Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: eq56cBd4X2wxUQb1FkvOg41x1jUd5j/owDThh0ACoYc=
Subject key identifier: E5:50:B2:88:AB:C3:75:C5:61:3B:65:35:E1:05:EA:A1:3F:7C:02:FE
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 019A19F42F4721DB507FEBCFD2D1308458B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 114F
Signing time: Sat 25 Oct 2025 06:00:24 +0000
Manifest this update: Sat 25 Oct 2025 06:00:24 +0000
Manifest next update: Sun 26 Oct 2025 06:00:24 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: TC24R0F92MiJKqTQwhpladCPQcGNrq41F4+DILH8Qd4=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:2f:47:21:db:50:7f:eb:cf:d2:d1:30:84:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Oct 25 06:00:24 2025 GMT
Not After : Oct 26 06:00:24 2025 GMT
Subject: CN=e550b288abc375c5613b6535e105eaa13f7c02fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:68:a4:7a:fa:24:18:8e:ea:00:46:6c:48:
70:6e:a5:b7:20:50:4b:26:0e:ad:cc:21:fd:5a:63:
ea:81:da:89:7d:ee:ab:77:33:32:b5:7a:eb:a1:e9:
97:22:41:5e:ee:31:72:4d:bb:47:db:f1:23:08:c1:
ff:ee:64:f2:01:07:b5:8c:1d:8c:d3:17:61:16:09:
e1:c9:eb:43:1f:af:80:9d:94:bd:ef:78:d8:2e:c8:
a8:33:b8:9e:8e:fa:c4:c0:60:96:6e:c3:ed:2d:20:
96:1b:c9:75:b9:3b:5b:ac:b0:34:98:8b:87:30:af:
f5:43:50:cc:29:82:e1:ed:fb:13:b5:96:36:c9:67:
6b:29:e1:e0:2d:87:c9:8d:32:e6:63:12:f7:8b:61:
eb:be:78:0a:5a:12:cc:89:ea:69:f0:3f:f5:51:5d:
87:47:2f:c7:7c:04:a7:91:5c:42:bd:86:b9:bc:53:
db:f7:0d:85:94:23:7b:46:5a:99:7a:60:8e:d0:f7:
d8:5a:57:44:ff:c0:41:3c:b6:da:e7:1c:26:66:0c:
e1:3d:a8:a8:f7:a9:b1:7d:b7:fe:cf:52:5c:2c:bd:
89:61:dc:46:8d:89:fc:ae:fe:92:cf:53:e3:fc:a2:
30:c0:a7:c0:d7:1c:ce:2c:6b:ea:31:6f:2d:96:1b:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:B2:88:AB:C3:75:C5:61:3B:65:35:E1:05:EA:A1:3F:7C:02:FE
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:bb:57:c5:2a:86:8d:83:9a:83:69:e7:4a:b6:eb:4a:3c:
32:5b:61:58:d7:8c:c8:04:44:25:8a:45:c0:5a:e6:35:ae:94:
d1:f0:26:11:a8:90:2e:4e:88:a2:09:4e:be:9f:84:ad:39:05:
5a:ce:3a:67:82:30:1b:c4:80:0f:a1:b7:be:07:ae:82:f0:07:
d8:bd:56:81:7f:04:07:72:9e:ac:40:a2:48:d5:58:e6:2a:cb:
00:3a:cf:3b:49:11:27:d1:8c:42:df:95:6e:e9:90:97:18:39:
f6:6b:26:32:1e:fc:d7:8a:65:e4:8c:46:61:4b:4e:fc:dd:ea:
4b:cc:64:d9:b5:22:7e:bb:ab:1f:ce:08:d2:e6:5d:ab:04:ae:
60:c1:fe:04:c8:b5:28:f1:dd:1c:cf:02:ae:f8:1a:e9:cd:61:
64:e2:c8:65:a7:6e:e6:78:82:ff:a7:1b:8c:de:42:1d:91:51:
ed:66:5d:d0:1c:36:7f:65:f4:92:aa:78:b4:2d:09:fa:6c:bb:
b9:30:64:b3:62:cd:eb:3c:ec:4f:45:a3:10:bc:53:53:5d:26:
dd:71:ff:8a:c5:2c:c0:7a:25:bc:15:3b:73:41:63:a8:fd:bb:
2c:fd:ea:49:90:6a:6d:35:8f:1c:f7:75:61:00:ff:20:65:fc:
a8:76:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:35:34 2025 by rpki-client