Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: /qhfNDEn88w46z6Pr1qFHxM2B1QRqAAK90DEw9X4L3c=
Subject key identifier: 33:B9:73:26:18:52:5C:6D:A6:13:FD:FF:BC:FF:89:E0:30:F6:A5:80
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019A7293C1D9CBFED476E0BD993FCE96066F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0CFE
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: uk/FRJAjC+HiMbMAIwDEToZp9WLUzou+FZ7leXW+vBI=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c1:d9:cb:fe:d4:76:e0:bd:99:3f:ce:96:06:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=33b9732618525c6da613fdffbcff89e030f6a580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:9b:12:b9:fb:90:4d:66:d6:af:bf:81:40:
c8:c7:85:0a:7a:a0:a4:4a:02:be:6f:87:92:12:8b:
e9:5a:ce:40:b9:34:f2:1d:4e:91:a1:ae:9c:8c:aa:
4b:8f:c5:1f:35:2a:1b:90:65:ed:68:c5:9b:ae:22:
08:6e:06:fe:48:f2:62:1a:f6:53:c9:0e:f9:8c:05:
6e:6d:d3:61:b0:c8:cd:ca:ff:7e:20:07:65:d0:2e:
a3:91:c1:c4:8a:5c:f4:90:7e:6a:60:5f:af:4f:04:
41:bc:15:1a:47:57:08:23:9b:4a:ec:aa:27:b9:a9:
71:be:9c:ad:28:9b:d4:fc:2f:10:c9:1c:8c:0b:4f:
c6:fd:1c:a3:91:d2:da:c3:72:8f:04:51:e3:83:72:
8b:73:22:0f:42:48:a3:95:df:9c:17:3f:25:92:da:
9f:a4:1c:2d:1a:b9:6d:27:64:b9:92:2c:3f:e7:c0:
b7:26:87:04:08:0b:af:19:88:57:bc:ba:05:c6:ec:
60:c9:be:b1:b7:7c:72:7d:9d:5b:d3:44:4b:a8:6e:
c1:65:0f:a3:94:cc:03:2c:81:39:dd:c4:79:d0:77:
50:10:ba:c2:72:54:c1:57:dc:3b:39:c8:b2:0a:ab:
85:ff:e1:10:de:98:be:28:87:c2:b6:84:0a:94:bf:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B9:73:26:18:52:5C:6D:A6:13:FD:FF:BC:FF:89:E0:30:F6:A5:80
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:a5:e9:12:d1:bb:dc:8d:f9:d1:2f:6b:a0:07:45:b5:74:
3d:a4:c1:b1:e6:fe:b3:54:a6:4c:de:57:72:00:af:6d:4a:bd:
b1:c3:6c:ff:53:4c:12:9f:04:d9:85:c3:fd:22:b7:bb:a7:73:
06:03:d3:c5:51:96:01:e9:08:11:71:ba:7c:61:67:c7:31:b5:
1f:63:2a:0b:7a:82:84:01:05:dd:19:a0:fe:49:df:9c:41:16:
36:6c:51:5a:b4:1c:ca:62:b8:fa:22:e3:1d:7a:7a:ff:90:e0:
fb:b1:14:e4:17:ff:20:3a:04:0a:2b:7b:8e:6a:6f:9c:ac:52:
01:98:e5:2f:0e:d7:ff:96:f6:84:5b:1a:3f:16:6f:ca:74:36:
7c:c6:37:bd:c3:50:75:db:84:78:6b:ff:b5:d1:c6:a9:20:b5:
d1:cd:c8:dc:09:32:38:fb:6d:0d:c2:e6:d2:3e:cd:a5:cd:f0:
b0:fa:92:6f:05:59:e2:d9:a3:cf:fb:3a:da:96:d3:b0:f1:6a:
72:03:17:5d:c3:5b:1a:a5:6a:67:ce:c6:0c:c2:d5:c2:61:6f:
33:fa:cd:db:54:ec:be:88:1b:e5:75:55:21:18:3c:5f:1b:c8:
01:85:28:7c:41:0f:d8:58:e6:2f:b2:22:65:c8:1d:09:09:61:
6a:39:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:33 2025 by rpki-client