Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: DpFe3xR+7nZ59bcCDhVCjZx/YgjhdSR7IJb+e/bPEEU=
Subject key identifier: 56:F1:28:10:72:73:5A:83:E3:8D:1F:6D:1A:6E:EF:77:D4:D9:D2:AC
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019A729391492B4E134466246A1E92E963DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 06AE
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: mOZar4W0G6c+AEDI8qG1CzH/AI9KYiIz2mu8WBGX80Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:91:49:2b:4e:13:44:66:24:6a:1e:92:e9:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=56f1281072735a83e38d1f6d1a6eef77d4d9d2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:4e:49:d1:b5:4a:80:8f:79:99:2e:2f:b0:
df:75:8f:4f:f7:35:f3:85:46:93:1d:34:ab:72:d8:
28:da:87:62:9e:d0:f8:8d:17:39:1a:f1:a2:fd:5e:
5f:af:f2:1c:16:31:19:1f:c9:f6:84:82:88:dd:71:
8c:8b:24:73:5f:cc:fc:89:a2:e4:4f:42:a1:3a:3d:
a0:ae:11:5e:96:38:93:4c:4e:d9:37:3e:24:29:f9:
3b:98:04:0e:95:79:bb:c3:5b:9a:87:2a:a7:a0:6d:
45:84:42:2c:83:3f:d5:45:29:f4:1e:b1:5f:bf:f2:
57:2d:1b:42:20:96:a6:10:e7:c4:a3:87:4a:67:3f:
7c:d8:d1:94:03:89:17:c0:52:5b:b6:8a:c9:e4:06:
48:3e:8d:22:d8:1e:27:81:58:0e:be:9f:b8:5d:e7:
b4:7c:9f:b4:25:e2:fa:9d:a5:ec:c1:90:fb:69:06:
b9:6c:df:6c:56:29:e9:3c:a5:0f:56:95:20:55:2e:
8c:2f:6b:d3:9c:47:8d:38:a1:cc:45:8a:c8:68:b6:
fe:3d:19:9f:46:49:c2:1e:e4:c3:5b:78:35:c5:79:
36:72:5c:a4:44:50:5d:93:25:52:b8:c6:62:71:53:
30:b3:38:c3:70:b5:4b:ea:16:50:17:b3:3c:12:88:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:28:10:72:73:5A:83:E3:8D:1F:6D:1A:6E:EF:77:D4:D9:D2:AC
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:9f:f4:c1:c7:24:79:da:24:32:93:b7:a9:79:a4:e0:80:
d7:ba:2f:8c:1a:d0:82:98:f4:95:e3:5a:5b:cd:a2:b5:19:65:
a6:bc:6c:4c:05:cb:20:04:95:f0:42:f0:51:57:1c:b1:5e:98:
c8:54:7d:fc:24:88:ac:97:5c:c7:97:0b:97:28:02:c4:af:c7:
ae:97:b6:b0:a1:4e:85:0f:1b:4f:bb:68:e4:18:d2:42:ca:83:
d1:12:c5:8f:1e:cd:3f:6c:d6:88:12:3c:fd:60:a2:0e:4b:be:
68:bd:b2:47:1c:5a:01:ba:7f:11:4f:09:af:47:da:ea:d0:3d:
8c:95:f6:f8:1c:53:11:87:73:e9:7e:d5:ff:64:32:33:c7:39:
63:0c:36:f6:69:6c:90:80:97:05:dd:ed:97:24:14:3b:d8:6d:
66:3d:79:93:ba:e1:f8:09:24:ad:f7:e2:d3:2e:5e:50:87:c4:
d8:9b:6c:78:02:82:18:d1:20:41:bb:59:b8:34:fc:dc:62:78:
62:15:f8:5b:e6:1a:22:61:b8:0b:eb:8e:7c:6b:f9:76:b0:02:
54:24:19:95:ba:68:c5:06:9c:cd:78:4c:7c:0e:cc:0e:90:57:
4f:59:c5:52:15:34:9d:dd:84:2e:7a:68:f3:01:ed:9c:e7:51:
e9:9b:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:44 2025 by rpki-client