Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File: 2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier: tWpVwDejifizzI1/12QSCMo/C+1/ku26W1hTH9edSmM=
Subject key identifier: A6:73:3A:FA:F2:29:C1:8A:5A:02:A0:66:0F:83:53:29:51:43:EB:97
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer: /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial: 019A71131C8F9DBBA6DC4E83F597080D6AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number: 08B4
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: vNtTWhH6PqORgnZLXPNEeb3Fjh6clV5yRgd6qWdThGc=)
2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1c:8f:9d:bb:a6:dc:4e:83:f5:97:08:0d:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=a6733afaf229c18a5a02a0660f8353295143eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:cf:17:4f:ab:8b:0f:e0:03:5b:36:e6:59:
ef:da:7e:0d:8f:de:1d:f8:4d:02:de:0d:b9:4c:6e:
d8:80:d8:5e:40:93:38:21:04:9e:da:d1:f1:b7:c1:
76:11:b7:3f:52:f1:48:a5:ad:fa:23:74:37:a7:14:
d8:84:af:ef:91:53:81:8b:af:71:d3:e4:2e:74:02:
7b:d1:97:8f:b3:a3:5e:7d:45:5f:5e:5a:37:fb:9f:
6b:1e:bc:9d:db:e9:5f:ad:1d:c7:31:d4:d3:cb:f6:
59:6e:16:f7:db:79:80:d9:45:4e:a8:fd:11:29:06:
02:00:72:88:4b:d4:5b:70:66:4c:02:21:00:b9:c5:
44:9e:de:46:39:35:60:d6:15:36:3d:f7:b6:8e:a9:
09:22:ca:18:98:86:58:60:1f:9a:9b:3c:92:27:d0:
71:36:23:10:b0:3c:d0:f4:29:97:af:22:6a:35:fc:
21:3a:61:4e:f3:13:d7:71:5f:01:ee:94:c6:a3:b4:
77:59:6c:e2:42:74:71:69:2f:3d:36:fc:ec:ae:e9:
17:05:b7:1d:91:d8:1b:8b:e9:a3:5b:46:2f:7b:4e:
28:3d:e9:2d:99:10:0a:d7:10:89:b2:57:95:c3:0e:
d4:5f:1c:38:ad:7c:bf:f3:d1:1c:6e:cf:3c:60:6a:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:3A:FA:F2:29:C1:8A:5A:02:A0:66:0F:83:53:29:51:43:EB:97
X509v3 Authority Key Identifier:
keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:94:67:c3:38:0c:0b:a0:7c:d5:7e:a1:81:ea:9f:f5:2d:8e:
e7:86:8c:9c:ff:8d:ca:ad:75:0d:aa:dd:76:17:9d:ca:b9:83:
9f:e4:42:19:6f:1c:f2:34:cc:a1:8f:a9:6a:4b:05:1e:0c:01:
a5:da:10:26:94:87:30:81:10:3f:eb:77:d1:8e:1a:e7:11:05:
a7:e2:5c:92:22:5a:4a:fd:36:f0:b6:b0:86:65:47:49:73:63:
5b:f9:51:80:19:25:3f:73:f8:c5:48:65:fa:0d:86:99:3c:ee:
2d:e3:b4:47:a5:01:7e:5e:7e:0b:b8:34:55:cb:2f:3e:3f:fe:
ba:fc:2c:3a:44:c4:d8:c1:50:a7:2e:e9:4b:f2:90:b6:89:4a:
ad:33:bf:62:f3:1a:21:fa:23:35:c6:3d:8d:ab:8e:ce:b1:8a:
c3:35:94:b9:db:20:cb:b2:8e:9d:64:93:05:df:a9:d1:f6:db:
8e:d9:d2:6b:13:cc:66:b7:1d:db:fd:20:73:49:75:26:25:de:
f8:d8:24:4f:56:83:e0:49:89:88:41:36:3f:7a:e5:6b:d1:6f:
fe:6c:f0:b3:70:0a:dd:37:cc:3f:dc:c2:36:cc:cb:28:e3:e2:
ff:c6:30:10:0f:c2:ad:d8:32:24:29:99:33:aa:97:0f:78:75:
da:35:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:12 2025 by rpki-client