Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: 9+xYbCHaV5TS8AmQ7yKCsZR2cJBisqo2fQatFiE354g=
Subject key identifier: 62:B1:1F:1E:1C:08:B4:1E:C7:32:BE:6E:35:09:84:7B:33:2A:60:D7
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019A70DBE50402D4AD8F40DFFD910E1825AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 063A
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: 39MjVmM9uDdZU7wqx/OfivzGaGOfmLagf/gwCWetODY=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e5:04:02:d4:ad:8f:40:df:fd:91:0e:18:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=62b11f1e1c08b41ec732be6e3509847b332a60d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:b3:fa:de:37:7c:ff:17:4a:f9:49:48:1c:
d5:89:8f:25:50:9b:d6:87:d2:02:b1:b6:4f:d0:c8:
51:8b:85:f8:fe:3e:5e:16:ce:20:02:5c:e1:ff:d7:
d5:81:10:dc:dc:6d:5b:e5:8d:57:a1:cf:c5:79:d0:
70:0b:1d:de:1c:d1:f5:01:e2:9e:65:c8:5d:8e:d8:
4d:5a:47:fe:2b:2c:26:d8:c5:1a:68:17:b4:25:a3:
11:f2:72:e6:15:d1:46:45:30:4c:13:13:cf:64:4f:
d5:b1:a5:12:4e:f7:e9:c5:9c:3f:5a:d5:6c:0f:db:
58:28:26:39:4b:91:5a:1d:d8:28:30:1f:e6:71:d5:
68:3a:2b:dc:b9:90:b8:d5:c4:ac:ed:88:09:6a:9b:
19:a0:f0:12:7e:71:e5:2e:a3:73:95:42:98:48:ad:
e6:64:43:ca:85:43:52:ad:ac:59:b6:3c:4d:23:48:
68:b2:aa:50:7d:77:cc:91:8f:a2:1b:a5:61:e0:ff:
5c:ad:81:17:c8:40:29:ff:cf:01:7d:7d:74:7d:8c:
cc:c8:ca:78:a1:f2:3b:c4:c9:b3:46:b8:8e:6f:53:
bc:ad:f5:2b:49:3b:10:00:0c:a8:66:c5:cf:bc:41:
35:10:27:c8:6d:ac:65:03:e7:60:3a:b3:b6:fb:7f:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:1F:1E:1C:08:B4:1E:C7:32:BE:6E:35:09:84:7B:33:2A:60:D7
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:21:e7:72:1c:0d:21:a5:3f:61:fc:cf:a1:ca:fd:a1:79:32:
56:1d:17:d5:c1:d2:30:e4:c9:64:49:ab:f6:0b:34:e5:be:cc:
6c:a4:9d:ef:a0:c8:c2:d2:ee:56:41:ed:82:6a:3e:6a:84:5e:
05:39:59:3a:6e:fd:eb:04:52:63:08:e4:0b:da:18:1c:fc:12:
d4:b9:0b:db:6d:7f:80:b8:e7:1f:c7:40:aa:fc:58:b6:f6:45:
f4:54:d0:05:9d:cf:8e:b9:29:26:2e:c4:c7:29:5d:e3:08:30:
3e:62:6f:a3:4f:d9:fb:08:93:e7:74:3b:ca:a0:95:71:ee:da:
b5:93:37:3a:bb:7a:60:8f:c3:28:40:5d:4d:94:1a:45:76:58:
a4:2f:b6:da:76:48:d6:d6:d4:76:71:ed:22:5c:9e:a3:1a:c9:
a8:46:a2:2a:f0:d1:5a:5b:75:b1:23:77:fc:72:b3:36:33:04:
e7:3a:71:85:73:33:67:40:b5:fa:c1:59:64:0a:e6:d8:ce:3b:
3b:ed:ae:07:82:48:90:7d:62:dc:24:d5:42:a2:0d:d8:a8:27:
01:41:4b:83:51:c3:d7:03:e0:34:dc:e7:30:84:7e:ca:df:dc:
96:6e:01:78:b5:a7:6d:b2:75:7b:9b:e2:0e:25:92:8d:78:09:
fb:f7:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client