Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: PQoRoW8dQ3erspssOmIxVF5VVCqtRGxJkD0fY/Gedyk=
Subject key identifier: DF:77:B8:4E:74:0B:52:A7:49:85:82:6C:91:19:B0:89:1B:CE:F2:87
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019A4DE1A639A6CA865AAEE307FCAD185D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 11FD
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: SujkTrj37XC6b7CFRx9eE58JWctSCxqbxx+GtKwUS+o=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a6:39:a6:ca:86:5a:ae:e3:07:fc:ad:18:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=df77b84e740b52a74985826c9119b0891bcef287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:ef:bb:37:f5:09:76:36:02:2b:6b:74:c5:
18:3b:0a:1a:5b:d0:45:7e:82:31:18:0d:fc:7b:70:
07:e3:d7:63:02:6e:88:ae:f4:79:ff:9e:c1:f2:23:
df:d1:a6:f8:fb:31:b6:ff:ba:bb:f3:f2:4f:58:7d:
bb:09:9a:ae:ed:99:77:a2:5f:5a:75:90:89:56:e0:
07:17:c4:f1:7a:53:ce:a1:e0:c7:48:ef:91:c0:2f:
b0:3b:f8:29:39:f7:ff:da:b3:3b:8b:8a:a0:d5:fe:
4b:5b:03:01:9e:45:77:d4:2a:bb:1d:80:23:32:a5:
b8:2a:bc:4d:b3:7c:8b:b4:c1:29:01:06:51:45:7d:
6e:b6:d3:2e:5a:3e:b8:c2:f9:4a:6c:60:5d:71:5a:
c1:ff:55:d6:dd:66:7d:50:bc:e8:95:76:04:03:82:
81:b5:f7:b6:26:dc:89:1b:68:c7:9f:3e:d0:f0:9d:
c6:d7:d7:02:39:ca:2e:70:f7:30:d6:46:c5:d4:81:
50:8e:13:41:f1:10:29:18:9f:e1:35:9d:2d:5b:16:
f1:48:8b:05:b7:40:ee:a0:da:3f:2a:e9:39:00:7f:
24:6e:bb:7c:03:80:1c:4e:af:52:fb:a2:8d:49:fe:
d5:ce:0d:5c:6b:b6:c9:fb:3e:9d:df:93:76:03:43:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:B8:4E:74:0B:52:A7:49:85:82:6C:91:19:B0:89:1B:CE:F2:87
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f4:1d:86:a1:38:4d:1c:fa:aa:4b:ee:06:43:92:4b:b5:8f:
7e:ff:b0:dd:5c:d1:1e:a0:fe:40:4e:0d:58:23:50:5b:e9:b9:
a2:dd:8a:50:21:eb:b9:b6:f4:9d:a3:41:be:89:a1:f2:ef:d4:
df:53:3c:7d:1f:32:00:dd:48:f5:0a:8b:2c:5d:74:46:a7:80:
84:c1:c5:16:5f:fc:d3:06:52:52:02:81:8a:80:3c:74:bb:98:
4c:c7:d0:7a:d2:fc:86:a9:5b:3d:7e:42:56:0d:91:df:15:a5:
ab:0b:1f:4a:0b:2c:7e:6c:25:3b:4b:54:bc:88:53:66:03:95:
27:60:ca:eb:84:d2:5a:91:fa:e6:ef:46:f9:e7:74:e1:71:a0:
f1:06:3f:f2:51:b3:7b:73:79:9f:57:8d:d5:c3:ee:c3:a8:92:
e8:bf:e3:0a:d6:8a:ac:bd:b9:89:95:2d:26:f2:70:bb:ab:05:
74:88:28:1d:83:c6:63:46:68:0f:db:80:84:35:ed:c2:9e:81:
6c:46:3d:ab:20:3c:2f:a9:a2:4a:73:0d:dc:1b:41:5f:20:f8:
45:7c:f2:b2:7c:e8:ca:88:95:7f:3e:85:37:9d:5e:f8:7a:81:
3c:03:76:a0:ca:c6:af:6b:56:bb:81:7e:b1:5a:9b:0a:3c:8c:
b9:92:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:48 2025 by rpki-client