Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: pJ6TrhTrMhONbKU2nF9QvN+zgQmHgu8XwMcF8P/qZdY=
Subject key identifier: 3F:7A:69:16:C7:6F:E2:A5:AB:C2:3F:1A:8E:CE:81:20:0A:48:0B:40
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 019A4EF450D727268D3FAFD32DF84FF165AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: p2P/a0dn0Rh9daPHxOmFUYu1dU8lQnPiF6enhDHlbqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:50:d7:27:26:8d:3f:af:d3:2d:f8:4f:f1:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=3f7a6916c76fe2a5abc23f1a8ece81200a480b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:52:0c:b7:f4:30:3e:fc:ce:b7:7a:c5:0c:66:
a2:87:ee:ed:dd:98:5a:a6:5f:16:bc:e5:df:e6:b7:
5c:85:38:fb:f6:a7:2c:3e:84:1a:ac:bc:7b:a9:17:
5e:b7:e7:13:dc:72:23:2b:ba:6f:45:fc:78:56:a3:
a7:d0:bf:f0:bd:f8:8e:be:4f:2b:1f:8e:ea:62:9b:
2e:f0:15:8f:a1:57:2a:6d:dc:7e:c9:1c:4b:72:05:
87:a8:45:f8:37:96:48:00:f2:d8:45:40:b6:b8:0c:
c4:87:3f:1d:86:b3:fd:0a:23:4c:cd:3e:b1:03:44:
cb:a7:d3:18:70:d4:9a:38:8a:c5:23:ea:dd:48:22:
e7:35:8b:63:87:2e:84:86:d1:55:2e:46:ad:0c:d5:
42:aa:b9:1a:a6:46:79:50:7a:6e:35:ee:46:80:dc:
e8:93:db:b9:76:a9:61:98:6c:1e:6c:d3:de:2d:6a:
7f:69:c3:40:6f:87:bc:95:74:b1:c6:28:09:ee:d4:
ea:3d:55:9e:81:57:f6:c4:9d:89:bc:66:1d:13:bf:
16:e1:13:16:53:1e:b6:30:96:0d:8c:a9:fa:41:18:
04:83:00:8f:54:7b:54:47:d3:b8:46:1b:62:49:4e:
54:c9:09:9f:ec:06:09:30:9a:18:f1:ef:64:07:c7:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:69:16:C7:6F:E2:A5:AB:C2:3F:1A:8E:CE:81:20:0A:48:0B:40
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d6:f7:0c:b6:30:7b:1b:70:7e:26:be:8a:75:a8:13:81:19:
62:b9:4c:16:30:48:4e:56:8d:b9:cd:82:82:e4:17:51:a3:49:
c8:da:c6:a5:d8:94:2f:ed:a3:44:0c:69:3d:ab:ec:36:dc:ee:
10:95:c5:a5:38:b8:eb:92:5a:03:6d:8f:e8:40:5c:3a:59:76:
b0:86:7e:e4:c4:ba:b0:7b:f7:be:1c:32:26:6f:bc:76:40:e8:
0a:4f:ca:ca:25:92:ed:df:d1:8b:f6:d0:59:5c:89:d3:ef:4e:
4c:28:1b:0f:be:4e:a3:74:75:68:f9:5e:e3:08:5b:31:95:b4:
41:5e:2f:21:02:b6:18:9f:6c:ff:4f:5e:03:b7:5b:9a:1e:74:
b2:50:a8:4c:e1:39:d7:9a:19:b0:af:6b:55:c0:f5:db:92:89:
ad:9f:7c:b9:a8:45:3a:eb:18:f7:a6:2b:a5:03:69:3d:59:b7:
fc:2a:90:89:c4:ec:8f:d3:c4:a0:d9:3f:ba:f1:9b:7a:9a:25:
0c:d9:24:4e:f9:01:0c:3a:ea:19:42:ef:94:6a:a8:b9:74:a9:
84:0d:b4:ea:ee:b6:45:1e:6a:d0:c8:bb:0f:55:60:fd:db:28:
ff:78:45:7f:0c:97:ac:bc:69:1d:c3:4a:1d:ba:86:1b:72:c5:
45:70:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:46 2025 by rpki-client