Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 4Qv3AIrHZ42pCXieSWXMF2ws+18EMpRZiptJeHI3qCY=
Subject key identifier: 82:E8:16:45:72:A5:47:6E:1E:F3:AC:2B:96:95:A3:E1:49:D3:A9:72
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019A7293DFF94212DC75EC3502C68EC2FA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0A65
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: NYluxDjDkrHlC+OlISsdlY/7/qx7VAE/VHHBA8yTFy0=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:df:f9:42:12:dc:75:ec:35:02:c6:8e:c2:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=82e8164572a5476e1ef3ac2b9695a3e149d3a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:60:d4:42:31:94:63:dd:29:e3:a6:d4:36:
6e:94:68:f6:1e:ab:72:fd:d4:66:bc:d1:46:c4:64:
43:6b:b9:7b:55:7a:31:b7:50:dc:db:78:75:e5:37:
9c:a1:bb:0c:b4:43:c0:e7:6c:91:15:0f:5e:62:0b:
ac:ca:6d:27:e4:f7:6a:05:37:d3:8e:9c:04:3d:12:
c4:cd:33:82:07:37:b2:97:21:a2:d4:f3:03:27:71:
cf:b6:c1:64:3d:98:da:79:d0:6a:67:16:56:5b:bd:
31:19:0c:39:47:17:9a:95:2a:5d:3e:6c:2a:e3:e0:
1d:1f:cd:ad:81:27:5d:2e:60:f5:e1:f4:89:34:3c:
aa:52:9b:77:17:94:26:da:28:4a:d1:af:4a:67:2f:
cf:f8:6a:43:6f:46:27:a8:9f:ef:74:24:2b:12:34:
2d:79:29:8c:b9:cf:ca:f5:d9:37:fb:9e:f9:51:84:
2b:f9:f7:83:39:05:96:3a:fb:23:b2:c6:55:2e:01:
09:0e:a0:2a:9a:7d:80:05:c3:9a:b3:10:e8:33:16:
dc:e9:11:cc:62:c6:c8:5e:6b:ef:6c:96:db:fc:43:
28:7c:1b:dd:e2:34:83:d4:f2:70:04:3c:a2:fc:dc:
19:e4:55:5c:81:d6:20:a1:4f:fd:0b:be:dc:a5:a6:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:16:45:72:A5:47:6E:1E:F3:AC:2B:96:95:A3:E1:49:D3:A9:72
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:91:83:f3:74:8d:49:71:80:0f:5a:69:ca:dd:58:9e:95:
03:43:ba:1c:d2:32:86:d2:70:14:f2:4b:50:34:a9:5b:83:68:
9d:dc:37:61:8a:7b:1e:7a:18:3b:b5:cb:75:44:17:a9:bd:c9:
c6:13:2c:62:3f:5f:5e:b0:66:05:f4:f1:46:d4:c6:b4:29:71:
ac:07:70:59:2a:50:81:ca:e2:67:cf:ee:4b:ba:bc:5c:25:3e:
8d:c8:74:9c:51:37:70:6d:77:d9:81:e3:46:a5:5e:1e:ed:f7:
df:92:84:3d:18:ed:a5:13:a9:a9:74:84:6a:db:a6:82:d8:fe:
ee:b1:cf:ee:f5:25:9e:d1:9a:65:fc:c4:8a:8f:7f:19:17:a6:
6e:12:de:ef:06:d4:5b:7d:2d:50:54:47:bf:44:73:65:8e:e2:
37:13:96:9e:b0:99:da:10:0b:05:10:5d:3e:53:f0:c0:b2:ca:
8d:ba:6c:32:4c:bd:8d:38:4f:aa:89:d1:34:34:04:cf:cd:31:
d7:17:54:c1:4c:3a:56:ba:a8:ed:85:0b:67:3b:63:ea:ff:7a:
28:ad:99:ca:b7:23:94:a6:09:4b:ff:4f:09:e9:2e:ab:8f:80:
1d:31:4f:51:50:0a:02:06:50:3e:08:1b:31:76:d1:81:32:b6:
3e:e5:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:13 2025 by rpki-client