Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: 41rtyrZ6jb4G5KlHAD1wWGfklWe7jvqcF6qwIpJL9j8=
Subject key identifier: 55:8F:F0:B4:5C:BA:DF:46:7C:55:E9:37:EC:10:38:38:CA:A8:DA:2B
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019A71B8BE18B75EAA7EB73AD58681519640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0BBD
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: TtS2Eo5rtTM0lWkK3WLRr1NnVS7waZFB8nKPSE484Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:be:18:b7:5e:aa:7e:b7:3a:d5:86:81:51:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=558ff0b45cbadf467c55e937ec103838caa8da2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:21:1f:aa:1a:e7:2e:5a:ac:3f:3c:ee:99:
53:e2:9c:3a:fc:f0:9a:d3:ff:02:dd:14:d9:e8:7a:
cc:8f:b1:fb:cb:19:4a:7f:b4:ec:4f:71:f7:f9:e9:
f7:d3:bd:e5:73:0b:36:05:6d:27:b3:04:d0:16:84:
c9:db:08:ae:a2:b9:72:05:69:15:38:b3:b9:fe:9a:
9a:9e:ca:8c:5f:c3:ce:25:8e:a1:63:bd:8c:63:c9:
bc:04:2f:7c:54:d9:f7:f6:f4:4c:f6:74:d6:88:8c:
ae:e8:96:3c:25:33:b2:ae:39:0a:26:75:6c:b4:40:
37:19:53:2f:56:20:e6:2e:d5:44:51:ee:63:12:0d:
b8:3b:21:5e:74:e2:40:88:01:b0:75:26:0c:da:6d:
e3:e8:53:41:09:39:5e:5b:8d:0c:45:7c:64:81:26:
39:87:76:4f:58:e9:d4:9d:40:66:60:20:06:7d:70:
cd:c8:80:6c:63:4a:b7:49:ac:0c:9a:05:97:e4:93:
80:52:dc:92:4c:6d:0f:91:11:60:30:1b:be:b0:a9:
14:7a:9a:66:98:5b:0b:d7:a3:65:04:32:05:06:f1:
71:76:c5:90:89:a1:4a:6c:0b:8a:16:96:c1:83:38:
ec:fd:39:35:6d:4d:89:83:e4:19:67:87:fd:39:2b:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:F0:B4:5C:BA:DF:46:7C:55:E9:37:EC:10:38:38:CA:A8:DA:2B
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:aa:c9:aa:8c:7a:b8:5f:32:fb:76:31:c5:1d:bb:42:34:
3b:7c:7d:27:53:50:ae:7d:58:c1:8a:46:66:e1:1a:5a:9d:54:
ec:19:4a:0a:73:9d:98:96:58:7b:ea:64:8d:05:d1:b5:2f:5a:
e2:87:33:f5:0f:69:04:c3:db:a5:ce:74:06:3b:b4:df:6d:34:
67:01:85:f7:f1:33:9c:af:31:78:a6:fb:94:bb:44:9c:b8:ea:
ec:64:69:aa:0e:ef:85:45:5c:ca:db:da:ec:97:1f:4c:9b:a6:
df:b3:a6:9c:64:74:57:cf:3b:2e:d2:09:8d:3b:aa:fb:4f:68:
6e:ae:d0:e0:f1:d7:7e:6d:c7:7b:89:e8:8c:e5:98:b7:78:7a:
bc:69:02:a8:ab:3a:41:43:1c:f0:47:cf:67:fd:9f:64:09:fb:
6f:80:b3:ad:3d:07:cc:7f:7d:b2:49:38:d6:53:45:35:d5:48:
03:cb:3c:49:df:8c:79:75:fb:7c:a7:71:46:cf:d0:b4:a3:3b:
0f:46:d4:b6:79:f5:ca:dc:3d:a3:39:c5:ba:ac:9f:b6:cd:34:
ce:78:37:90:ca:c2:1a:68:b8:18:29:d8:ff:4a:3c:84:46:24:
2e:c9:7e:cb:33:4c:d1:45:ec:6f:a2:99:8d:6a:9e:16:c0:65:
f7:3b:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client