Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
File: 2iHQJGSziv86MckIeNYnI7nHQqY.mft (raw, json)
Hash identifier: IeCVS71wzwePE0ynAoNf8vxdAdfHYjT+AsokyFO5m0M=
Subject key identifier: BB:36:57:D7:CB:F3:C7:3E:B6:F7:13:46:B9:D7:20:F6:74:49:A8:E7
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 019A50E33303DF7D1C7DA22E0030F2CA1162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
Manifest number: 010B
Signing time: Tue 04 Nov 2025 22:00:58 +0000
Manifest this update: Tue 04 Nov 2025 22:00:58 +0000
Manifest next update: Wed 05 Nov 2025 22:00:58 +0000
Files and hashes: 1: 0JT7tPGuP5h5ZUvLvPxi-tJv5wk.roa (hash: BbMNBUCTeRLtRw1Vi3eOuHY/lINHO4oBENygtqlAkSk=)
2: 2iHQJGSziv86MckIeNYnI7nHQqY.crl (hash: 4vOsC+Usk9+ILTlThG4Wjpu1P8UUbQYCP49hDwo8XNI=)
3: vqXNaSZgp3ssNrNy6651RrVFS3Y.roa (hash: giLaYS/A+9rxwvGKkolgztkk8t+vnflpFT/hVk3pswQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:33:03:df:7d:1c:7d:a2:2e:00:30:f2:ca:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Nov 4 22:00:58 2025 GMT
Not After : Nov 5 22:00:58 2025 GMT
Subject: CN=bb3657d7cbf3c73eb6f71346b9d720f67449a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:67:c0:eb:7d:2b:b1:94:c1:ce:fc:2c:ee:
ad:dd:77:38:b5:97:31:57:7f:c4:aa:71:c3:aa:47:
5d:cf:ce:ad:a3:cb:af:bc:a6:54:a1:e7:16:5f:e6:
11:7d:46:41:54:8c:03:d6:ca:3f:06:98:ef:a0:52:
4e:82:a2:4a:d7:8d:6a:e4:42:7f:a9:32:4b:22:91:
54:a5:4a:f4:56:77:6f:31:2c:9a:d6:fb:fa:f3:03:
df:54:8d:54:6c:73:28:fd:17:96:f1:65:7b:84:0b:
f6:82:0a:68:cf:f3:3d:a8:b2:eb:3f:4e:de:f1:00:
1c:47:8f:b7:1f:59:74:99:60:0e:66:86:fd:d3:ac:
e1:d9:9e:28:f1:3d:78:ec:eb:14:ec:37:b6:79:b9:
25:ee:dd:68:ce:c8:72:bf:df:a9:7c:3b:9e:55:4e:
e4:77:87:9b:4e:ef:94:2c:e2:68:51:94:cf:fb:ba:
8b:2d:1c:cb:b3:d4:9b:ec:e3:de:cb:05:17:a3:41:
1e:01:d6:d2:e1:fe:0a:20:27:3a:8a:4f:35:72:c1:
3c:5f:c4:f7:84:06:d2:8e:26:d5:9f:e4:a7:ef:3c:
71:a2:4e:d4:50:cf:00:f1:a8:50:9a:4e:19:91:af:
89:77:fe:af:c7:6a:91:41:b7:34:9e:69:00:91:a5:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:36:57:D7:CB:F3:C7:3E:B6:F7:13:46:B9:D7:20:F6:74:49:A8:E7
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f9:34:e7:5b:9d:c8:74:f0:2b:81:d8:10:4d:d4:d4:84:26:
ef:c0:60:ef:19:cb:3e:ac:88:0f:0f:e9:f1:29:7c:06:a7:f2:
7c:99:20:f9:45:f1:e8:01:21:a4:61:8d:cd:24:78:5e:d1:5e:
3f:e5:80:cd:ef:ad:44:3d:6b:23:7e:ef:58:49:96:ab:5a:f1:
f5:b3:0d:ed:87:e2:af:fb:69:53:7f:1f:10:03:78:82:0a:fc:
c9:1c:64:31:be:e8:e6:e9:aa:5d:cd:76:8d:33:fd:82:7e:14:
3b:f0:f1:90:da:e8:74:bb:74:32:e4:cc:c7:f3:26:64:1a:a1:
46:9a:8c:a2:05:d9:f3:aa:d7:82:1b:c0:2b:e5:3c:d5:b5:93:
cb:da:b9:76:fd:85:65:c0:5a:9c:8d:62:b7:75:8d:0d:80:40:
2f:7e:5b:7a:34:5d:99:6f:04:55:ba:ca:7d:5b:c2:b0:f6:c9:
32:a6:49:79:48:48:df:5c:a0:ad:2d:da:77:d8:d6:c6:5c:e6:
9b:fa:1c:a3:d1:44:ce:55:9e:1d:0e:5b:dd:af:3d:78:3c:b5:
e0:2a:98:de:57:af:f1:a2:f9:d3:4b:8e:4c:9d:06:76:0b:7c:
5c:f4:b3:d6:50:48:e3:53:db:3e:e0:83:5a:3d:9b:cb:8a:38:
87:ac:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:44 2025 by rpki-client