Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: zzjRT14HGS8vrcbQNK4wwS2z88LZAOlpMQz9phDrwRI=
Subject key identifier: 47:08:47:2F:F7:03:92:9C:D1:09:74:C7:40:FD:0D:DA:8B:91:15:30
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019A4EF474CAD16C463FA5A1B92F3D0FF665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: y9JHDobEyA5WBA0ySm2mZI7ICBHFjU5ykhogEhhclJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:74:ca:d1:6c:46:3f:a5:a1:b9:2f:3d:0f:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=4708472ff703929cd10974c740fd0dda8b911530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:a4:3d:7c:ba:57:c1:01:d5:de:cb:ba:94:
d8:56:ee:0f:67:5e:36:7a:a5:3f:17:3d:ed:c2:8c:
f5:8c:00:43:0f:a9:ac:fe:20:0b:e5:15:5c:1e:3f:
09:f0:3e:6a:85:4e:ca:e6:35:c3:10:0d:a3:5f:52:
80:c3:76:ed:5a:d3:7e:14:e0:3d:29:ac:7f:69:f1:
6c:0c:15:cb:35:d2:47:40:dd:6e:19:6c:1d:03:b0:
1a:06:1f:86:6e:cb:c4:d2:a1:44:8a:c7:a3:8d:be:
45:62:a9:9a:99:b3:5a:1a:68:f0:40:03:af:15:19:
7b:9a:4d:5e:60:2c:43:56:f6:8b:dc:87:9e:a7:7b:
f1:02:85:60:20:b8:67:30:9b:25:72:26:be:f1:db:
f7:09:54:7e:5f:dd:87:bc:66:3f:b1:fa:ba:20:de:
11:57:7c:9f:ad:02:5a:33:bd:34:5b:77:be:c1:64:
91:4c:75:10:fb:eb:e1:13:c3:d8:c5:a9:a0:24:b6:
6d:f0:75:7e:2c:14:c4:41:7c:62:05:cb:53:0b:d4:
60:68:45:a2:79:bf:3b:59:bd:f9:10:11:a2:94:8a:
bf:dc:dd:ec:22:32:8b:cb:3b:8e:97:39:65:f8:97:
ef:72:cc:b2:cb:08:ff:19:5f:3d:50:a7:13:f2:8a:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:47:2F:F7:03:92:9C:D1:09:74:C7:40:FD:0D:DA:8B:91:15:30
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:fc:ca:3a:6a:37:ab:df:33:55:9b:95:e7:e3:18:3f:d1:
b4:32:d8:f9:b9:c4:7e:e3:de:92:87:6b:4b:4a:73:8a:88:f9:
a7:27:34:b9:0d:94:e9:d8:f1:12:27:ac:b4:67:31:07:e7:25:
87:64:23:60:4b:21:4f:e0:ef:05:a5:eb:86:80:6e:03:9a:47:
72:71:df:ef:d2:f4:27:41:e3:0e:11:fb:19:9c:de:bf:ff:4d:
c4:e5:16:cc:d5:46:75:26:36:5e:2a:fb:02:9c:d2:84:80:58:
18:02:62:0c:39:98:07:c9:13:a6:cc:b6:e8:3f:af:c0:34:92:
4f:85:b9:71:cb:3f:8a:10:62:b2:95:d7:a7:f7:f7:05:b3:6d:
ba:12:6f:e3:a8:41:24:e6:0f:38:9f:62:fb:6c:ed:0d:7a:84:
d8:39:4b:d0:5b:d2:c9:a8:57:8e:49:2a:7b:51:6a:64:7e:37:
7c:c1:46:08:f8:c6:e2:ac:02:69:9c:c1:3d:68:9c:15:ab:30:
dd:a6:0f:fb:d7:e2:06:80:af:b7:2f:1c:62:a4:26:3f:21:2b:
04:77:10:d6:17:ef:0b:91:87:7e:ed:97:d8:52:a6:55:bd:d1:
ff:82:7c:46:13:2c:02:cb:49:9e:e3:60:49:cf:41:ef:05:2f:
d3:51:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:36 2025 by rpki-client