Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: x/rUlHJZAx3ltkKZ8OTRf9mnbu/y81Ym049oTXHKUe4=
Subject key identifier: A5:CB:66:3D:90:AA:82:0D:C0:C7:AC:3B:6B:DE:08:17:E7:E7:B7:51
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019A73015DC3CDCDAD073A297F783D6C5AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0BC7
Signing time: Tue 11 Nov 2025 13:01:00 +0000
Manifest this update: Tue 11 Nov 2025 13:01:00 +0000
Manifest next update: Wed 12 Nov 2025 13:01:00 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 9Ry4udpm+Tq4zziOS5GxUE7dMP9xPlBwO6S5wNBmPT8=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5d:c3:cd:cd:ad:07:3a:29:7f:78:3d:6c:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Nov 11 13:01:00 2025 GMT
Not After : Nov 12 13:01:00 2025 GMT
Subject: CN=a5cb663d90aa820dc0c7ac3b6bde0817e7e7b751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:19:19:16:19:25:b4:ac:f3:4e:26:58:db:
db:49:9d:e4:2b:a2:6d:bd:8b:46:17:54:2f:24:fe:
04:27:8e:d7:80:f7:bc:d3:4d:d7:1d:16:86:b1:c3:
4b:2c:cc:05:c9:1e:b0:02:c4:6e:5c:4e:ca:60:27:
1c:90:0d:45:45:53:3a:b4:82:99:fa:fc:96:89:36:
72:57:e3:23:f0:5d:43:c0:0b:29:1a:8f:e0:0b:fa:
2e:d1:a0:0e:69:5f:68:e7:0a:04:16:d7:9e:a6:8f:
d0:7a:af:a4:a7:82:94:8c:86:61:a9:38:13:73:f1:
df:20:50:26:dd:1c:df:91:78:ad:7e:3d:7c:64:df:
14:62:b6:83:41:1f:7e:96:44:72:ed:65:de:d2:3a:
09:20:01:b9:b7:34:8d:c6:bc:73:c2:cf:f4:55:e6:
92:33:8a:08:9a:fb:43:26:12:fc:de:58:ca:67:38:
4f:d1:a8:65:66:6f:b1:74:7d:c2:12:52:37:b3:25:
37:23:bc:f3:56:bf:d8:8f:41:c5:74:82:97:cc:4d:
85:76:b4:49:1f:5d:46:68:47:13:55:20:33:91:bf:
8f:e2:13:42:4e:7d:a0:d8:dc:33:34:34:29:d6:0a:
32:b7:f8:42:83:25:93:9c:13:e7:59:b4:1d:ca:7e:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:66:3D:90:AA:82:0D:C0:C7:AC:3B:6B:DE:08:17:E7:E7:B7:51
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:fe:52:7d:8b:7f:18:ae:e9:e6:38:58:c5:b4:21:ad:4d:fe:
85:89:59:58:46:86:36:cc:51:37:97:76:32:57:97:b2:92:a8:
7d:ab:0c:e5:38:2e:8f:3c:93:cd:00:8e:0a:e1:da:dd:b1:0e:
b3:c2:04:0d:b6:ae:87:1d:bb:cd:ea:8e:4a:bf:7a:d6:94:81:
6d:c2:83:e8:50:4e:d5:80:77:ed:80:36:69:ad:98:88:66:c6:
a4:50:6e:a8:ea:b8:3e:a5:58:e0:f4:0c:09:90:09:12:16:be:
01:01:64:0a:d1:8c:d8:f8:3a:87:7a:c4:00:7d:12:ba:5f:72:
9d:9f:e0:c5:5d:ae:74:f4:e6:f4:00:b5:eb:a9:a4:f2:0d:66:
73:a1:b3:dc:3d:d3:9a:04:c4:c7:9a:10:ec:b6:e7:6a:57:35:
20:a2:31:d4:05:45:78:3a:32:56:d8:18:1e:ca:91:b9:a5:a6:
3c:a9:6c:62:18:36:7f:8e:c9:54:67:49:76:a5:e2:27:4c:27:
d4:ed:26:b9:a2:8f:b2:6f:e7:9d:76:f2:85:24:f5:55:9d:ae:
ae:01:51:fc:af:1b:40:5c:59:26:5c:59:12:a3:86:59:0e:fd:
94:b8:3d:fb:50:32:6d:4a:03:58:20:e4:bf:bc:7c:ae:50:32:
1a:46:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:14 2025 by rpki-client