Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: Cnwjy9mhEbV49TlC6XpzteQ5Q8r0U8hLV0F4zrGRmwY=
Subject key identifier: A0:0E:DD:BE:1C:54:CA:CC:78:FF:23:28:66:57:98:4B:6B:3A:A2:91
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019A71EEDFD859D1FDCCE51B19256029D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0953
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: SAcjii0UG+i4nls1o0tfVCC2znsUSE2UC5BxAxQ5CZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:df:d8:59:d1:fd:cc:e5:1b:19:25:60:29:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=a00eddbe1c54cacc78ff23286657984b6b3aa291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:74:6e:94:96:f5:25:a6:50:92:31:8f:06:
c3:35:e1:6b:1f:e7:8e:21:d9:30:01:61:99:20:66:
5a:16:ec:37:13:f2:71:79:35:15:ee:75:3f:f3:e6:
bd:e4:a6:de:7b:b0:14:ad:a7:55:20:9e:da:cc:4d:
9c:83:8d:47:79:e5:de:a5:f6:7a:f9:dd:66:c3:ba:
aa:69:6f:f4:82:22:18:a2:dd:b2:c6:76:44:fa:b1:
29:23:90:2f:5b:c1:a2:b3:4f:cc:6e:f7:2b:7e:46:
6a:30:39:9b:d1:1e:b0:d5:78:00:83:66:72:49:b3:
f7:4a:43:1a:f9:42:1a:a1:61:98:20:29:74:78:7c:
83:13:71:6e:82:eb:a8:b5:b2:d7:59:e1:a7:cb:50:
56:64:ca:0e:36:34:f3:5c:99:b5:0a:28:44:91:4b:
34:fc:d1:1f:08:4b:f5:b9:55:8c:7c:1f:c8:10:14:
67:8c:37:09:81:57:26:27:8e:2d:66:8f:ff:4d:3f:
4f:14:22:72:c0:e0:76:26:03:e5:aa:18:b8:62:bb:
12:32:90:3e:05:78:da:b8:b1:21:76:e7:35:22:bc:
9d:be:32:47:51:ad:cc:d7:35:dc:02:0d:08:78:24:
ca:e0:64:6a:ae:63:5a:8e:a0:50:17:8a:ee:ff:30:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:DD:BE:1C:54:CA:CC:78:FF:23:28:66:57:98:4B:6B:3A:A2:91
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:e5:25:d3:1e:78:5c:6e:04:35:6d:d6:97:87:c2:41:43:
d8:1c:d2:ab:d5:58:ef:d1:e4:4f:63:6c:af:a5:12:98:30:79:
bb:a3:1a:f3:35:28:4d:64:a5:07:39:b5:94:c0:38:65:63:09:
fe:94:42:3b:57:e1:2f:34:c3:25:fc:9c:51:c8:75:7c:9d:4e:
59:19:33:c8:54:d4:0b:bc:97:0f:9d:57:a7:58:df:f9:da:f3:
c2:aa:87:fb:d2:27:ab:72:c7:06:55:ff:d7:bb:4c:88:f8:0f:
5f:7b:f2:50:a2:92:47:13:48:06:ef:00:c3:60:cc:97:00:32:
a3:cf:51:9b:1b:5a:7c:10:9b:ea:c0:31:97:fb:a9:f9:98:86:
2c:63:03:5f:a7:cb:9f:55:32:59:c6:84:fa:0b:bf:e4:65:5b:
0e:e8:f0:1b:76:88:ef:87:12:d6:59:46:4d:7d:4a:e4:c6:51:
33:a6:4c:06:e1:a7:5e:51:5e:3e:50:9b:b3:93:48:27:41:25:
07:ce:9c:b7:fd:54:5b:93:db:ac:eb:d5:42:01:ef:1d:9e:4c:
f9:38:69:a8:87:e0:50:7e:75:55:7c:3a:df:64:c0:93:88:dc:
8f:b7:8f:41:90:5f:7f:26:1c:92:6e:07:c7:7b:a8:7b:e2:51:
8f:3f:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:56 2025 by rpki-client