Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: AmIBeKzYS/dSVwsk32UPo2k/Y2crfTqcyCvk+M4ZROk=
Subject key identifier: 2E:C3:34:1C:D9:C0:B7:D9:11:7D:7E:A6:31:04:8E:DF:72:E1:24:8E
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 019A4EF5C24E283CE4B0637B55993B79E326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0F8A
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: o7aVhpUNEqwUsRReI1jNTKsKe+l77DVbuvJIz6rQKBg=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c2:4e:28:3c:e4:b0:63:7b:55:99:3b:79:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=2ec3341cd9c0b7d9117d7ea631048edf72e1248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:54:ec:bd:6f:e1:c6:70:eb:71:4f:31:37:
e2:f6:07:b5:2e:50:5f:0b:0b:6f:15:8f:07:8b:fd:
81:29:9f:4c:35:7f:7d:49:62:54:19:04:ca:5b:66:
a0:a6:5e:61:c8:ce:0a:e9:01:09:f5:03:d9:23:b0:
0d:e0:97:b1:33:6d:fc:f7:5e:b7:ee:ce:39:fd:4b:
0d:2a:c7:b5:9f:66:4c:8e:72:61:20:70:70:90:68:
aa:9b:70:98:9d:1e:4f:38:d3:81:26:f0:bf:c6:0e:
ca:1d:9c:16:fc:c8:fa:c0:3a:c6:59:18:79:94:00:
26:9a:a4:bc:7d:8d:a8:b7:61:b8:7f:dd:d7:37:b8:
df:46:81:78:64:95:ff:1d:b5:d3:ad:82:83:0e:2d:
2a:ee:31:9a:82:a6:2b:eb:be:98:6c:8d:29:20:29:
3a:70:3d:b5:b1:47:15:52:48:0b:c8:3f:3d:bf:bf:
e6:b3:bb:60:8f:2b:c5:13:65:3c:4f:49:e8:bc:e3:
b1:44:2f:9a:5a:bc:8c:14:2e:33:0e:6d:e3:da:13:
b9:d3:01:8c:4e:2f:4a:34:5c:eb:8e:16:09:d7:f2:
65:e1:f6:cb:63:46:5f:7e:7b:62:4d:69:f3:98:5d:
c5:a9:a4:04:80:0f:36:5b:e6:6b:6a:59:25:f3:02:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:34:1C:D9:C0:B7:D9:11:7D:7E:A6:31:04:8E:DF:72:E1:24:8E
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:b5:e0:05:a3:30:c3:b7:9e:86:65:6d:50:fa:d4:62:66:
3f:b0:76:19:6f:39:7d:e0:3a:fd:5c:80:94:82:dc:43:6f:2f:
d2:d5:31:74:4d:8f:4c:bc:5d:93:7d:b8:04:79:94:a4:08:5f:
cd:a3:8f:07:5e:6b:c3:3a:36:b0:15:82:54:02:02:92:2b:a7:
7d:67:45:09:67:40:a6:cc:c1:20:9c:12:f7:48:7e:a2:82:22:
37:de:ef:4a:31:42:6e:6a:00:ed:c3:56:b4:af:8c:17:7d:7a:
0d:9e:70:c5:96:a0:72:19:06:d2:3d:49:38:63:ce:dd:0e:d7:
0a:0e:9c:e0:9d:f4:52:79:39:0d:af:2f:a9:58:d3:39:71:36:
d7:13:bf:71:76:aa:c0:af:b4:bc:75:a0:d2:49:f2:4e:14:48:
96:78:7b:56:a9:7d:e2:8f:98:96:fa:4e:7f:2a:c3:46:b6:c0:
ef:7a:a8:75:9a:82:77:87:80:dd:84:37:1f:66:c1:65:e2:fd:
b5:75:a8:d3:2a:ba:f8:17:16:a2:d4:4a:55:8a:01:c0:07:92:
1a:0d:04:59:a8:d2:06:cc:24:52:a9:80:bd:09:48:99:89:ef:
1b:33:a6:81:61:b0:0e:62:b3:de:3c:fa:d5:e5:3b:ef:b0:60:
39:e5:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:56 2025 by rpki-client