Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: ebG4aZ5CVM7WlqJ/yvxtZBvQKkdsP9FUhnA+zOVvaL8=
Subject key identifier: CE:F2:A8:C4:6A:35:8E:68:19:5A:10:51:2E:2A:64:6B:88:48:E9:07
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019A71B83366D77248D868D7D83E99E53D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 150F
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: uxWZJSzuKwZwnOwJfyTOGYwm70ACquxQV/nztzVLnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:66:d7:72:48:d8:68:d7:d8:3e:99:e5:3d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=cef2a8c46a358e68195a10512e2a646b8848e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:dc:8b:28:17:9d:83:7f:8e:d7:e5:6b:d1:
34:b7:fa:eb:b1:8c:eb:0b:68:8f:2b:66:c6:d2:36:
d1:4b:2e:b6:a3:b1:37:e3:4f:8b:bb:61:41:6b:48:
b6:0b:54:79:9b:be:63:92:01:55:47:5c:0d:0b:b5:
fd:d7:30:12:a7:5d:8b:de:d8:ad:5d:97:19:20:6f:
8e:7b:ee:3f:d5:4d:6e:6c:1a:a4:40:f3:5e:a4:36:
be:b0:29:22:22:d3:bd:16:7f:3f:4d:43:96:77:3b:
71:ee:f3:91:2b:b0:f1:45:a0:d8:43:4d:4a:2d:1d:
d6:15:a5:71:a3:f5:21:d3:88:17:7b:cd:6b:98:c2:
64:5a:f5:15:a2:bc:d3:ab:13:a5:d9:24:41:a3:19:
bf:ce:f2:54:37:c5:b2:94:ca:49:fd:d1:55:81:30:
3b:c3:de:b4:77:9e:e2:c8:ab:5e:15:c8:93:ec:22:
c9:64:3e:27:39:c8:89:24:8b:a0:99:6b:27:6d:f5:
6e:43:27:de:ef:07:4f:4b:26:8c:81:a4:e3:79:51:
1d:66:94:56:c8:97:ae:00:20:75:be:d9:91:65:68:
3f:06:44:59:39:9f:ef:22:15:d7:7b:e6:28:a2:27:
68:c7:1b:68:2f:63:60:ec:ab:99:be:de:ea:04:f5:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F2:A8:C4:6A:35:8E:68:19:5A:10:51:2E:2A:64:6B:88:48:E9:07
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cf:fc:0e:ac:4f:71:7a:6e:a6:88:da:46:be:e0:42:f1:80:
7d:1e:ee:69:5b:e9:01:01:9a:66:b7:65:82:3f:82:7f:db:78:
a5:b0:2a:97:34:69:a6:30:9f:32:a2:55:0b:c9:50:82:51:1a:
dd:62:8e:ee:59:83:ce:f7:23:4c:c4:15:1b:17:29:97:02:ae:
b9:e0:fa:68:c7:ea:e9:6b:0e:92:59:9b:4a:b3:7f:fd:98:87:
3a:dd:bd:47:51:8f:74:41:4d:b5:19:76:ef:32:ce:be:75:9f:
d1:2f:7f:9c:c7:d8:25:c4:ac:39:20:14:a2:f8:48:6d:7e:81:
66:80:65:0c:be:0c:1d:45:83:10:9c:ee:73:1e:80:7a:31:f0:
55:7b:37:fe:c0:f1:38:f2:40:c1:03:2c:f4:0b:c6:32:dd:2b:
3f:b7:d3:8c:6c:c7:23:21:6e:eb:86:e6:a2:61:c7:01:22:ac:
1f:ee:0c:e6:90:01:20:fe:f5:28:c4:eb:3e:84:f5:8f:2f:d8:
90:a5:f7:9c:66:43:1f:47:2f:a6:63:ec:2b:f8:4c:e6:b5:4b:
47:f3:ff:dc:8d:68:0e:30:1e:de:9a:79:55:24:23:97:8b:54:
90:5f:27:17:28:34:73:e6:cb:0d:8e:2a:92:e5:f7:74:e8:8e:
36:7a:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client