Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: VwHfR3vX7/B+S6Pa1VRYdo1ucmLm4TWSx1NvJPiNdww=
Subject key identifier: AD:EC:52:8F:E6:1D:24:51:FD:83:A6:D6:E4:49:D9:BE:16:28:81:23
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019A4F2B3892BA96185935B4059B588E806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: L/l2WmgTOJMYeFbV5VqvahO7dvuvc5t3QvnIRU2ujOk=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:38:92:ba:96:18:59:35:b4:05:9b:58:8e:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=adec528fe61d2451fd83a6d6e449d9be16288123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:f2:81:a3:40:30:e9:ea:85:28:b7:c0:93:
f7:0a:c3:63:db:bc:45:b7:cc:a8:8e:af:6f:63:d9:
e1:6a:46:92:92:21:6f:f3:88:b3:4e:a9:f5:b9:ef:
4b:12:c4:5d:60:c9:96:86:19:aa:f2:b4:d4:e0:e3:
33:75:df:e5:01:88:b5:7e:06:96:9a:5f:04:d3:17:
bb:02:1f:77:f4:26:10:59:24:e3:8e:03:1b:eb:c5:
60:59:0f:96:44:46:a6:60:18:cb:1f:90:57:c8:a1:
5b:8b:d2:85:13:08:ec:4d:e0:c8:fa:22:fa:95:ee:
7e:aa:9b:4f:8e:e3:6a:dd:54:ab:62:e9:02:b3:4a:
fb:25:c5:a3:86:f1:fc:12:ed:00:74:b0:f2:48:09:
08:ea:99:90:e3:98:7b:d3:2c:d4:c7:e6:e5:fb:bf:
93:b1:60:c0:6a:6f:23:6f:f5:a2:9a:e2:a8:d2:56:
7a:02:22:97:fe:63:26:3a:3c:b9:2d:fd:ac:da:23:
3a:7e:a4:19:ec:2a:9d:9f:c0:4e:ae:4e:ef:75:6e:
2d:d0:84:50:c4:10:5c:51:9d:1a:2d:fb:9e:37:29:
87:50:ae:3f:ee:22:7c:0b:85:b6:fa:0a:a2:88:a1:
ab:63:79:7a:ba:4b:d7:62:9c:2f:81:61:99:95:77:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EC:52:8F:E6:1D:24:51:FD:83:A6:D6:E4:49:D9:BE:16:28:81:23
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:36:c5:d7:47:cd:7c:13:80:f4:80:f2:3f:8e:81:bf:c1:e1:
ad:7a:9f:55:d3:cd:0c:ac:80:21:72:13:30:db:3b:ee:67:68:
b2:07:77:49:2a:fd:00:0d:a5:63:36:93:8a:3b:34:57:56:83:
3a:bb:76:71:44:41:2f:fe:69:32:7d:55:19:6b:9f:55:5f:23:
59:14:4e:d2:98:3e:82:1e:be:1d:30:b2:56:a2:8e:d6:8a:5e:
15:d4:bd:35:81:20:07:67:e8:8b:ce:e1:69:46:1d:6d:3c:ea:
46:c7:e2:f6:7e:06:b8:79:be:cf:ff:c8:c3:13:bf:62:39:e1:
4c:55:7f:a3:33:78:2a:b9:8a:7d:ba:fe:0a:1f:1a:0c:90:01:
9d:06:bb:30:42:d8:f5:8e:11:10:79:16:f4:14:4a:b7:a9:99:
1a:37:34:65:9b:7f:53:c5:fe:c2:6a:a5:d5:41:d4:47:63:40:
51:77:fc:e1:fd:bd:90:e9:5e:38:f3:f8:7b:00:6a:c6:79:78:
2d:39:c4:7b:e6:dc:c2:d9:2e:e5:be:73:93:80:1b:32:90:c0:
db:b3:72:dc:98:72:71:01:8b:c7:31:ec:ec:00:a3:f6:3f:d8:
84:5c:1b:1e:e5:50:3d:61:96:60:85:ae:7e:7d:a6:8b:d1:f1:
2d:37:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client