Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: Vv+vpWgHn/PPvTR+mFsdQ24tnu6BEawPO/Gdyiy6DFA=
Subject key identifier: 94:C3:97:79:E5:B1:4D:4B:4F:15:83:97:A4:29:1C:76:C3:E1:F6:04
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019A4FD06E2FAB9EBEDAF808E409CBC5C330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0E50
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: jI20i0d2LtSt8W/+b5TX8DgX8iAQ/HaEGNhTHOe2twA=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: KV03Rnxi6WRZwO1a4oGeC3HanlY.roa (hash: 7zq8HVJc+s32NHnBgUroFGKyISFlCLE015+0grkcycE=)
4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6e:2f:ab:9e:be:da:f8:08:e4:09:cb:c5:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=94c39779e5b14d4b4f158397a4291c76c3e1f604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:df:60:ed:a8:c2:2d:f7:e9:9e:ff:e5:a8:
82:8e:79:3e:19:4c:7f:98:7b:55:35:d4:a2:c4:38:
16:18:2a:15:01:cd:ee:60:d5:b3:ad:13:41:1d:87:
72:eb:17:af:c1:35:a8:7e:75:59:75:5d:b5:91:19:
17:c4:fe:52:b4:fc:1e:18:59:7f:3a:de:af:27:46:
64:97:b4:f3:51:d1:9d:19:f9:04:c3:a1:50:c3:29:
0b:8f:c2:b4:8e:b2:44:be:fc:0c:a3:8e:16:70:59:
23:17:b7:d5:f4:fc:54:50:fb:c9:9c:5b:8b:ee:20:
bf:4c:f3:5a:e4:4a:4e:7e:17:45:34:ea:79:f5:b1:
02:40:5d:5d:0a:cf:5e:17:92:79:1d:e0:9a:07:3b:
fb:2a:46:55:dd:83:f8:33:68:2c:a3:3b:9d:43:17:
a3:c5:7b:6f:f1:42:d2:ac:83:4b:af:bd:37:08:01:
9b:82:db:a2:ac:1e:60:16:35:4e:39:8f:d9:db:16:
e2:98:57:e7:d3:8c:bf:78:b9:58:eb:6e:41:87:ff:
67:be:16:ab:21:2b:22:e9:22:db:3f:bb:6a:5e:ef:
3e:bc:59:32:03:35:47:32:a3:23:0f:cd:23:d3:6f:
ab:bd:8d:10:83:4c:b8:75:42:f1:1c:ff:fa:62:9d:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:97:79:E5:B1:4D:4B:4F:15:83:97:A4:29:1C:76:C3:E1:F6:04
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:df:e3:52:6c:ce:e7:21:28:03:e0:65:b6:3f:c9:f3:e4:
51:b8:7c:4f:c8:da:2f:c2:ce:05:15:0f:ad:c3:e2:a3:f4:70:
6e:dd:b2:c3:4c:0c:cd:88:4b:c6:9f:ec:3c:ab:c6:03:58:7f:
1f:50:c0:20:48:e1:ce:3d:16:5b:fe:36:b0:03:58:e6:38:78:
14:8a:5a:8a:86:f3:0b:c0:83:e2:b3:e7:54:58:7b:d1:1d:09:
4c:b9:8f:9b:91:7f:84:2d:49:f1:5b:0c:15:ff:41:a3:e3:0a:
b5:6d:c6:5c:03:02:77:f9:3f:52:f5:24:1a:0d:a0:2d:c7:68:
84:18:db:af:7c:fe:f3:d8:9b:bd:f8:0a:74:90:b8:51:ff:9b:
7e:0a:d7:f8:10:d9:67:c6:a9:bc:eb:89:eb:ad:05:2d:51:53:
c8:b0:92:f4:de:e9:2f:86:0f:d4:33:50:c4:e4:ab:cc:58:e3:
15:34:c2:53:ac:10:ef:ab:40:b2:98:36:f1:13:6f:da:5f:42:
a5:c4:86:c8:84:ea:1e:67:3b:ea:26:f5:1b:0a:37:c9:0d:ab:
17:81:18:dc:a7:5e:aa:39:87:05:fb:a1:f6:95:aa:b2:83:7d:
a9:ec:3e:f4:af:20:55:7b:9d:a4:72:08:9a:d4:e1:e8:9a:d2:
01:aa:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:36 2025 by rpki-client