Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: ZC3UUeiW8Yt3nDHDhE1RjtzeZC/PDQz5QTBtl3kqC8w=
Subject key identifier: 4E:C2:D3:E6:29:36:5C:2E:50:1E:A2:77:EC:5A:17:50:FF:21:E7:A9
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 019A71B7B8E0B64E1FAF01BD437EDDFE342F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 01BD
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: HWeUbZYilqp8rblPojLHAgWRpRzANBdyyPPpaqkw2PQ=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b8:e0:b6:4e:1f:af:01:bd:43:7e:dd:fe:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=4ec2d3e629365c2e501ea277ec5a1750ff21e7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:4d:94:43:45:22:41:d1:1b:04:77:c8:bd:
37:fc:e8:98:54:f4:22:2a:65:26:d6:68:02:73:da:
c8:c4:a7:90:1c:a6:1b:c1:54:a0:d1:4b:91:79:5b:
12:e7:4d:c0:50:7a:9d:41:bd:42:c0:1f:05:8a:75:
d6:70:8a:56:02:35:d2:67:6c:90:f1:91:5c:8a:5f:
c7:51:ba:78:df:a4:4c:e3:60:38:d8:50:51:2e:02:
fb:69:4c:32:11:03:b6:b7:9e:2e:04:3d:57:00:c5:
fe:9f:37:53:c6:a6:49:ef:c6:82:78:d4:c2:0c:f9:
d2:19:3e:40:51:5f:e5:bd:ba:ab:12:ec:fc:77:eb:
87:09:89:1f:6b:3d:6e:1f:ee:71:d7:4c:a9:02:bf:
23:73:a6:a7:c1:1c:3a:2d:e0:0f:55:89:6d:02:26:
50:2c:48:d4:84:10:9b:e4:73:91:0c:42:60:43:71:
fe:cb:b8:01:90:c1:20:b9:a2:a6:5a:1b:b9:39:46:
20:ed:84:54:8b:1d:e3:a7:34:1a:85:99:20:7d:f6:
19:a7:6e:c6:66:74:b6:1b:d2:ba:a8:60:57:ad:a0:
da:9b:20:f9:3e:d0:1d:58:af:2b:10:bb:a0:47:77:
a7:af:d9:9e:01:69:f4:45:f7:02:b7:7b:b8:69:95:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:D3:E6:29:36:5C:2E:50:1E:A2:77:EC:5A:17:50:FF:21:E7:A9
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:47:ba:62:00:51:21:08:19:ce:64:4f:11:dd:f6:05:ce:
31:90:78:32:84:be:15:c4:ac:f3:0e:e0:7a:19:b9:ad:78:03:
37:a1:44:ac:8b:96:24:fb:ea:b7:81:ca:7b:67:21:24:10:c8:
38:f4:54:84:80:e4:27:da:43:74:98:bb:16:d6:2e:b0:e1:e6:
ef:b1:89:09:42:65:f6:63:29:77:66:38:11:5a:78:90:80:e4:
ec:46:78:f3:53:9f:6e:24:f7:03:73:d1:fa:6c:2f:5b:b7:97:
ec:39:e8:fa:0b:9d:8a:bc:22:a1:ff:c9:cd:1b:03:b1:20:35:
1c:af:82:f2:b9:53:cd:1f:69:b3:62:24:cc:01:68:a7:dd:4a:
30:4b:3a:ae:d5:c3:fd:7a:69:69:cd:30:a2:c6:f2:6e:4e:18:
e1:81:79:f9:07:d6:a6:57:d5:5b:29:28:58:4f:51:2b:2e:c6:
4f:42:8f:30:16:e5:de:00:33:84:5c:0c:80:a2:65:39:9e:b0:
32:d8:75:7a:3a:8a:70:44:8e:03:a9:56:57:b5:54:12:ff:38:
15:a4:0b:29:14:13:0d:ba:d9:e4:6b:7a:c7:2d:21:9c:54:91:
69:f9:8c:35:13:d3:8a:c8:3b:0b:ef:19:5c:6b:cb:13:d8:88:
a4:c6:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:15 2025 by rpki-client