Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: WUljbNV8ZAeqWGuZFOxv/FrudAU8mhdtIOmkv6Mn68Q=
Subject key identifier: 7F:8B:D3:29:EC:4E:EF:95:4B:EF:CD:28:F1:2C:E7:21:FE:34:F7:A2
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 019A70DC05903FFF96AB0715495B1B73502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 01BE
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: yEv7RGasuAv1xSxSjNLIuRmdXEYJID8jI0N4RZG1m+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:05:90:3f:ff:96:ab:07:15:49:5b:1b:73:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=7f8bd329ec4eef954befcd28f12ce721fe34f7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:bd:b2:1b:cd:63:89:a3:ca:ef:ee:83:8c:
29:71:a3:f4:00:f8:04:33:ec:84:6d:da:56:d7:d7:
0a:49:3b:87:eb:f2:79:11:d4:2f:e9:31:ab:2c:85:
c9:aa:f4:ab:8b:36:9b:bc:c8:70:66:66:0a:90:1a:
4f:01:4e:f2:e9:f4:01:6e:c2:36:46:7f:c2:d0:3a:
65:68:1c:ff:8e:74:10:0f:d3:d1:dd:d2:13:db:ad:
5d:f8:a1:16:af:52:e8:59:09:79:96:4a:be:93:83:
9c:db:00:64:51:d8:25:9e:d2:96:72:e2:74:e1:3d:
eb:a2:33:39:95:56:19:14:09:5a:2a:2a:35:95:11:
0b:0a:ec:0a:e7:b7:30:9c:bd:58:bd:e7:41:7f:2d:
32:8e:a6:3d:d9:a8:83:38:a5:ea:0b:c7:db:00:6a:
5c:3d:ff:65:5c:20:69:df:a1:14:65:c0:b8:85:e8:
c6:69:fd:5a:e6:10:fc:d0:a5:44:e3:9a:68:2d:70:
c6:bf:62:7c:8f:ed:88:8f:84:64:cc:a7:ee:a9:32:
e9:7f:20:6b:43:cc:d7:38:e2:c9:4c:f9:f0:12:cf:
9d:b0:5e:94:07:8d:c6:31:9c:88:66:0e:2e:dd:21:
9a:e5:bc:fe:63:0c:6d:4c:64:f9:e2:c3:8e:08:fe:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:D3:29:EC:4E:EF:95:4B:EF:CD:28:F1:2C:E7:21:FE:34:F7:A2
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:69:68:b1:f9:7d:87:26:93:ee:2d:d5:b8:65:70:8c:5a:
b5:87:d2:30:5d:f6:e2:27:b9:09:8b:f6:47:43:29:85:2c:ca:
7d:f6:c3:1a:ae:57:3c:df:0b:72:9b:51:fe:86:9f:09:0a:c1:
09:0b:27:08:29:da:63:24:58:88:88:d5:57:c6:37:72:0f:d4:
7d:3e:7a:96:a8:f9:0e:a6:53:e9:27:52:a7:99:7e:0f:e7:29:
44:1c:11:46:f5:fe:c4:98:75:a8:42:ef:ce:da:54:12:ab:69:
ae:a7:27:1f:07:b8:d2:3b:80:85:47:7a:5d:93:ab:e7:86:86:
83:6d:36:19:a5:fa:ca:a7:9f:51:79:c5:b4:74:42:3d:0e:df:
ab:d7:52:41:ab:25:26:66:f7:85:c4:97:a3:57:5b:aa:a9:91:
b2:e8:64:b7:92:f7:44:1c:8d:9b:05:ef:18:ec:13:3c:ab:e5:
55:ff:83:ac:bd:35:00:bd:fa:2d:ff:8e:e3:7b:19:57:7a:42:
18:87:62:a9:d8:ac:b6:b8:59:bc:b2:6b:dd:66:a6:0d:8d:61:
ae:e6:58:46:97:99:27:21:5c:80:7d:7f:34:82:cc:92:30:3a:
de:a0:a9:1b:91:91:4d:a7:0a:e2:25:33:5a:66:d7:95:41:df:
83:12:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client