Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: pzBlxK7xDo6iAZ9KsxDdhs/SVoD4waIpoYQzat2GC0U=
Subject key identifier: EF:7B:93:55:0B:F1:54:69:44:BC:04:3B:75:13:BE:C2:CE:73:66:A5
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019A714A299A35031748513E70C2A01891B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0E65
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: mWoxk3Nqi5O/wOevsKLrNOyuv7BWRnbCgXYZYUOAfbE=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:29:9a:35:03:17:48:51:3e:70:c2:a0:18:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=ef7b93550bf1546944bc043b7513bec2ce7366a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:79:5e:16:62:94:32:11:84:54:f4:42:a4:
b5:f4:35:4c:73:64:3c:5a:cf:af:1f:0a:56:61:ea:
10:18:4a:1e:5d:6f:5f:0a:f5:e6:68:85:8d:cf:48:
14:bc:35:1d:57:ca:dd:b2:a7:2b:f4:25:34:05:2d:
e5:24:eb:c6:61:3a:5a:d6:de:80:59:9f:5f:4a:6a:
0f:86:58:4d:e1:28:ae:c5:7b:6d:78:21:87:77:95:
22:4a:15:ba:b9:fc:3c:c1:1d:49:dc:85:9c:08:f4:
7a:90:85:0b:0c:ee:d1:89:0d:be:67:d4:d7:a1:d3:
ac:7b:43:0e:02:56:27:d9:b4:d7:00:3f:2b:34:9a:
30:7a:74:b0:ed:93:ec:a2:a1:e3:f5:66:eb:a5:f1:
ec:33:5e:49:90:61:79:e8:1e:5f:2a:10:fa:7c:6c:
cd:7a:58:05:df:15:58:74:b6:0a:56:12:a7:42:74:
80:17:c6:1a:28:c3:bc:a6:be:3f:75:30:08:f6:a1:
47:5b:8e:75:f7:e7:e8:e4:e1:0d:e2:05:4f:26:56:
50:f1:e0:9d:96:c0:bc:54:6a:a2:c2:67:ad:96:72:
90:47:3b:75:d9:50:cf:fd:c1:5d:89:b5:80:44:6e:
96:d6:95:4b:3c:27:b4:21:5b:cc:b6:35:7c:32:10:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:93:55:0B:F1:54:69:44:BC:04:3B:75:13:BE:C2:CE:73:66:A5
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:27:17:b7:ca:fb:b5:d6:4c:52:b8:63:49:30:65:c6:e8:41:
4a:4c:bb:89:07:c7:82:4a:8a:bc:49:c8:d2:31:75:5a:db:ea:
d9:b5:69:f5:40:38:10:af:7e:9f:0a:74:58:c8:e9:d3:3f:42:
87:de:3e:bb:61:62:29:a2:3d:91:1f:2d:c8:d2:13:bd:50:c8:
a1:86:1f:e6:bb:25:49:ca:21:67:33:3b:c8:ce:16:fc:2e:ba:
76:13:6b:c4:dc:33:cf:b2:d8:53:a8:58:bc:6c:ac:5d:20:b3:
99:f7:df:18:a1:91:2e:e2:e9:cf:46:81:c9:0a:75:29:fd:03:
9e:4b:6b:4b:76:8c:55:55:1e:1a:bf:34:ed:30:3d:47:c7:19:
59:f9:21:a8:ba:50:ee:28:a2:bd:61:dc:70:23:7a:df:4b:38:
8c:08:86:d7:94:65:03:b7:4b:f8:eb:d1:11:4f:3d:f3:64:2b:
d8:d7:14:ca:38:4a:3d:31:08:8f:c6:9f:e8:96:16:f9:52:39:
d0:e3:56:74:f7:d5:2e:2d:a0:27:21:74:21:71:0a:3c:4f:18:
15:e2:47:9b:02:45:9e:40:3e:ca:1c:82:1a:41:3e:46:c5:07:
01:cc:15:d6:ab:15:43:5c:75:4e:6c:2b:b0:97:12:6c:c0:b3:
84:d4:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client