Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier: K0D24DHhcV+MjnHvb4xbcL3govIi2/IC+hq+aFq+5tA=
Subject key identifier: 83:4A:C1:34:1F:82:13:20:46:3E:D9:AB:52:E5:1C:C7:97:EF:D3:57
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial: 019A71B7853376368B3CB22E6E73E4B1834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number: 06DE
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: iPEiO9Efi3RftIgCEijmORR0V9y45XPLdGyXhDSl2c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:85:33:76:36:8b:3c:b2:2e:6e:73:e4:b1:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=834ac1341f821320463ed9ab52e51cc797efd357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:79:cd:f7:fb:e2:29:a7:52:a7:3a:56:f8:
19:a4:18:83:65:42:b0:9b:25:66:b5:4c:8a:bd:24:
84:09:64:c6:00:88:84:74:60:f6:a6:99:f8:ae:28:
2e:eb:53:85:4a:6e:a1:ae:58:82:1b:a2:1f:4e:2f:
d2:7d:3e:84:f4:51:47:d7:e2:cc:8e:25:3f:36:0c:
76:24:63:7b:7d:0f:5d:a9:71:51:a0:71:39:41:17:
f9:45:f1:a8:f6:e2:f4:0e:47:15:34:d1:64:18:67:
c1:27:a4:78:35:ea:b7:8d:11:dd:90:22:fa:c4:41:
30:f6:3d:ab:56:5c:09:ba:e1:8f:76:6d:44:2f:c5:
7b:ea:29:5b:b4:d0:1b:57:8c:67:8d:2a:e1:92:b3:
37:dc:1c:00:78:d4:cd:5a:91:5a:6a:08:d3:e7:6b:
51:03:f6:cd:6a:1e:0c:13:3d:a8:68:ac:3b:42:7d:
89:d6:26:70:47:0f:10:3b:f0:0a:62:79:b8:57:69:
81:83:f4:4a:96:da:e1:73:b2:44:99:78:69:bb:81:
a5:59:b7:70:54:31:1a:65:0d:37:ad:3f:9a:34:4e:
bc:3b:b4:55:70:ad:c2:e5:5b:5d:8b:86:8e:9f:52:
67:6c:89:d1:9d:5d:ed:ea:52:04:c9:f5:4d:36:c8:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:C1:34:1F:82:13:20:46:3E:D9:AB:52:E5:1C:C7:97:EF:D3:57
X509v3 Authority Key Identifier:
keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:be:ec:63:6a:c6:a0:15:35:82:5e:39:1e:21:e8:35:06:05:
17:3f:31:0b:38:2f:bb:4d:32:79:da:9b:2f:63:f4:d9:aa:da:
38:c8:69:ff:a6:41:33:13:15:d0:13:c3:d2:43:6c:43:c0:69:
0b:be:fa:2c:3f:6c:d5:54:23:79:22:bd:ba:17:ff:0e:a5:a8:
fa:19:4c:7a:78:f2:d1:7c:63:67:c2:79:f2:41:9e:ff:b6:d2:
42:17:5e:53:0d:cb:f0:fa:2b:ee:f0:fc:c4:36:c0:62:b4:00:
81:0d:4b:28:76:f5:cb:3f:f8:07:19:d0:a7:89:46:73:eb:25:
d7:75:b0:02:1f:a8:4b:25:98:44:ad:8d:25:dc:36:3d:3d:fe:
85:8f:4c:92:ef:ef:f8:f2:f4:ee:93:71:30:8a:c8:ec:66:61:
58:1a:3d:d7:2a:24:4f:b5:1e:b6:f6:fe:16:c1:fe:25:31:58:
55:eb:78:7c:08:15:15:30:cb:56:26:e7:22:c7:73:b3:5b:3b:
39:9d:a5:d7:70:ad:94:35:ad:06:8c:a8:f7:a4:29:5c:6f:ec:
66:bb:a2:3c:cb:f1:6f:f3:19:9c:dd:5f:6a:19:47:31:98:ba:
1c:51:85:e9:8c:67:b1:c5:01:31:9b:33:6b:64:21:81:40:55:
f3:d7:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client