Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: JQnOUn0nf9OmQcflEtz6A7s+ff+ft38+DQ+HArGQK6A=
Subject key identifier: 87:39:F7:79:DA:C3:ED:9A:88:FE:95:9E:AA:33:90:66:DD:F7:F2:A7
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 019A51F5B5B6718D005497C0CAF995A3894C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 0CDD
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: 0DJXJuzCVGND3Vg0MJdJMoW+Jy/rZi847bp08T5dVTw=)
2: nyss7FejNtDGTUXRBz8EpK-bUtQ.roa (hash: 1YbJTbv2jhWedSFo8tfV4w9Efzyk/as9DY0FQwn+kas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b5:b6:71:8d:00:54:97:c0:ca:f9:95:a3:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=8739f779dac3ed9a88fe959eaa339066ddf7f2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:13:9d:5a:a6:70:27:6e:8b:76:21:78:ee:
b9:f2:fa:db:dc:67:d6:29:30:f0:27:3d:c2:24:e6:
99:0d:2e:a8:92:f4:9a:d2:00:f2:22:c1:6a:b8:78:
4f:65:ff:6e:f3:a8:f2:24:e5:01:d1:44:b0:bc:21:
63:e7:09:a1:7b:6f:b5:2d:8e:d2:74:63:ea:3b:6b:
23:70:9b:90:5b:d0:4f:d3:ca:9f:08:46:f1:9a:29:
5a:bc:44:d4:60:74:eb:c3:9e:27:7f:7a:5d:31:96:
50:9c:29:89:05:8f:92:62:c3:0d:76:f4:1f:d7:86:
46:3a:b1:c1:2a:42:37:96:f0:39:1c:49:c2:70:08:
45:64:1a:19:58:a7:c5:59:a8:c6:0d:77:d3:36:ac:
97:72:a8:77:4d:0f:30:a6:e3:f4:6a:3a:1e:4b:a9:
3f:41:f6:ee:0c:35:d4:44:ff:ef:54:b1:ed:08:ae:
db:34:bd:04:7c:39:ef:c6:04:76:34:19:c0:34:58:
8f:d0:67:ec:ab:e5:f9:6b:b8:0f:9f:0a:3a:98:60:
f7:44:c9:74:e3:4e:36:93:6a:ee:f7:a0:7e:18:93:
f6:95:53:a8:41:41:bb:01:81:82:5b:00:0f:cb:7e:
35:51:7f:8c:ce:53:cb:a9:49:e9:87:da:c4:96:45:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:F7:79:DA:C3:ED:9A:88:FE:95:9E:AA:33:90:66:DD:F7:F2:A7
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:af:83:ed:4d:1b:f1:78:14:4a:ed:ba:39:7b:4f:99:cd:
aa:33:0c:a6:db:5d:22:66:17:36:18:84:b8:13:49:9b:ff:3e:
d9:64:b3:df:b3:8b:91:b9:b5:04:bd:16:4a:d6:60:77:02:0c:
b0:d5:dc:58:85:d2:22:0d:e5:5b:ca:ed:19:00:40:65:c5:d7:
ca:80:fb:05:c2:05:7c:7a:38:22:c6:fc:37:2c:73:71:32:67:
02:7f:a4:00:cb:f2:a2:88:17:06:5f:1d:1d:ee:98:7d:f9:58:
c8:f4:05:f6:69:c8:eb:f5:5a:b8:30:c1:a3:b7:a9:a6:61:a1:
bf:96:e3:dd:35:92:c3:ed:a2:4b:62:12:c9:97:5d:76:49:36:
0d:b2:18:9a:34:0e:d8:80:8b:c6:12:c2:59:77:ae:3d:a6:78:
8a:70:c0:98:8f:4c:c6:73:89:92:89:39:23:22:29:a0:5e:08:
93:07:f9:ed:43:3a:2f:2a:f8:0c:86:b0:06:cb:8d:69:f6:99:
44:cd:3d:60:76:17:ec:92:2f:df:a0:a3:bd:67:2d:45:3a:64:
5f:0d:48:3a:fd:26:e4:0f:6f:92:3a:cc:0f:66:c2:91:fe:13:
38:68:57:9b:39:c6:ba:98:02:9c:69:8c:14:92:29:91:9a:ea:
6c:28:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:23 2025 by rpki-client