Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: pP6XFKbhzvQdyuVvlTg+tQCK7GnwCut2LS+0bh7g/aE=
Subject key identifier: 9F:52:77:90:91:B0:3D:B3:9F:81:EA:E0:37:95:74:AD:7B:3D:2A:8C
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 019A70DC2161C0F90C6ABAC489AA87B089CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 8C
Signing time: Tue 11 Nov 2025 03:01:05 +0000
Manifest this update: Tue 11 Nov 2025 03:01:05 +0000
Manifest next update: Wed 12 Nov 2025 03:01:05 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: Jt2NTjnO36wf/Yj2nIlDIIsXOBMXiqAdYQzdXz+XMyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:21:61:c0:f9:0c:6a:ba:c4:89:aa:87:b0:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Nov 11 03:01:05 2025 GMT
Not After : Nov 12 03:01:05 2025 GMT
Subject: CN=9f52779091b03db39f81eae0379574ad7b3d2a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:bc:4d:c5:66:0f:15:c7:e1:c4:02:32:15:
48:16:2b:72:a3:ba:46:4b:cb:ae:d2:da:61:83:fb:
26:60:af:11:e4:07:9a:e5:d4:34:6a:15:5e:eb:b8:
67:86:f4:dd:1f:34:10:12:58:5a:f8:c7:44:a2:83:
1f:d7:6a:5a:60:f6:b8:e8:81:22:54:48:94:5a:6c:
fb:07:12:5d:ba:aa:c2:06:8b:fe:25:69:d7:63:d9:
63:b4:83:8c:05:64:a6:c3:a0:86:24:9b:a8:c9:c5:
24:c2:67:e0:f1:a5:87:58:b7:3b:c4:07:02:2e:f3:
46:64:79:6f:a2:0d:92:76:f1:23:a6:38:e4:49:fc:
1f:b1:c2:36:d9:47:27:12:4c:c3:35:85:42:80:e9:
94:1b:65:c8:9f:06:de:6e:c0:90:33:8d:4b:c1:d5:
ef:85:79:42:29:55:c3:7c:f9:8d:53:7b:dc:28:da:
7c:76:83:19:52:41:c3:20:34:76:67:ae:fe:4f:8f:
b5:5c:a2:52:b9:d3:77:f2:5a:fb:5f:9e:5f:fd:dc:
d8:cb:2f:a3:f2:37:20:53:6c:2b:8a:f8:b0:8f:8f:
80:3c:e1:49:ce:86:cb:d5:6a:45:b8:3e:12:c0:e5:
80:92:b8:9f:ac:3b:7f:f2:7d:7f:1a:e3:e2:02:da:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:77:90:91:B0:3D:B3:9F:81:EA:E0:37:95:74:AD:7B:3D:2A:8C
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4e:fc:9a:c6:19:80:c6:ac:84:b3:ef:80:96:58:cb:ea:97:
58:ea:b7:2c:dc:4b:70:8c:59:d3:84:0c:2a:36:7a:cf:11:5b:
76:f6:46:9a:c3:70:c1:b8:29:af:72:6b:95:fa:9e:b9:09:a5:
c0:4b:5f:65:48:2f:ec:3d:8b:32:66:b5:0f:b3:cc:92:31:42:
42:0c:93:dd:97:1f:9a:ff:d2:4f:5e:6b:a2:f0:8a:e3:88:cb:
bb:b4:47:68:4e:9b:1d:29:85:55:c6:02:c2:41:9f:de:78:b8:
7d:f2:20:27:03:39:e3:ca:cb:00:ff:2e:ca:76:26:cd:81:ce:
35:44:c9:41:13:2c:45:82:24:ba:88:56:40:85:8f:99:f5:73:
5e:a7:b2:35:2a:63:30:24:08:6a:65:3a:12:da:02:9f:76:ae:
ed:b2:70:51:d2:b5:42:b6:2b:7c:af:ea:76:c9:20:8b:5b:48:
60:1b:f8:99:3b:ac:68:23:84:a9:f2:0a:43:56:29:e5:7e:86:
cd:af:fa:87:f7:37:78:e3:a0:e8:86:d2:df:d4:ec:57:03:25:
3e:c6:94:4e:84:b8:ce:d1:aa:d4:dd:b6:9a:97:57:83:53:8c:
14:60:21:8c:5c:e5:a5:50:9c:ab:b1:d1:5e:a3:e9:21:6f:50:
21:f7:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client