Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: To+P8eLRwmpUM1YR4txFxxasrymmTT7Kdzjqil7kSV4=
Subject key identifier: EE:6F:31:45:2A:9A:90:0D:5E:83:BE:50:80:16:D9:14:B9:91:DA:15
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019A725C4B3CA3893AB21D8E1D9030B4195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 100A
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: PoMDgGPhbSS5EdGuHunG1C2n+0KuqCz3ZmI5S4vX0bg=)
2: vHSz7syZCdc9si7_Pq1PLv6tdnc.roa (hash: DpwRdEh/R0r3FLFeNbLkCKGthqDKuAQzsAmQCtR8AOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4b:3c:a3:89:3a:b2:1d:8e:1d:90:30:b4:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=ee6f31452a9a900d5e83be508016d914b991da15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:63:38:6a:10:1b:63:fd:a4:78:aa:56:be:
e1:12:5a:d4:da:da:1a:57:e7:b5:1b:1b:ec:dd:24:
47:01:9b:3b:c0:0a:87:f8:5c:b9:02:74:5a:c9:1b:
dd:82:98:ad:a2:ce:f0:db:72:93:e1:04:45:31:33:
8c:93:c5:d0:2e:c5:fa:84:82:ce:7d:61:c3:9f:8c:
36:6e:03:33:d0:07:38:fc:32:25:19:4b:59:71:6d:
6b:4b:dc:e8:e7:5f:61:50:de:50:97:2b:f2:1c:c7:
c2:54:82:e3:77:5b:cd:99:12:71:fa:19:b0:5b:86:
5f:88:1e:4f:89:30:3f:ca:3e:87:26:4c:6c:a9:5a:
9f:bb:7e:eb:0f:45:7d:65:12:f2:b2:95:fd:50:51:
5a:fa:07:2e:25:5a:5e:72:66:3d:a0:84:08:f5:32:
22:cc:b0:c1:71:c5:17:1c:5e:7b:a4:d8:82:76:4a:
4b:c5:99:22:63:29:5c:ff:49:5d:2d:e3:a9:14:2a:
fb:0a:7f:9c:23:f9:31:8e:68:98:ae:06:8e:9d:c8:
57:ea:4f:6e:a1:f0:2f:d6:02:7a:fe:87:4d:5c:89:
69:4d:69:cf:9d:ae:a2:30:0a:34:7f:cf:77:59:f8:
b7:07:ac:ab:47:ae:71:fc:9d:ac:a0:bd:4a:16:37:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:31:45:2A:9A:90:0D:5E:83:BE:50:80:16:D9:14:B9:91:DA:15
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:3f:45:7c:6a:09:d9:e3:04:cf:a0:6a:67:46:87:27:a9:
f9:b0:50:e5:9c:cc:6f:56:bf:6a:a9:8a:20:dc:d7:0c:88:63:
29:8e:47:78:f3:64:f0:68:b2:89:8f:dd:ba:f5:50:7b:bc:5e:
8d:79:96:90:bc:0f:87:85:c7:01:d7:b4:8c:42:6b:57:9a:41:
e8:5d:8a:af:75:11:e3:ec:3e:db:4a:e7:c9:65:9a:f6:f5:27:
b6:f3:ae:46:74:8a:3c:1e:e0:e9:f1:6b:d4:92:cf:83:10:66:
27:03:0f:78:a2:c9:bf:17:78:60:aa:a1:6d:78:1f:34:7b:0f:
c6:c6:e5:8d:3a:34:de:1e:c8:d9:18:52:b1:9e:a5:39:94:03:
d6:be:e7:a5:ae:e0:56:f2:2e:af:9b:bb:76:92:bf:09:09:2c:
e7:99:c0:1d:0b:48:70:1f:c2:b0:96:ba:37:5f:8b:6d:6b:d1:
6b:6c:d3:3d:e2:d9:66:21:13:38:5d:bc:bc:3e:83:11:4c:a9:
45:45:65:b3:e3:be:2f:e7:84:d9:0a:1e:fa:30:8b:f9:c4:40:
41:b9:69:28:cb:5b:11:44:8f:33:b6:b5:67:16:be:00:3f:bf:
2d:0f:62:a2:0b:4e:25:61:c4:1f:e0:7e:98:68:7a:14:19:14:
93:0d:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:07 2025 by rpki-client