Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: pRL2oW2bB/aAlkhdEOHXIo9SxMVX5jA8LJIDDvlvLvI=
Subject key identifier: 11:46:11:3A:D2:E8:58:B5:4E:63:66:D0:21:18:A7:0C:57:F0:45:4C
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019A30EA51D8DB59DA2078D63425BA61A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0308
Signing time: Wed 29 Oct 2025 17:00:54 +0000
Manifest this update: Wed 29 Oct 2025 17:00:54 +0000
Manifest next update: Thu 30 Oct 2025 17:00:54 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: zZB0ZMAgDoBAvLIWY4p2+MgA02gd9yPISzO5YRAPoPk=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:ea:51:d8:db:59:da:20:78:d6:34:25:ba:61:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Oct 29 17:00:54 2025 GMT
Not After : Oct 30 17:00:54 2025 GMT
Subject: CN=1146113ad2e858b54e6366d02118a70c57f0454c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:b2:32:e1:8e:43:25:ff:cb:1f:bd:fe:90:
cb:70:9c:e5:4b:04:a6:5c:c8:3f:61:87:ae:05:41:
73:1a:a9:3b:00:4d:68:0c:45:ca:f1:d5:ec:70:c6:
42:8f:6d:5c:1a:4e:2e:c0:e8:91:79:01:54:9b:52:
f7:19:05:cf:ed:d2:c5:f7:6b:db:c6:30:4f:d9:b1:
74:96:34:1c:9c:dd:d4:e7:a7:6c:da:cd:81:6c:7e:
03:0d:2a:c4:61:02:60:7f:6a:3a:07:2d:26:3d:7d:
46:e0:31:76:d4:9f:88:ac:0c:59:d5:6a:a9:db:ed:
84:80:f5:cf:9c:60:06:e4:12:06:2e:7e:8d:70:a6:
46:c5:3f:3d:c8:00:32:2a:33:b3:0d:92:9d:36:31:
45:4e:49:4e:1b:3f:8f:a1:94:08:24:07:e6:05:6e:
33:30:48:e1:ab:08:5f:71:50:75:cc:2a:a9:b3:3c:
b6:ec:6c:c1:91:1c:9e:3d:ae:30:1c:d3:fb:4d:76:
59:e1:34:50:14:54:a9:92:23:9e:84:6f:4d:67:34:
dc:4f:84:a6:b5:b9:76:46:8f:6b:44:64:c4:94:8a:
19:95:7a:50:63:73:2d:b4:99:c6:d4:b6:0b:c1:94:
21:f9:88:e6:39:13:05:c8:55:37:a8:ad:7a:11:0a:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:11:3A:D2:E8:58:B5:4E:63:66:D0:21:18:A7:0C:57:F0:45:4C
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3d:50:f4:66:b6:83:d5:d9:1d:be:e6:72:2e:b4:cb:e4:dc:
dc:2e:dd:04:1e:4e:86:87:1f:95:bf:32:62:74:11:1a:a7:36:
aa:ed:4c:a5:4f:e7:0f:ea:a7:f0:b1:e3:95:74:5d:27:1b:f5:
d5:88:c7:d2:a5:0b:52:dc:ff:02:b5:f6:2a:b5:3f:7f:a1:25:
e1:aa:50:61:15:5e:69:66:5d:fb:a8:4c:9a:09:2b:a5:c7:a6:
8e:18:e5:0d:1d:88:bb:e4:be:55:b1:28:55:c5:b3:ff:8c:45:
5f:0c:69:2e:a7:ec:8d:1a:4d:58:d8:c2:27:14:b9:c1:1c:97:
b1:72:9f:9c:23:3b:b1:0a:4a:e8:e7:e8:3c:64:79:45:56:53:
27:6e:eb:d7:91:ea:6c:99:f3:18:de:26:08:7c:37:d7:14:4d:
67:33:b1:02:ac:9f:a0:66:42:c1:5b:78:14:e4:d2:3e:0d:ea:
ee:03:32:6e:f0:65:b5:d4:e6:99:33:11:38:ea:7b:12:63:d5:
ff:6d:4c:c0:e9:ec:b0:cb:6b:4a:38:45:09:ca:4b:55:25:1b:
44:2e:fe:e1:d9:32:43:54:6a:20:46:85:16:a8:12:43:d5:3f:
7a:76:78:2d:41:6a:07:5f:5f:be:bd:7a:09:0b:c3:ad:c6:12:
4d:37:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:03:36 2025 by rpki-client