Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File: 2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier: W2aHzpoDpv1A6K4s7haGnUhgbe2umzLOb3tpzkpGfl0=
Subject key identifier: 1D:EF:9E:47:52:79:69:6D:92:8A:52:CF:22:BC:6E:E2:36:F0:BE:EC
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer: /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial: 019A4E4FCBF8FB8F70EDDB5B99F6795E8B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number: 08A2
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: KNF5X1bau0DBykjBQwJzeNyjhAryQ+XrBS76btvMilQ=)
2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cb:f8:fb:8f:70:ed:db:5b:99:f6:79:5e:8b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=1def9e475279696d928a52cf22bc6ee236f0beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:f6:a7:7b:d0:2a:45:e4:f2:c6:b9:93:7b:
16:9d:a9:32:5d:f6:8d:26:d0:8d:e1:3f:21:60:18:
b5:3b:46:f8:6e:4d:ce:b5:40:00:7c:15:97:3d:ed:
83:f2:ec:00:67:a5:da:1f:55:9f:39:4f:ef:c1:42:
4e:cf:94:5f:d8:98:b9:5a:22:f4:ca:7f:ea:34:19:
0a:06:13:f1:8c:bb:2d:56:e7:cf:3c:bf:65:6c:fe:
1f:0b:bb:68:4d:23:41:01:3d:3a:ce:43:a2:1e:41:
a2:ab:09:ad:83:24:9d:fd:87:35:cc:eb:ee:8f:ae:
26:c6:67:79:ef:4a:e3:e8:1c:fb:23:4a:1c:c1:b4:
9a:c1:ee:75:eb:c0:11:cc:f1:59:dd:8d:68:3e:a3:
f7:39:97:b1:ce:0a:5a:12:4c:92:1f:3d:b8:a5:7e:
17:b3:24:be:30:a2:d1:f2:77:1c:c4:86:75:c2:4b:
02:b9:c2:fb:ec:16:5a:e0:80:6a:e7:e8:be:03:f9:
b2:04:23:b7:4f:45:bb:6d:56:66:18:00:77:e7:1b:
0c:27:79:28:31:d2:bc:06:a1:d2:fa:bf:7f:de:b8:
b4:bb:14:27:9d:37:1e:15:33:fe:1f:9f:4d:11:c3:
4a:4c:58:50:9b:60:3e:65:f1:55:70:c5:89:a7:49:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:9E:47:52:79:69:6D:92:8A:52:CF:22:BC:6E:E2:36:F0:BE:EC
X509v3 Authority Key Identifier:
keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d4:22:88:67:23:82:ad:f3:03:3b:c8:b9:08:3c:d8:f5:bb:
74:63:fb:1e:51:91:bb:b5:66:86:f5:a4:4c:f8:0c:c4:1f:00:
db:a5:58:ec:e4:29:e6:c6:8e:d7:ba:0b:d3:bb:2f:6c:74:a0:
1a:8a:cd:03:35:b4:46:16:bd:ff:dc:c9:f4:93:b5:4b:99:c5:
78:33:77:e1:e9:17:ee:30:9f:75:07:5b:33:1f:f1:90:b9:1e:
0c:ba:27:14:a4:0a:37:07:43:68:6f:f8:43:c9:a6:5e:f4:17:
a6:65:9d:75:87:0c:88:7c:ce:b1:f2:c3:d0:09:46:cd:06:56:
58:a1:28:0c:25:b9:04:09:65:03:bd:2d:06:b4:1a:c3:af:64:
1e:0b:ac:f8:84:89:ea:7f:ea:96:4a:ec:44:1e:d6:f7:ec:e0:
c9:cd:0c:5c:92:09:a9:0e:f3:9b:fa:81:0e:06:b3:f3:35:6c:
27:ff:a6:8f:ec:84:25:98:84:5d:a6:ba:02:08:af:95:d6:25:
cf:02:1f:96:77:1c:e5:89:cf:74:16:fe:ba:f3:67:57:30:4c:
ea:ab:bd:c4:c7:f3:22:d0:cc:48:ca:4f:df:71:68:b4:ba:cf:
1b:73:67:5e:ce:8f:ea:21:f2:c2:d9:94:91:5d:08:ef:84:5d:
c5:13:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:38 2025 by rpki-client