Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: w8ZJpDUWEcD0ovvyG6dzd5ETWC+/Ka7qGvUEIOxPlhQ=
Subject key identifier: C0:FB:4B:56:F9:2A:30:56:98:45:98:87:3E:B8:E5:0C:6D:A7:05:C8
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019A7225C80CA3BEC15CA93999F6309C114D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0989
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: 9vfvnrkskJBLVCJ3uSDN7TBOxWNU02YuAri8rlpKFSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c8:0c:a3:be:c1:5c:a9:39:99:f6:30:9c:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=c0fb4b56f92a3056984598873eb8e50c6da705c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:0a:ec:5c:14:4b:59:03:77:17:f2:6e:66:
f5:f0:1f:d2:e1:f6:2b:78:cd:5e:9f:1b:15:cf:ea:
eb:b9:74:31:0d:ae:d2:c9:24:ed:7d:32:1a:bf:35:
04:9b:7a:4f:8a:69:a3:d5:e4:9d:90:4b:f4:a4:b8:
df:1d:0f:6d:97:cf:3a:ee:ff:3d:6a:1a:62:57:8b:
a1:bc:2f:da:08:65:49:0a:56:63:d1:9e:72:30:fd:
c9:9c:61:83:d2:0d:8e:03:5f:33:8b:d1:d0:65:99:
d1:5d:b2:38:15:1b:af:77:8c:36:5f:48:c5:fe:9d:
80:44:a9:95:fa:6b:0b:29:82:f5:ec:13:48:fe:7e:
e8:24:61:ca:9a:13:da:6d:70:bc:4a:84:70:d1:e9:
44:ef:a0:4d:d0:6b:8c:db:f7:39:1d:46:79:48:1a:
6a:94:12:55:53:c6:a7:7e:1a:ef:85:e2:31:a3:b6:
2e:15:c6:62:f7:05:b0:8c:12:ea:a7:c0:48:92:ec:
a3:b3:03:a1:45:b0:0d:5f:7d:41:ce:72:a3:89:6f:
36:ee:f6:3a:2a:c5:91:c1:4a:04:1e:33:28:26:95:
21:ce:4c:79:16:f9:05:ca:9f:36:e3:0c:72:d7:af:
cf:1e:04:e9:ac:a6:9c:b7:66:5a:7a:c2:5f:87:fd:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:4B:56:F9:2A:30:56:98:45:98:87:3E:B8:E5:0C:6D:A7:05:C8
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:cd:4c:9e:69:15:11:e0:e0:01:69:25:55:64:af:c8:6a:
43:88:6d:ab:ae:79:13:a7:c8:79:e1:02:c3:65:bb:d2:1d:89:
20:98:a7:6b:a8:f5:9d:9c:cd:a3:40:5d:20:06:23:b0:46:6a:
50:26:38:25:19:cb:4e:08:78:08:57:53:23:e6:ab:2d:90:b5:
79:02:a2:ca:3f:a2:b4:d8:dd:64:0e:a5:7f:6e:37:6b:ac:b6:
80:0b:25:43:bb:fb:b1:b1:24:2e:e3:ca:2a:e5:72:4c:af:de:
6e:a4:15:54:6d:09:eb:60:16:5f:77:41:52:6a:dd:d9:69:33:
d2:27:e5:37:d4:33:96:00:d6:6b:04:65:e2:e6:98:04:74:5e:
b4:63:68:e3:ff:76:b1:f9:1d:c2:9e:31:0c:ab:5e:46:3f:ff:
a8:7f:54:68:0a:d7:64:b6:8a:39:b8:17:b7:9a:3b:b2:71:e5:
a0:10:81:4e:48:09:f4:f0:29:3e:94:5e:48:84:1d:a8:49:ef:
ba:d9:8e:cb:65:49:d5:e7:be:64:86:60:93:1f:47:b1:02:ae:
a5:36:89:72:05:65:c9:f5:fc:47:5f:13:d3:39:06:d7:dc:56:
88:1d:e9:69:92:9f:4c:db:60:87:bd:7b:be:d8:99:f7:74:d7:
60:e3:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:17 2025 by rpki-client