Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: bIkwl8wc9YmEPssJkMQrCj2DsZteyOWj1j6bs0wXvUI=
Subject key identifier: B8:DE:81:C0:E5:B5:FB:C5:C2:5E:DE:42:F4:8B:52:B4:9F:0A:BB:57
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019A4E4FE6D57DA6403264EDF991B57CB9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:50 +0000
Manifest this update: Tue 04 Nov 2025 10:00:50 +0000
Manifest next update: Wed 05 Nov 2025 10:00:50 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: lygceAdTeCh4jH7CGRQSlCxzMXC9qb5yaNQInKkA438=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e6:d5:7d:a6:40:32:64:ed:f9:91:b5:7c:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Nov 4 10:00:50 2025 GMT
Not After : Nov 5 10:00:50 2025 GMT
Subject: CN=b8de81c0e5b5fbc5c25ede42f48b52b49f0abb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:a1:e4:a5:bf:34:6e:52:86:fd:d4:d3:a8:
f1:5a:dc:94:79:7a:f2:6f:07:fb:e5:95:c3:97:df:
20:c6:0c:42:e2:e9:f3:5d:cf:b3:32:83:dc:a6:f2:
af:4d:b1:28:1b:73:26:11:87:db:0a:71:da:1c:40:
15:82:63:f5:9f:f9:a0:f9:4a:21:a9:e1:57:3a:ad:
74:8a:1f:d2:e6:cf:69:43:52:33:d7:e4:a4:2a:5f:
79:b7:7f:8f:f2:39:45:99:2a:6a:cf:80:30:5f:4c:
d4:54:a4:9f:52:34:86:f7:5f:8f:08:8a:32:7a:42:
a5:f6:eb:e6:16:dd:fa:92:6f:3a:84:08:0c:bc:57:
8a:f0:17:b9:46:96:82:2d:66:b0:81:25:90:c8:cd:
1d:1f:55:ae:1a:84:b3:62:cd:86:d4:8d:2e:40:61:
ea:38:76:43:dd:33:db:6c:d9:a9:28:01:a4:97:05:
c2:bd:34:32:3e:4c:76:ca:99:ac:2a:50:5d:5e:16:
fc:65:3f:60:9c:cc:b6:45:cc:88:3c:3d:99:47:56:
de:eb:c0:0a:8b:11:6c:64:58:f1:2e:43:16:e5:ae:
38:4f:6d:5e:8c:7c:63:7f:25:fd:f1:69:7f:15:57:
2a:2d:e6:86:41:b4:40:ad:28:9b:77:5c:42:b3:7a:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:81:C0:E5:B5:FB:C5:C2:5E:DE:42:F4:8B:52:B4:9F:0A:BB:57
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:99:5b:65:a9:27:7e:ec:5f:23:9a:f9:fc:d1:d4:59:99:
3f:d5:f7:0b:15:4d:10:cd:9e:ac:90:5e:e9:c3:27:e7:23:cd:
66:d5:df:c3:19:39:18:1d:c3:5f:ed:b5:14:95:2d:ef:80:d5:
a0:fc:d7:20:11:c3:f3:e3:c2:ae:6c:a5:f1:ff:d8:fc:6c:b9:
b5:67:39:68:33:69:55:32:3f:73:50:3c:b3:60:30:f1:4c:d4:
c7:26:02:32:be:32:43:3e:e3:8c:1d:2c:1c:6c:7d:12:d1:14:
43:5c:38:f6:26:1d:82:b0:11:e9:5f:6c:99:84:1e:e0:7d:69:
83:65:72:1e:8d:68:a6:0e:77:35:ef:1e:fb:5a:39:26:51:70:
0b:b2:2a:24:1e:91:a5:db:ea:15:63:bf:6e:e4:55:4a:f9:30:
b4:74:8b:e0:50:7c:78:00:d1:ce:ec:12:ad:9e:9c:31:fc:46:
38:fa:94:7d:23:93:eb:e6:e4:4f:46:33:26:e6:19:6d:a0:fe:
9c:e9:b8:a2:8b:8c:45:55:7d:ce:d1:17:27:19:42:c8:ee:97:
8e:65:d4:b6:60:86:fd:fc:71:a3:21:93:d3:9b:35:26:4f:92:
f0:d9:74:0f:3f:02:72:f8:9c:e7:53:08:81:29:3f:bb:29:da:
d6:d8:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:33 2025 by rpki-client