Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: /t0uvtnzU6aFiips9KM51wjZQva6ifUtsF4pMeKQY3g=
Subject key identifier: F7:E1:DC:AC:65:07:D8:7C:E0:96:8B:5F:D5:AF:D7:FE:16:4E:FD:2E
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 019A52D281AFEB90EDE687B977FB2E397690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 1376
Signing time: Wed 05 Nov 2025 07:01:58 +0000
Manifest this update: Wed 05 Nov 2025 07:01:58 +0000
Manifest next update: Thu 06 Nov 2025 07:01:58 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: hoeJ5AX2x9QH4bRgFgNRiXb6DyK/9nPSKYm5RWkZ0TM=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:81:af:eb:90:ed:e6:87:b9:77:fb:2e:39:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Nov 5 07:01:58 2025 GMT
Not After : Nov 6 07:01:58 2025 GMT
Subject: CN=f7e1dcac6507d87ce0968b5fd5afd7fe164efd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:9e:19:47:7d:af:c0:7b:0f:30:45:83:5e:
53:c2:33:93:bd:f8:df:fc:72:b0:34:1c:b3:ed:bf:
e0:f4:f8:5d:fe:7f:16:b8:ea:cf:04:5a:e2:7b:27:
8e:8f:67:1d:26:8e:27:2d:be:5b:ae:88:e3:0c:38:
8b:e7:bc:9c:fc:61:5c:ea:f5:be:3c:ef:b9:f5:f7:
97:5d:80:48:c9:99:5d:d9:44:d8:61:67:c1:fe:96:
e2:66:fd:33:71:96:6e:43:91:33:f5:42:a0:56:69:
18:67:ce:ba:67:66:3a:38:8b:55:13:82:b3:ba:d9:
64:c4:03:a3:12:69:56:9f:29:a2:c0:36:52:e6:62:
13:9e:25:a2:bf:70:7c:0a:f7:0b:ee:94:4b:f1:a6:
bc:9f:00:f0:ba:4f:55:75:1d:63:56:e5:4a:4c:27:
ee:a2:8d:ca:00:5e:b9:96:01:a1:c9:1a:80:ae:47:
f7:f0:94:b9:62:e4:fa:93:0d:a5:ea:a9:8e:11:ef:
6a:a9:60:1f:f9:ac:90:7e:c6:79:db:08:b3:56:90:
f7:c6:a8:b7:08:e9:81:7b:e8:07:67:a1:f2:46:07:
1a:4e:63:5f:dd:7c:33:be:2b:16:07:92:19:3c:92:
2d:a6:c9:86:1a:a8:80:16:dc:2f:c5:db:dc:c0:46:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:DC:AC:65:07:D8:7C:E0:96:8B:5F:D5:AF:D7:FE:16:4E:FD:2E
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0e:65:c9:9d:40:2d:c2:88:fc:31:3a:23:75:01:9b:49:33:
26:bc:e9:d1:37:c6:77:4a:11:2c:a0:94:ef:5d:18:a8:6c:7a:
5c:54:05:f3:02:05:23:70:14:b2:f4:9f:00:dc:46:a4:26:b5:
22:32:b2:8c:a0:d6:6a:9b:bb:e3:70:15:cf:08:b5:04:eb:4c:
a2:4f:ac:72:0c:88:49:c2:0d:57:2c:c5:22:85:e1:a0:d3:ce:
76:42:cd:24:e7:37:11:dc:ce:bf:a8:71:c5:e7:80:5e:28:c3:
47:52:d6:ee:d8:4c:e1:f9:1b:96:0c:d0:ec:5d:25:f2:68:41:
a7:7e:69:21:82:cb:03:0a:be:d4:13:10:3b:a2:36:07:a7:4b:
fe:cc:e9:fa:eb:84:7f:68:8a:ab:44:7a:71:04:38:c5:ce:8b:
54:f8:44:ec:0d:de:10:76:1a:85:8f:5a:ef:cc:e2:8a:1d:67:
5e:75:1d:37:24:ef:44:b4:8e:77:15:a0:62:33:5b:e4:2e:d9:
d7:aa:3c:07:0b:d4:33:23:c2:e6:91:f6:a7:16:f7:93:de:9f:
fb:b9:88:1d:28:8c:bd:25:fb:41:03:56:ac:c3:1d:e3:b8:8a:
24:20:f5:be:a9:5d:39:2e:e3:1e:85:5d:18:06:de:a3:a4:6f:
bd:99:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:46:53 2025 by rpki-client