Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: K3pLUeoxH0LlML95vbKL4ApAgSjo29UxBLzctXFBQlk=
Subject key identifier: F8:19:C8:E5:21:17:21:38:77:65:E8:7A:EF:3C:82:8C:51:5B:B1:F4
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019A522C4B912CA90C93C33603AE29DDFE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 042E
Signing time: Wed 05 Nov 2025 04:00:25 +0000
Manifest this update: Wed 05 Nov 2025 04:00:25 +0000
Manifest next update: Thu 06 Nov 2025 04:00:25 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: CIiCiuxpSk99hx6IhiJHvSO7rsNV2qAd7kkIyW/Yq3E=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4b:91:2c:a9:0c:93:c3:36:03:ae:29:dd:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Nov 5 04:00:25 2025 GMT
Not After : Nov 6 04:00:25 2025 GMT
Subject: CN=f819c8e5211721387765e87aef3c828c515bb1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:24:b3:66:2b:d4:69:8f:e9:44:ca:c6:67:b1:
eb:39:28:cf:9e:7a:28:5a:77:b8:4b:41:02:20:2e:
be:b1:d6:6f:c8:ee:ea:9b:53:13:3a:af:77:37:e7:
d7:ef:ec:57:3e:34:66:a0:9e:f6:db:9a:72:57:bf:
2c:a1:41:75:41:b6:34:09:22:b7:40:bb:3d:cf:86:
08:55:ad:d1:2d:e2:0b:5a:33:b8:69:16:5f:19:4b:
7c:7e:b5:99:0b:02:92:8e:0a:0f:a9:ae:ae:06:64:
fd:b4:3e:0e:98:b6:9c:7f:ec:67:7a:bd:57:25:9a:
90:45:76:ff:33:01:e9:96:f6:06:48:c4:7f:1a:b9:
3e:03:04:42:87:eb:c7:fe:a8:66:ae:30:fd:f3:bd:
a1:d0:df:8f:c9:fa:e8:21:31:fd:33:95:b1:c3:a4:
31:aa:7b:49:c5:3c:2e:68:f0:5d:22:96:eb:5f:d8:
17:f1:f2:47:13:38:f0:c4:2c:0c:fc:d9:53:e6:e8:
61:39:4e:3f:60:8d:b7:ab:7f:a7:be:bc:9c:3a:bf:
d1:31:ad:e1:08:2c:79:ae:1b:2e:36:6c:b2:4e:62:
9c:00:29:3e:4b:fa:cb:e4:bb:9c:4e:02:63:43:0e:
13:11:44:1a:fb:4a:cb:a8:2f:9f:91:88:36:9f:e6:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:C8:E5:21:17:21:38:77:65:E8:7A:EF:3C:82:8C:51:5B:B1:F4
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fe:ba:1f:25:78:ce:12:d9:f1:9f:5e:ca:8b:fa:c6:8f:95:
9f:80:10:9f:23:6d:fb:a8:35:d1:79:96:43:18:d9:46:d4:76:
d0:19:0a:d6:a5:88:dd:8f:0c:c7:3d:ec:ca:4b:99:ff:7b:aa:
36:a3:d9:9d:74:32:1c:f8:53:7b:84:bd:60:2a:e0:1d:0b:2a:
ba:9e:79:a3:7c:66:f8:7e:ce:a9:bf:e0:2e:ac:16:e0:4c:37:
39:9d:7f:cb:f2:e1:83:39:b7:18:29:d5:10:ee:2d:34:18:09:
83:7d:50:a3:d6:c3:af:44:37:67:76:0d:a3:39:f9:ce:70:8f:
b1:d5:73:66:51:37:84:78:98:4e:2d:2c:6d:69:da:ce:89:c0:
a7:4a:15:2b:ed:51:e9:8a:6f:47:13:a5:b8:5f:78:00:81:81:
3b:ff:43:73:1f:f9:d3:d7:59:cd:41:a0:0a:98:54:3f:c4:53:
59:a6:59:47:4c:07:60:4d:46:33:6b:e9:4d:04:0a:67:81:35:
b9:62:68:84:1e:15:3b:2f:16:27:45:82:9f:ca:90:a3:08:aa:
e0:a2:3e:46:55:79:95:e9:81:c9:38:03:1e:ce:bd:ae:c2:a2:
61:c7:7b:d0:64:a7:69:58:2f:34:01:09:18:37:4e:e6:a0:ca:
0c:ae:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:44 2025 by rpki-client