Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: TYwZGYo1GwrZNUllZIAcr9p2Pdc2WBL873sylWCAVfE=
Subject key identifier: FA:27:05:3D:B0:74:DA:42:D8:82:75:E9:AB:8D:EE:C2:1B:C3:DF:A8
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019A70A52B9D9630612AA26ADBC851139567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0EF9
Signing time: Tue 11 Nov 2025 02:01:04 +0000
Manifest this update: Tue 11 Nov 2025 02:01:04 +0000
Manifest next update: Wed 12 Nov 2025 02:01:04 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: 9BqU2ShzrYOV9WSEblgdt2nY3TXwnGFk6iD6S7fM2s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:2b:9d:96:30:61:2a:a2:6a:db:c8:51:13:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Nov 11 02:01:04 2025 GMT
Not After : Nov 12 02:01:04 2025 GMT
Subject: CN=fa27053db074da42d88275e9ab8deec21bc3dfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:e3:4c:3b:08:ed:e2:64:1e:62:90:fd:5e:
81:36:68:61:31:93:0e:d2:ab:72:e8:e9:90:4a:43:
0e:29:fe:c6:63:75:a9:1b:95:58:d9:c9:ff:5f:6b:
b0:f2:67:ad:13:a8:d0:b2:1c:43:e9:f0:ab:21:5e:
91:a0:31:72:fd:91:a2:52:27:3a:ae:9a:cb:fa:da:
4a:3f:b5:f3:86:ef:c6:65:ef:25:06:92:77:fe:d7:
b9:29:15:1b:5d:bf:43:56:ae:2b:94:d9:fd:63:5b:
23:3c:55:41:59:cc:5f:f8:b0:e0:11:42:1a:e9:fd:
0d:21:80:53:71:8a:f5:de:b0:97:60:ce:d0:3d:18:
55:be:2e:50:ec:7c:98:41:5b:e5:69:ee:be:3a:1e:
7b:35:e7:29:c0:fa:1b:3b:64:3b:66:c6:6b:73:71:
67:7d:5c:11:e3:2e:da:76:1f:2e:8f:ee:d8:26:f4:
71:04:f5:7c:fb:dd:16:a6:a8:19:18:cf:e1:c4:1c:
1e:cb:2a:99:49:06:a5:be:34:99:98:63:45:54:9e:
96:9a:24:73:ab:26:dd:91:4b:6d:52:48:25:07:9a:
d3:39:0e:e1:a5:68:79:04:af:c1:42:54:25:2a:33:
a8:99:3a:83:6d:56:ec:72:ce:15:40:6a:59:29:41:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:05:3D:B0:74:DA:42:D8:82:75:E9:AB:8D:EE:C2:1B:C3:DF:A8
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:73:8b:f0:81:58:f1:05:ad:e3:e8:88:0f:94:5c:e6:66:e2:
69:4a:5d:e9:7d:e5:a3:25:75:68:9c:80:d8:9a:98:29:bf:99:
63:c7:4b:02:df:c5:99:f7:6a:8c:52:36:d2:13:b4:2b:b9:2a:
69:79:94:0a:ef:49:6a:7e:82:bc:1d:4f:6e:6b:3c:e5:83:13:
fe:1c:b1:1d:81:46:e3:e6:50:b2:06:43:38:76:ad:1c:65:cf:
b1:22:c2:e1:99:f8:b8:81:83:18:91:44:3b:d3:ad:40:40:98:
1d:48:d2:ad:49:da:17:18:6a:52:07:a9:19:53:29:c1:34:ab:
18:b3:f0:2f:1e:9f:a8:20:e9:8b:67:df:a5:be:46:3f:d3:a5:
94:29:19:c6:04:5f:26:3f:90:3d:25:5f:b1:2c:25:c4:c9:bf:
9f:68:db:8d:c6:91:c9:d1:35:2b:6a:4e:6f:61:7a:0e:7c:b3:
83:78:59:e0:4d:39:e4:ae:10:ed:62:2b:99:0e:95:8e:b2:ea:
2c:11:c2:5e:c5:ce:58:09:ae:b2:ef:63:31:50:4e:33:09:80:
9d:be:8a:f8:e3:7c:a0:dd:29:1e:6b:5d:71:1e:9d:84:24:1a:
e2:3c:c4:14:42:8a:d8:ef:9c:2f:1d:96:ca:61:a7:43:57:c8:
70:55:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client