Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: 9POnSVwpAOCUUukLWVjWvfc6DIRQgYUv8ZhToSKzW34=
Subject key identifier: 1B:29:91:8C:E2:5B:2A:64:46:2A:02:DA:FF:B1:FB:7D:51:B2:50:ED
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 019A71B7C36D4323AC8FA745DF5FF12338C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 15B6
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: /c0XjiJ+x8x7XKewQf6MwdkIi3XQ20xYQdxdSURWE9Q=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c3:6d:43:23:ac:8f:a7:45:df:5f:f1:23:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=1b29918ce25b2a64462a02daffb1fb7d51b250ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:fa:72:67:45:00:09:12:ad:ce:0f:98:ed:
a3:ee:ce:5e:4c:6c:81:85:cb:7e:fa:f1:d5:40:da:
85:dc:51:30:b2:44:a0:a1:e4:bd:1e:ab:eb:87:3b:
0b:5d:90:df:78:2c:b2:fa:99:20:2f:6b:02:7c:05:
74:d3:6a:c6:53:e0:fd:3c:f8:d4:7e:38:d0:a3:4a:
3d:c7:a6:ef:4d:36:18:db:af:0d:b7:6a:5a:5c:7d:
74:ce:bd:a3:69:69:d7:5f:a4:4c:e4:2c:93:1d:75:
4f:48:27:cd:29:4b:78:8a:be:47:6c:0a:f1:d1:4b:
28:6b:db:16:77:f6:b9:87:93:a2:f7:fb:ea:a5:fa:
ff:3e:23:41:29:85:81:56:a1:5e:fd:d9:2b:ea:8a:
0b:08:74:f4:ce:08:2d:73:29:d2:fa:92:77:28:6c:
cc:fa:9d:22:66:b4:e5:bf:98:9b:7c:4f:41:5b:5e:
2e:03:68:2c:fa:58:81:c8:db:f7:b2:57:47:58:ec:
af:dc:fa:cc:6b:d2:2b:ac:50:9f:0f:50:47:17:29:
7b:56:c2:a2:03:e7:a7:87:20:4b:d8:b1:db:0b:3f:
72:45:b5:cd:bb:76:7a:f8:a9:e3:65:07:81:b7:5a:
ee:96:87:23:f8:df:b2:20:80:97:57:8b:ad:fd:d4:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:91:8C:E2:5B:2A:64:46:2A:02:DA:FF:B1:FB:7D:51:B2:50:ED
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:55:43:f0:72:e6:17:36:0a:e8:06:75:6e:dd:46:d7:ff:
9d:a7:e9:83:87:92:7c:df:93:ce:97:f4:d6:6f:da:5d:6b:39:
64:65:a0:d3:62:21:79:f6:46:1c:6d:05:7d:e0:d9:8a:2b:f5:
ef:39:96:9b:81:c5:63:d9:21:ae:82:aa:2e:49:73:70:01:a9:
45:68:0d:80:a3:ae:d4:02:c8:02:50:07:be:c9:65:49:a9:a9:
15:ad:1a:d7:61:bc:3b:80:21:04:ba:c5:8d:52:35:8d:8e:ee:
92:7b:07:20:bc:01:1a:16:32:59:5e:26:38:17:56:d5:be:ac:
70:2d:05:be:e4:fc:00:83:a8:f4:89:6b:c9:43:b9:2c:66:e2:
4f:a1:48:f0:37:7d:28:a5:b7:60:ea:e6:2b:6e:41:f3:c8:98:
85:29:06:61:cd:7f:8e:90:60:8e:0b:8e:91:54:84:e9:f9:2e:
3e:aa:97:8f:86:37:f7:e8:18:e2:8f:65:97:7d:53:ff:5f:43:
9b:e0:b8:78:d7:9c:39:09:30:78:9f:8b:9b:47:53:68:9e:60:
7e:54:51:ca:cb:f6:d4:7c:70:35:0b:ba:56:27:50:56:ff:86:
2f:87:63:b1:5b:f2:43:7d:c3:a5:47:90:29:88:0f:2a:ba:b8:
19:0f:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:10 2025 by rpki-client