Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: MmbBRTs1QmxMZKaTtDFgG3IRyWLAsBLySuT1KZUScjE=
Subject key identifier: AF:67:A7:86:D2:6B:D8:C0:8C:67:16:F6:75:54:DD:9E:62:B7:1E:EE
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019A71EE645E78F350F96B6B540EC1555452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0AE8
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: 9lCbfL1CqkGHD+KpQ2RFoU/NcpLt2JI6TdMMcILmKrM=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:64:5e:78:f3:50:f9:6b:6b:54:0e:c1:55:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=af67a786d26bd8c08c6716f67554dd9e62b71eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:e5:4d:e6:e2:3e:d8:1f:80:bc:72:6c:de:
8d:e1:b7:7e:94:4c:a3:ec:23:32:4d:4d:14:18:a9:
20:a4:9a:5f:08:21:71:1b:94:2e:8d:0d:db:ec:bb:
b1:de:60:48:15:75:75:e6:bd:49:f0:2c:88:a1:c2:
96:79:db:f8:78:da:a9:06:94:a1:37:ef:96:5a:db:
fb:0b:8e:12:ea:a0:c1:04:43:31:60:c3:60:7c:e7:
5b:35:59:6e:2b:6d:a6:18:2d:91:df:fd:8d:37:a6:
17:be:f0:a2:6e:e7:ac:9a:be:bd:03:8c:1f:03:11:
cd:57:65:51:c1:90:cb:06:9c:85:9d:57:4b:ad:74:
5e:ab:62:56:6b:5c:83:5a:f6:91:df:3d:14:ad:bf:
2b:44:f3:43:74:bb:62:29:a2:6c:d1:00:8a:18:d7:
ba:a8:c4:16:8a:e3:3d:d8:2a:6f:5f:8a:6c:86:84:
e7:90:cf:43:1d:c9:74:96:68:42:7d:4e:fd:d6:df:
70:93:94:cd:3a:b8:1b:38:9e:65:e7:15:0a:f3:70:
6a:03:74:96:62:08:5d:ae:a6:36:80:c9:09:63:05:
a0:0c:c6:4d:98:47:5f:48:35:30:56:b2:64:6d:39:
49:15:6f:db:e2:0a:ea:d8:69:79:05:57:c8:0b:45:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:A7:86:D2:6B:D8:C0:8C:67:16:F6:75:54:DD:9E:62:B7:1E:EE
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:31:da:eb:d3:40:e8:49:79:e8:39:16:9b:7a:4b:e9:9f:a2:
1d:33:72:2e:4b:2d:f1:5e:ec:44:b7:d8:70:94:14:20:7b:b8:
2f:5f:29:39:43:97:b0:71:22:d3:89:91:b4:26:93:58:c9:bc:
79:6b:fa:0e:aa:b9:de:58:b7:1d:03:c4:fa:a1:56:15:a2:03:
8a:ea:78:52:2a:b2:6c:cc:47:51:59:cb:64:f2:df:f6:62:f3:
2f:7a:1e:c1:bb:94:43:e2:76:2a:dd:df:11:67:76:1c:1e:89:
96:34:f1:1d:65:c8:4a:04:1f:ac:90:79:a5:43:88:5b:af:24:
fd:6b:f9:90:fb:6b:68:02:00:46:5a:5b:e2:e7:d4:1d:a4:0f:
19:28:e7:96:f5:d4:e4:e3:d7:29:98:4d:58:58:2e:a5:74:11:
27:4d:67:58:8a:c8:02:f6:3d:2a:87:9f:e7:bd:f3:7e:50:1c:
2f:90:e2:1a:3c:9b:af:18:9a:7c:e0:f2:52:de:04:50:7d:d6:
03:17:c5:66:a9:98:47:e9:c0:16:a9:14:82:ae:0f:24:bd:26:
8e:dc:2f:47:9c:23:3d:bb:83:1d:82:9f:9d:19:8f:fd:1c:6c:
fd:e6:b1:4b:f0:56:6a:4c:29:e5:c9:e1:80:f6:05:45:71:0d:
96:d4:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:50 2025 by rpki-client