Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier: 2wt2Y721nTGYEwYeBO2OOIE3l9Iv4wqBk+zBxq6jdbs=
Subject key identifier: B8:E6:BF:CC:AD:D9:AC:52:DE:D6:AB:8F:55:1A:9D:4C:A3:AA:DC:B2
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 019A71EE6B1266B76172507421E7E809206A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number: 02A4
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: hxMxN0FqTamZe7qmKWEea4XDWzYu6ptP7k16jsAL1zA=)
2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6b:12:66:b7:61:72:50:74:21:e7:e8:09:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=b8e6bfccadd9ac52ded6ab8f551a9d4ca3aadcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:5f:c8:c4:91:63:c3:82:66:6b:8b:ed:81:
f2:4a:27:ba:eb:e3:3e:3a:c5:52:02:b2:38:77:99:
a5:45:d3:cd:e7:a8:53:c3:c6:da:58:70:ca:43:95:
d0:c3:2f:58:38:0e:2f:b5:53:42:70:a9:c8:9d:f4:
13:13:c0:71:21:23:a1:73:bc:5b:37:2d:c0:d0:09:
df:fa:35:22:49:c0:6b:de:b6:cd:20:7c:4d:74:b5:
df:e0:1e:1f:02:af:e2:af:54:90:e5:51:17:64:e5:
bc:4d:ba:64:f4:40:1e:76:1e:da:bd:b5:92:f3:c8:
0d:14:01:0a:db:c2:6a:44:9e:b4:26:3e:03:e3:af:
c2:75:9e:62:b5:20:d8:64:6c:06:27:d3:98:64:57:
e6:7e:5a:40:df:34:38:c3:da:2d:c8:aa:50:7d:fd:
6f:b5:f9:66:96:28:15:65:91:67:60:8d:c8:07:cc:
65:fe:7d:5f:59:6f:09:23:04:67:35:d7:72:39:02:
c8:4b:ce:2c:ee:23:e9:19:ca:00:56:0f:ff:7a:f0:
72:4d:19:65:15:a3:ec:a3:4d:89:8e:16:a9:0d:a8:
f8:39:08:a6:01:ca:7e:bb:87:5a:4d:2a:d4:b1:a0:
55:6b:a6:85:15:c0:98:1c:15:d5:a0:58:29:fc:9f:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:BF:CC:AD:D9:AC:52:DE:D6:AB:8F:55:1A:9D:4C:A3:AA:DC:B2
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:b2:ef:66:2e:91:1a:78:a9:dd:d4:5a:b1:7c:ae:8d:ab:
40:04:28:46:5c:a9:3b:eb:5b:1e:08:a8:1f:41:53:7f:24:14:
9f:25:10:a3:55:dc:f5:da:3d:88:12:7d:d6:14:73:62:08:2b:
ec:9f:d3:b2:8f:29:85:a9:de:31:87:59:bb:18:1e:d6:2a:1e:
e8:40:d0:73:4c:c5:40:3f:a8:46:d0:44:b1:ad:bf:ba:13:14:
77:96:de:7f:68:64:61:6c:fb:6a:bf:f3:96:2a:83:1c:e2:ee:
a7:c3:dc:5d:09:5b:e1:6a:ca:03:64:90:b6:de:33:56:28:88:
12:56:5f:7b:5d:1d:08:21:77:70:dd:db:c9:4d:0f:51:c9:8e:
04:d3:7c:ca:1e:f3:f0:32:f1:40:aa:ed:0b:0e:c2:02:fb:78:
64:3d:d1:83:a0:36:4d:92:75:23:39:cc:77:b9:b3:5c:48:0d:
f0:91:13:bd:53:b3:d5:63:79:80:34:fe:db:ef:4f:5b:1c:20:
39:13:f1:95:89:07:6c:18:1c:34:85:dd:96:ec:db:82:76:04:
f8:c1:a1:2f:2f:b6:82:b8:8e:1e:89:00:0a:81:fb:6c:fb:5e:
4c:50:89:c7:5d:39:43:a9:d3:ac:58:9f:b9:e7:f9:9f:c4:74:
a1:0f:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:48 2025 by rpki-client