:76:e2:b0:78:b2:34:2b:39:a8:05:fe:63:e1:5b:12:
09:df:f3:f1:ba:68:99:5d:dc:3d:fe:99:5d:b8:cd:e9:1e:71:
02:47:50:b7:ad:5b:00:71:e9:5f:06:0f:89:04:dc:f8:51:39:
ab:37:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:25 2025 by rpki-client