Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: 8jpmlaeBmSQ3R+xx4yJf2ajv6CQrC7vXooTZf1vUyf0=
Subject key identifier: D2:67:7A:1D:DF:63:AC:66:35:1B:AF:4D:CF:51:65:1E:15:E8:AC:52
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019A725CD939F3A9F6993CA2868CBF2A4805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 153A
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: k9Sb/jQULIVgQuJ+AG6Tv8gRjLimiK71Fn5f+IKrzI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d9:39:f3:a9:f6:99:3c:a2:86:8c:bf:2a:48:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=d2677a1ddf63ac66351baf4dcf51651e15e8ac52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:70:b3:40:11:43:e7:2d:c3:7f:3a:b6:66:
03:21:a8:7f:b4:f7:42:10:1b:ae:2a:3f:1d:36:4b:
e7:a1:c2:5e:8b:78:6e:16:7a:33:fe:ef:7b:d1:a3:
9d:bb:73:a4:ac:ac:1a:c5:dd:50:3e:69:ef:19:08:
18:ef:05:71:61:b8:27:2a:c8:86:fc:df:87:24:b0:
72:50:44:81:50:0b:c3:c9:5b:4e:1d:13:21:05:e8:
b6:3f:31:17:e9:f8:c1:d4:c8:76:f6:31:2b:c4:c6:
ad:d1:67:8e:4c:06:b8:73:37:8e:54:77:d6:5a:e2:
d6:45:ca:b1:94:d0:44:83:66:e2:10:61:15:e8:31:
6b:08:82:7d:a6:ab:54:09:a9:64:8a:c8:67:bb:68:
a4:7d:78:fd:8e:02:85:a5:57:6f:99:05:3d:06:6e:
b6:19:88:62:53:af:49:07:0d:be:85:0f:cc:be:9c:
d4:05:bd:76:be:9e:e3:ef:8f:18:82:13:30:13:09:
67:4d:64:b9:e3:f8:5f:45:4d:e7:bf:9a:bc:f4:64:
5c:e3:51:4d:51:40:a7:86:a1:9f:83:cd:8a:4a:89:
fa:e4:e5:8c:7c:50:9d:c4:1c:5c:ef:9f:61:90:ef:
8f:49:14:4e:28:50:47:27:d8:89:a9:3c:97:1b:6c:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:7A:1D:DF:63:AC:66:35:1B:AF:4D:CF:51:65:1E:15:E8:AC:52
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:1f:2d:42:b6:4c:9a:59:61:e7:4d:3f:cd:8b:87:bf:ca:
c8:1d:cb:6c:89:16:3e:8c:01:70:8c:6e:f7:54:4c:31:28:2d:
20:78:8a:bf:f6:27:5e:ae:ac:af:24:49:21:23:48:87:32:8c:
5a:bf:50:d8:df:da:ea:3c:7f:60:48:e7:3d:7e:1d:a8:af:e7:
ba:e2:19:67:b6:d8:ef:23:49:bd:98:76:6f:4d:42:5b:47:09:
e7:e2:18:97:c8:e2:de:1a:df:1e:33:93:90:c8:0d:bb:04:41:
01:10:08:0c:1e:e0:5d:03:4f:8e:bd:e5:ed:b4:f8:8f:82:0a:
79:83:42:01:e4:0c:cd:35:a9:02:d6:82:a1:a3:9b:2b:10:fd:
d6:f0:18:1a:bf:14:64:12:5d:78:28:c6:11:7e:6a:ee:d6:ec:
2a:dd:c6:76:87:37:a6:36:c9:d2:4b:15:33:85:19:52:e2:66:
81:c5:e0:60:a0:cc:bd:fb:47:d4:e5:4d:c6:c9:63:db:d3:46:
7a:9b:33:e5:cd:71:97:a7:b9:c0:19:bb:b9:88:c5:13:05:6a:
95:43:77:20:a0:7d:5d:75:b3:6d:19:f0:1f:c0:0a:8f:4d:93:
a0:91:7d:19:ad:73:f5:43:a4:ac:8e:18:b1:48:94:30:63:b2:
22:b1:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:45 2025 by rpki-client