Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: gdJl5oYs/VDfkoXmuuYvHbt3O/3vToBTb9Z78Cnd2Mc=
Subject key identifier: 8B:14:5E:5A:5B:44:21:C7:6A:2E:19:49:B8:C4:9A:6C:19:2A:9E:3D
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 019A4D3CF671EE41DF951FC2C24A87A9B5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0316
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: Fn5rib0xDV7v3x0ReVweenw3GpKcDPPRon8FLmXfEUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f6:71:ee:41:df:95:1f:c2:c2:4a:87:a9:b5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=8b145e5a5b4421c76a2e1949b8c49a6c192a9e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:94:47:20:6a:01:85:ca:2e:34:e7:18:a6:
6d:f3:50:96:98:c5:c6:38:59:7d:8e:c1:40:c2:ee:
59:ad:ba:2d:1a:01:98:2d:19:b9:91:02:9b:cb:ef:
be:dd:81:46:2f:76:57:f7:d6:2c:2e:08:90:6a:a2:
23:a8:a8:bf:b3:84:6e:62:b3:ba:c4:0e:77:09:2b:
b9:eb:dd:47:10:56:f5:64:bf:f0:b7:fe:57:c7:7a:
86:d3:56:04:19:4c:f4:f9:8b:77:16:a7:b5:e5:6f:
b9:96:e4:c1:c5:bf:87:eb:d3:17:77:eb:93:c9:03:
26:e1:dd:7b:35:be:9e:ec:51:dc:66:cc:3b:e7:40:
ad:95:e4:59:51:b3:36:a1:c3:59:fd:72:cc:77:d2:
6c:18:9f:0d:ec:f7:36:51:1a:93:b9:83:cb:be:fc:
78:09:1e:3e:9f:89:c8:6d:5d:b7:69:aa:34:b3:41:
a5:2f:5b:3e:7c:2b:13:c2:d3:66:93:6e:3f:d5:44:
22:79:58:0c:1e:1a:0d:97:0f:8e:3c:ae:0e:86:6d:
af:11:22:49:5a:62:ec:cc:f2:31:76:ee:78:0d:65:
d1:34:12:91:a2:71:55:ad:87:1b:fa:26:a0:d1:87:
ee:7e:63:56:2f:1c:ac:55:76:ec:20:06:42:fb:54:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:5E:5A:5B:44:21:C7:6A:2E:19:49:B8:C4:9A:6C:19:2A:9E:3D
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:13:04:df:f3:e4:37:75:f3:35:fb:1d:2d:0d:22:f3:da:05:
63:62:8f:66:71:e9:d2:13:52:2f:93:26:bc:f2:9d:5f:ed:b2:
5e:a5:6b:55:d5:6d:9f:d2:1b:35:92:5a:5c:e4:a8:cd:c2:06:
bc:f3:fb:97:74:c9:30:eb:96:c4:62:bd:6f:1e:ec:9f:99:dd:
1f:83:74:7b:e5:c7:a5:1d:45:a7:2c:b9:bc:7b:21:c1:9e:3d:
98:b9:03:9c:28:f9:a2:5a:39:5d:15:a6:75:db:4a:2a:95:d7:
e7:63:e1:0c:24:fe:ac:5d:f3:06:76:99:5c:38:31:b0:e6:d9:
31:ca:97:bb:00:22:cf:c1:3c:2a:d7:4b:e9:ee:37:d3:49:05:
bd:b8:5f:86:ec:b8:3a:81:1a:21:82:23:3d:c9:8e:c6:16:0b:
91:2e:58:c9:d9:45:1d:c2:26:b2:54:53:86:69:6d:f7:71:e9:
cc:3d:27:11:34:de:5c:33:09:f3:48:02:ee:d6:c7:8e:42:ea:
30:cf:95:55:28:a7:40:9e:09:45:dd:78:6c:42:c9:ea:db:89:
d2:98:1e:06:d9:52:54:d7:4a:5c:5b:b8:d7:b4:eb:6a:08:dd:
23:06:87:81:e2:53:76:f2:4b:38:44:e0:73:2d:c4:34:12:d6:
8e:c5:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:23 2025 by rpki-client