Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: iyIgyX7wdfODNlvISCU+Chxz7Ch6BApqXjIu7cOKP/Y=
Subject key identifier: 3E:56:22:65:BB:B5:EE:32:0E:74:36:C6:86:2B:EA:BE:F2:FA:CF:0B
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019A4EF49C5E362641D9D03C80FD5E5E0E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: XTFnfp59Jrnr9Rfluzr9BD+eHHqlmSO7QzvzmRTLIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9c:5e:36:26:41:d9:d0:3c:80:fd:5e:5e:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=3e562265bbb5ee320e7436c6862beabef2facf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:7d:aa:69:a6:92:44:52:46:5b:2b:45:0a:
65:e0:af:74:64:64:f8:36:6b:11:cc:dc:57:75:b1:
de:4c:2e:cf:c6:64:1a:62:66:54:31:7a:1a:a4:a2:
b2:5b:12:f4:99:f1:e8:02:bb:a5:4d:d4:7e:1c:30:
5f:35:b8:77:ae:3d:36:22:f8:04:96:dd:8b:f4:9d:
38:64:4d:d3:cc:7a:a7:ae:ed:56:35:93:52:d7:c8:
dc:3c:0a:83:4e:df:64:86:af:85:a9:50:87:7b:86:
70:a4:85:71:44:52:d9:ee:cb:c0:fa:9b:13:90:e8:
5e:41:e8:d0:6b:cd:19:59:11:cd:fd:d7:91:ae:1f:
2b:fe:7b:38:08:89:ca:cc:04:6e:21:de:70:5c:fe:
50:73:ba:d7:33:8e:34:9e:6e:4a:10:9a:41:f7:d6:
b7:9d:61:12:88:0d:a7:22:68:98:0f:a0:75:1b:0e:
06:4a:f8:33:a7:3c:68:d7:33:d1:9a:ee:7a:de:4e:
d3:25:ea:be:16:8c:b0:16:a2:bf:99:63:0a:46:04:
f7:81:86:ef:48:94:4e:d5:36:f6:6c:94:24:be:94:
82:f8:d8:cd:0f:09:b2:2f:71:15:1f:b8:05:72:ce:
33:22:85:ee:d3:65:a9:a4:76:e9:2f:32:ab:35:99:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:22:65:BB:B5:EE:32:0E:74:36:C6:86:2B:EA:BE:F2:FA:CF:0B
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:42:29:c8:0f:87:d3:a9:4b:6e:97:97:56:45:44:68:9f:
03:59:d6:3a:51:e4:38:62:2a:99:1f:65:76:4f:c6:48:ed:a1:
ae:e8:9a:48:72:0a:dc:29:99:78:32:a6:86:10:6f:0f:b1:1a:
44:90:50:9e:00:15:fa:62:b6:01:24:32:a9:f7:c0:72:60:5a:
b6:d0:1f:92:81:58:25:46:e6:16:74:ae:0c:ae:e7:94:98:14:
5f:fd:2b:aa:62:b1:ff:73:eb:7f:73:29:0a:c1:19:b9:b3:62:
f2:c2:d2:5d:90:6d:42:cd:4a:79:db:6a:5e:d9:ad:52:ba:d6:
4b:a6:9d:5e:7c:51:88:df:16:66:07:8b:9d:e6:01:78:42:4c:
38:77:7e:0a:fc:12:68:55:25:24:e6:6d:9d:9a:65:a7:37:e9:
09:e4:98:16:68:54:a9:fd:cf:15:2b:86:9e:44:60:9b:f9:c6:
07:77:54:0d:c7:6f:b3:24:57:e5:ca:9f:3d:96:c6:b9:6a:bf:
48:9b:4f:fe:4a:a3:7b:e3:9d:f2:6a:86:8d:fe:e3:73:39:1a:
66:cc:87:bf:cd:1d:45:94:86:f7:8c:88:55:a4:15:4f:09:9c:
fc:5b:d9:a3:48:11:0e:f5:ae:26:74:31:c1:11:2a:b0:72:d1:
b8:ae:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:36 2025 by rpki-client