Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: N1J2DfuvRWPxwUzM2CKIQIJI7m6ms4IMfMZkDKXqjbc=
Subject key identifier: 81:BF:47:65:57:1D:CA:30:79:B7:30:E9:AD:78:2B:C4:BF:12:6A:AF
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019A706E3A24EA9C38DC0A6E3169A4A19563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 13E5
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: RtOmjXeLpMb0eHfaaUU8GjEC6Dybo3719le0pnYiMMM=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3a:24:ea:9c:38:dc:0a:6e:31:69:a4:a1:95:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=81bf4765571dca3079b730e9ad782bc4bf126aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:43:e1:73:eb:33:b2:35:b1:1c:88:78:41:
27:2e:b4:fa:d8:67:da:50:f4:2b:28:c3:ab:0c:70:
d8:3c:c1:b7:87:4f:4a:83:38:aa:a6:dd:0d:3f:da:
c6:6e:61:a8:f6:d0:1e:d3:25:da:aa:a7:6e:e4:80:
2e:ac:d8:ec:73:bb:f7:f3:88:5d:90:2b:12:78:03:
de:75:cf:66:3a:9f:55:5a:e7:8b:c8:1c:53:d1:c2:
49:60:13:fd:10:c1:87:95:be:b7:fe:99:b2:a7:54:
e2:72:64:ed:49:42:c9:32:ae:ab:e3:52:5b:89:53:
07:5b:53:f8:0b:28:32:7c:35:5b:59:ba:f8:03:60:
c4:ae:e3:ad:d8:ca:77:b3:6b:df:16:dc:d0:02:56:
c6:d5:1c:c2:c3:43:59:25:e3:ce:3f:4f:7c:88:65:
4e:2f:47:dc:6c:07:f5:95:41:b7:70:b5:1f:34:34:
6b:d0:62:55:05:6e:71:85:b3:9b:ba:92:8d:ac:31:
2e:58:5b:85:d5:e9:76:d2:07:8c:02:c8:51:b3:3c:
d9:51:4d:74:5e:0f:8d:65:6e:ec:a9:6a:af:87:61:
84:3b:bc:58:6b:51:d0:6a:91:2c:20:15:6e:ab:f2:
cb:8b:b7:5e:0d:0e:dd:18:7b:7d:34:39:99:52:e8:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:47:65:57:1D:CA:30:79:B7:30:E9:AD:78:2B:C4:BF:12:6A:AF
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:7e:a4:38:9b:4f:bc:c5:34:70:0a:d3:06:04:3f:f8:38:
3c:7b:04:e5:3d:c5:3b:53:cd:53:0b:0c:27:e7:cc:b9:15:e7:
20:cb:04:89:9c:a2:76:2c:0e:66:de:47:ff:24:26:30:f8:4f:
f0:6f:78:41:f3:67:84:bd:8a:07:9e:98:0c:93:59:02:b2:31:
23:99:5a:4e:c5:8b:f3:9c:ed:ff:c2:23:57:c4:5f:91:40:63:
79:23:82:e5:dd:b2:6a:83:ae:41:a0:bb:37:52:ba:71:2d:41:
e5:ad:7a:50:9f:83:8e:80:69:2d:09:ee:10:a9:1c:c7:ed:33:
cd:8e:63:b8:fe:87:fe:87:7a:0a:bb:c1:33:c4:f4:d2:ea:ad:
e9:ff:22:cc:dc:b3:6a:fb:9d:86:f4:10:53:0b:12:e3:34:e3:
36:8a:12:8f:51:9b:7c:f5:db:83:1e:e5:f5:39:1d:62:de:bc:
f3:a4:37:61:39:10:da:26:d2:31:70:5d:f6:fa:b5:70:93:08:
1c:b4:82:93:22:f5:5e:d5:12:84:50:d4:2a:84:93:c5:1f:a8:
04:08:4b:fc:18:02:4c:1c:bf:34:d9:7c:6b:e7:df:72:0c:4e:
14:f1:02:ec:c1:d3:c8:3d:51:fe:ab:93:8b:4e:19:3f:e4:76:
35:93:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:08 2025 by rpki-client