Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: Fd4Fn87yT516fEstjVPc6qB6dAKpz8leW/402If/azw=
Subject key identifier: E5:A3:5F:8E:82:2F:54:58:A6:BB:42:9A:D6:BD:FB:1E:75:3A:33:C1
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019A50E27B30AD261E599C469A888CE2563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 10B2
Signing time: Tue 04 Nov 2025 22:00:11 +0000
Manifest this update: Tue 04 Nov 2025 22:00:11 +0000
Manifest next update: Wed 05 Nov 2025 22:00:11 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: aqd+NNDa6DkNdo5KF71i6EF+VrtX1ZHo+tbUwHghNyc=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7b:30:ad:26:1e:59:9c:46:9a:88:8c:e2:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Nov 4 22:00:11 2025 GMT
Not After : Nov 5 22:00:11 2025 GMT
Subject: CN=e5a35f8e822f5458a6bb429ad6bdfb1e753a33c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:0c:8a:b5:39:bf:3c:30:ca:43:f2:ea:2d:
6a:9f:ff:8c:83:82:bc:36:f2:b9:1e:09:82:ed:e2:
0c:66:67:80:9e:bf:3d:7a:79:38:e5:11:59:30:47:
6a:f7:af:f6:47:8d:52:1f:f2:a3:29:c4:cd:b5:85:
50:a8:71:ce:95:29:6a:8f:8a:30:bc:f7:2f:3d:38:
aa:37:3e:84:6f:f0:b5:07:ef:77:22:9b:d9:6d:1e:
c0:f0:24:64:36:b1:89:09:6f:bb:17:31:0e:b9:92:
da:6d:f9:96:2a:d4:12:75:93:5e:f3:2f:af:00:b4:
9d:0a:42:9e:2f:43:18:0a:11:f9:27:ac:49:55:b1:
ec:04:83:4f:75:af:af:e1:9e:04:80:d8:f1:5c:b7:
b9:03:7e:36:6e:8a:bd:0d:f2:0c:e3:ce:26:98:a8:
43:56:52:d8:52:54:3f:da:f1:8e:ff:1f:29:3c:7f:
06:7b:1c:88:df:a6:14:7b:87:7f:fe:80:da:23:3c:
94:a9:17:20:15:5b:67:fb:36:0f:6e:26:b1:6a:86:
65:ee:d8:d6:e7:40:a9:1a:48:f7:df:2d:0f:20:65:
52:fd:a0:3c:7d:22:6f:ad:ca:af:71:57:be:18:91:
9c:3c:26:74:6c:00:71:7b:f2:8d:06:88:02:18:d8:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:5F:8E:82:2F:54:58:A6:BB:42:9A:D6:BD:FB:1E:75:3A:33:C1
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:b1:a2:36:70:b0:74:67:40:76:82:a6:d9:5f:e3:cd:49:
c1:21:2e:a2:da:de:0a:e2:01:3b:40:4d:92:af:81:fc:71:56:
a5:20:7b:43:68:23:26:d8:71:0a:27:cc:49:e6:95:c2:0d:31:
08:27:0a:2f:b0:ae:b9:62:94:a9:e9:e3:d5:1c:68:37:e2:a8:
c1:cb:15:92:73:d7:74:87:b3:32:6f:29:71:1c:3b:6e:4b:2e:
c8:e2:d7:c4:d2:2d:8c:04:9c:eb:e1:1d:6e:40:72:0d:d8:04:
2a:4b:9a:35:0e:af:ed:df:2a:dc:17:ca:6a:bd:80:a0:1e:3f:
f4:f8:24:6d:22:c7:f7:4d:c2:82:4e:f1:b6:cd:61:8b:43:33:
52:73:13:04:7e:29:9b:61:23:10:c4:a5:f1:c5:20:58:2e:cf:
bb:49:d9:ac:60:d5:5b:fd:1b:11:10:a4:6a:2f:6e:64:96:69:
6b:62:de:53:15:08:f2:85:16:54:5e:e8:5d:0d:2f:9a:7e:c3:
9d:48:25:10:c0:d0:0f:d4:00:7b:86:d7:c2:0f:da:d1:bc:d7:
d2:92:d9:7f:65:a1:7d:75:fa:a8:57:be:a0:4b:60:a1:6b:3a:
6b:9c:7e:49:27:af:d3:f1:af:e4:39:e8:40:fa:7c:97:47:b2:
74:5c:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:00:06 2025 by rpki-client