Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: kVPNDYHi/Q+314SccUJ8kqMhBB8DtD7VsYbUiOvovxM=
Subject key identifier: AC:69:7F:97:AC:E5:D1:D6:42:B6:95:BB:0B:40:0E:32:A1:3A:6A:F0
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 019A70A59B92D49166E571A0C2C4ADFD94C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 0307
Signing time: Tue 11 Nov 2025 02:01:32 +0000
Manifest this update: Tue 11 Nov 2025 02:01:32 +0000
Manifest next update: Wed 12 Nov 2025 02:01:32 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: hLNVXP16li/Gcira5nvRgkrUo1XTt+6TBcuqPpn4uHE=)
2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:9b:92:d4:91:66:e5:71:a0:c2:c4:ad:fd:94:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Nov 11 02:01:32 2025 GMT
Not After : Nov 12 02:01:32 2025 GMT
Subject: CN=ac697f97ace5d1d642b695bb0b400e32a13a6af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:79:67:60:73:3a:4d:85:2a:84:4d:d4:f4:
e6:3f:9e:ce:d2:cf:31:cd:f9:83:6f:bb:e3:83:af:
6b:11:4f:a3:f4:d9:26:67:6f:62:d7:ea:33:20:48:
5f:c2:22:5b:ab:52:97:17:03:81:2f:ad:34:cd:fd:
42:12:30:aa:b8:cd:f5:11:ff:59:20:a2:2c:fb:9e:
44:98:d0:48:76:09:eb:74:ec:76:5d:44:e8:bd:9e:
8c:75:50:f0:c4:a7:8b:90:47:0f:f1:66:cd:94:11:
32:be:7c:2f:63:4f:a1:36:4b:dd:d4:69:f8:48:32:
d3:58:4e:01:12:2a:4f:09:7c:de:39:2a:06:5e:06:
2e:d7:91:2d:ec:01:92:6c:96:42:f0:f7:2c:86:21:
16:45:7d:da:2d:d4:6b:d1:35:31:b3:82:1d:64:92:
6c:96:0e:8e:c3:fd:23:f2:e3:98:65:3a:66:9d:92:
be:f8:1e:23:ef:5c:19:d5:25:db:50:2d:82:18:76:
2d:e8:0c:e0:52:7b:c0:5b:60:de:a3:ab:59:25:67:
e4:1c:39:d0:af:ec:39:ac:a5:0e:76:2b:f9:b1:8f:
b9:ef:67:bc:d2:18:a1:6e:3c:2c:b6:61:39:ad:58:
b0:f4:44:90:dd:4a:01:97:10:55:23:6a:e5:8f:f4:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:7F:97:AC:E5:D1:D6:42:B6:95:BB:0B:40:0E:32:A1:3A:6A:F0
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e6:54:e4:91:22:69:8a:5f:f0:d5:4c:89:95:ab:fc:07:3a:
a7:3f:ad:96:b9:4f:74:8f:7f:eb:a6:9c:d1:6a:79:4c:18:c8:
25:df:e2:8c:d6:f7:51:ca:90:e9:27:d7:67:10:68:ab:a9:e0:
6c:ec:90:4b:d7:56:ef:22:c0:cf:07:be:8a:c3:4f:47:94:5e:
98:e9:e7:06:2a:5e:17:aa:59:e9:4c:26:51:8a:c4:0f:65:19:
a7:f2:7b:4b:1c:c0:d0:ef:4d:0d:b8:57:a6:41:bc:80:17:a2:
2d:79:f8:be:36:8e:0e:03:45:f0:2c:15:dd:e0:c2:f3:7b:c9:
04:cd:e5:99:56:c5:81:aa:e4:d1:93:07:25:63:91:52:0a:c8:
b7:99:db:ee:68:84:ce:54:ec:2b:35:9d:b8:d4:e7:8a:94:b0:
1d:87:d7:9f:06:7b:de:02:50:45:80:e9:66:a6:49:93:a7:5b:
45:5d:b9:4f:bf:1f:cc:7c:33:be:7c:90:a4:30:46:8e:e4:5d:
8e:53:48:14:b5:51:d5:4e:27:85:82:56:44:cd:c0:b3:88:e1:
dd:2d:16:2f:db:60:c7:93:0a:51:43:21:29:dd:a8:3e:e7:40:
23:f6:86:3b:39:40:f2:b8:9d:2b:ed:6b:48:ba:1c:98:aa:86:
82:e9:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client