Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: +QJ5P7aawdFvpfLUDAsis0o/tuGcX4Mz4+qtT71Hvm4=
Subject key identifier: 1B:35:CB:EE:56:7C:2C:70:E1:67:FA:86:42:35:1D:09:50:9F:62:BE
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019A4DE230BC4163A1B0B0128224F3046B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: P4GXMbrcAO3YijqoCRgs7pk7SPdnZ0k93/r66yAHRqM=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:30:bc:41:63:a1:b0:b0:12:82:24:f3:04:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=1b35cbee567c2c70e167fa8642351d09509f62be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:4f:6c:ee:15:d7:c1:e5:5c:db:97:27:fd:
94:16:cb:82:2e:d3:25:7a:9e:19:cb:f9:33:b1:e9:
cf:f9:d8:15:af:38:87:2f:b2:5e:9e:df:d8:3e:35:
54:3c:f2:47:f1:7c:ab:28:59:84:b9:d4:22:4e:20:
b5:6c:a2:5a:10:0e:56:09:04:06:a9:25:49:97:ae:
80:14:bf:2f:5f:e3:f5:1f:e6:b1:42:cf:a9:9a:ad:
92:c4:c8:69:5c:b0:10:87:fd:83:a5:57:74:fe:f1:
57:e6:05:df:f3:8f:27:8e:48:5c:2e:34:b8:54:9a:
05:a7:ac:6a:41:e9:c8:88:f0:b5:99:3b:82:18:d2:
b1:59:df:fa:49:90:da:f8:ea:9b:b7:95:35:7e:9e:
11:f0:b1:ec:d8:2e:d6:df:56:f9:2e:13:05:aa:14:
e8:32:8b:01:bb:8a:2e:e5:2e:98:fd:df:28:10:91:
68:ff:75:d0:a5:80:0d:e5:52:61:92:91:73:7a:02:
31:d2:2c:f7:08:57:a6:d6:e2:22:96:7b:b9:3a:c2:
ec:34:44:c2:f1:f2:8f:35:60:bf:95:ed:e5:0f:d3:
8f:bc:c9:a1:a2:8d:16:be:27:5b:bd:19:dd:24:0d:
a2:74:a2:fa:99:ac:6d:07:78:47:ca:70:4d:a2:da:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:CB:EE:56:7C:2C:70:E1:67:FA:86:42:35:1D:09:50:9F:62:BE
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:e8:55:71:7d:fd:19:37:3b:87:9c:9c:47:06:d0:bf:f3:
4e:be:1b:25:cf:e2:73:72:63:43:c1:ee:54:9f:d4:33:9e:fa:
65:e4:9b:d6:fa:78:58:41:94:e2:56:d7:c1:0e:d0:26:2d:ff:
1c:f2:ab:df:a5:29:d1:2d:ac:71:79:54:88:49:0c:24:a4:f9:
57:bc:2e:4c:ae:82:a0:f8:45:c9:71:43:ce:f1:67:73:ff:90:
00:be:50:c4:06:b0:b1:6e:3b:cc:49:74:37:93:d1:3f:ca:4f:
58:01:0e:dc:0a:2e:e1:75:f8:49:cc:61:87:11:0a:aa:7e:7c:
90:7b:67:16:9d:6e:1c:d3:ff:58:15:5c:2f:34:aa:80:6d:a8:
3b:a9:7f:7d:f0:ca:8d:b3:b6:1b:3d:ab:9f:6f:2b:36:0f:5c:
81:38:54:6a:17:97:55:0c:5c:db:79:de:0a:b9:39:da:9f:68:
a0:f0:80:14:41:ce:d0:65:ec:cd:bd:ce:a8:dc:16:63:b3:2b:
bc:07:8b:e2:77:76:7f:a6:90:27:db:51:62:26:3e:ad:1f:03:
ec:88:02:eb:1e:30:62:9d:80:f5:39:f4:64:76:4b:58:ee:da:
ed:5b:46:34:df:3c:55:45:5b:a3:8a:34:e9:49:51:83:41:c4:
95:98:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client