Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: m87gmpURY4J0cLE7oQs17Y/IVN+9ZaQB6dibPYxawME=
Subject key identifier: 92:C7:B7:E8:1B:FF:B1:F8:99:7C:6A:8E:D9:B5:FA:C4:6B:E6:65:4D
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 019A71EEF4BE0A18BB32A04B5EEF673CC7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 0E27
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: x+HTmKXiUshQp4JDYHc78GJUyP7gr5YcpW34w+IWzPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f4:be:0a:18:bb:32:a0:4b:5e:ef:67:3c:c7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=92c7b7e81bffb1f8997c6a8ed9b5fac46be6654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:4c:0e:07:b6:cc:95:53:af:49:6b:05:a3:
5e:1e:3b:b5:07:89:e9:0c:68:43:a8:01:d9:03:05:
a5:5b:37:e8:65:60:b1:2e:3c:da:a1:97:23:90:2e:
81:51:ad:9a:21:10:e9:68:2a:41:47:80:25:12:cf:
dd:96:0f:97:c0:22:9e:a7:30:47:c8:5a:72:b4:cf:
a1:53:52:af:62:05:da:8b:49:23:ae:17:85:0a:9b:
ea:70:ca:46:11:63:88:37:40:46:7e:fb:ce:f3:69:
df:f9:7d:07:b5:64:cd:33:66:7e:db:49:15:fc:a5:
7a:b0:a4:05:e8:7f:4e:44:51:9b:f0:6e:06:bf:61:
ec:83:4f:55:84:91:fa:ce:13:88:76:2a:43:fc:9a:
9c:06:29:18:46:b6:e3:86:8b:9c:f6:67:b1:9c:f9:
53:1f:56:23:bd:4e:18:8e:dc:dd:f4:33:e2:71:c7:
52:f1:a1:b0:04:22:1d:36:1d:4b:0f:0c:5e:bf:dd:
c2:4e:f7:22:e9:0b:15:0b:ac:c4:d8:79:19:af:f8:
2b:b3:e4:be:ee:d7:7b:16:65:43:a7:43:b8:c8:c3:
bb:6c:58:5f:ff:92:83:12:a5:07:4c:29:ec:60:49:
14:99:95:b0:09:c6:b5:50:fa:07:f5:e3:cc:32:8c:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:B7:E8:1B:FF:B1:F8:99:7C:6A:8E:D9:B5:FA:C4:6B:E6:65:4D
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:19:26:64:d4:5d:4d:d8:f3:a2:b2:4c:a0:1f:5b:5a:6f:83:
2a:4b:1a:67:7e:99:4b:c0:19:bb:2c:04:03:6c:df:16:91:01:
2c:d9:23:9f:96:45:4a:95:25:b6:c0:6d:eb:23:05:bd:e2:3b:
75:a1:60:7e:de:a5:a3:85:27:f7:2b:9f:a9:1a:2a:65:49:87:
6e:01:98:83:47:56:8d:f3:7c:1c:6f:a8:2c:8e:b9:74:39:aa:
22:8e:13:06:20:2b:2f:e3:96:68:a9:28:f2:54:0d:51:72:99:
15:e3:bf:77:1a:e1:f8:19:c0:28:0c:7d:7f:32:a4:df:d1:41:
f3:e7:7c:63:ff:44:5d:71:c1:e6:ba:df:a6:7c:84:f9:9f:3f:
27:a6:73:42:a9:94:19:9d:f6:e7:06:14:bd:5d:25:65:c0:cd:
66:03:cf:7f:06:9d:be:c8:c5:ad:95:6c:e4:c7:d7:fc:d8:dd:
9c:86:eb:14:91:4c:c6:33:d1:96:92:44:42:f5:dc:49:cf:d5:
24:4c:7d:69:a4:4d:90:5a:40:93:0b:a8:ae:08:aa:3e:3a:da:
15:7c:26:8d:ef:57:c2:e1:47:ac:f6:ba:4d:53:61:8f:4f:83:
75:2c:66:a7:81:d0:bf:e9:0e:9b:2f:61:0b:2e:e9:bf:61:77:
d4:44:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:15 2025 by rpki-client