Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: bKaHcV/rDlNdWDWnSQBJdYesL9D0i4a3NFxS5YpaEV8=
Subject key identifier: FA:87:B3:D7:E2:B7:B3:7E:F4:52:40:C6:23:B1:2C:F4:6C:4F:3D:C2
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019A4E4F94B487663B9E2676D62FB0B7A023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0918
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: xcMzs/yeKFcR7M9v/8fN56OxeT8R798MJtu8MUhQ0vs=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:94:b4:87:66:3b:9e:26:76:d6:2f:b0:b7:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=fa87b3d7e2b7b37ef45240c623b12cf46c4f3dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:f0:ea:25:87:0b:72:c3:c0:0e:d7:13:62:
63:38:fd:ea:1d:75:8a:08:28:f3:7a:e6:8c:c6:49:
34:d7:19:95:88:eb:37:27:35:89:dc:c8:08:e9:5e:
e1:c0:c4:d4:44:8b:a7:56:32:be:b9:4b:40:91:a1:
1e:4f:be:71:1e:66:bd:53:af:e5:6c:13:fd:7d:f2:
bb:0c:6a:98:fa:7b:ae:b2:63:9a:29:4f:0f:26:ce:
4f:4d:05:3c:66:15:fa:45:e4:96:e8:7f:91:fe:29:
ec:8b:55:11:69:05:e9:05:74:7e:06:22:a7:59:0f:
c8:b1:a5:c5:47:7f:c5:28:2c:73:c5:ab:8f:fd:72:
e7:89:ca:3d:46:ef:04:a6:76:2a:78:a4:92:9e:90:
41:1e:34:e8:4a:38:6d:9f:8b:f5:58:b9:e4:0c:34:
e2:d1:a2:d6:46:f7:e5:bd:27:59:f2:82:5d:ab:0e:
b0:70:71:57:ed:91:fd:72:0a:5f:63:46:0e:ef:de:
bf:56:82:e0:53:f6:31:7c:32:63:fe:0e:61:b3:90:
a6:cf:a8:97:64:c5:42:2b:ce:24:55:80:e3:a3:98:
e5:16:8f:1b:55:f3:da:e1:77:da:7b:04:67:84:56:
0a:87:b9:7e:a0:9c:58:04:a5:9d:3d:6d:95:2c:8a:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:B3:D7:E2:B7:B3:7E:F4:52:40:C6:23:B1:2C:F4:6C:4F:3D:C2
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:7b:60:e6:73:cc:a6:e0:72:c1:63:bc:06:bf:24:7c:cc:
80:4a:7f:fd:7e:91:a5:90:81:3f:e7:2d:e8:ea:6b:b8:a9:2c:
03:a4:cb:7d:8c:cc:b3:d5:c9:3c:29:cd:ee:f6:f8:2b:17:d1:
23:13:91:eb:a5:cb:8f:c0:38:1c:73:35:4c:66:36:9b:10:8c:
b4:47:2c:36:13:19:2a:a0:b8:d6:29:e0:b6:68:8b:ab:95:8b:
d9:05:46:72:74:59:e5:c6:56:7a:c7:6f:44:68:12:b2:9f:10:
ef:8a:a7:5f:27:01:40:35:83:23:c4:f4:0b:f9:a7:34:19:99:
3e:f6:d7:89:d1:f0:6d:ea:cf:8e:6c:b7:12:f0:c9:6a:a5:96:
42:dc:bc:5a:91:bf:11:4e:37:d7:83:65:20:4a:db:79:f8:fe:
ad:96:74:d5:bb:e9:bf:71:eb:96:25:04:97:3c:07:19:32:f1:
15:80:f4:4f:fd:b8:ae:09:00:64:ea:b9:57:16:35:0b:f4:e8:
4f:52:9e:40:ed:b3:dd:d9:27:8b:4e:ff:6e:64:98:53:46:90:
70:de:33:88:99:20:64:6b:61:d5:bf:4d:ad:06:1d:56:f6:5b:
f1:aa:72:34:cb:d8:62:a9:09:d4:79:63:75:cc:f2:4a:b1:2a:
de:54:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:09 2025 by rpki-client