Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: zbH0HHofNK51w6JEfB7SGhhGGnyTE8Ckv2cr03SVvOc=
Subject key identifier: B3:6E:F0:EE:FF:E2:9F:04:08:1A:57:6B:FE:DF:BA:60:30:77:A3:F2
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019A4E4FBEBE6C87BF374A42ECBDA7524F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0BB4
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: D1aSBXGu/Bm+eSW6IkuIO3Xiz+lIjP3/qdLegkgtT1Y=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:be:be:6c:87:bf:37:4a:42:ec:bd:a7:52:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=b36ef0eeffe29f04081a576bfedfba603077a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:7a:da:d9:1a:75:21:eb:4c:17:80:10:55:
49:3e:69:13:77:c5:9a:80:78:79:f1:23:14:51:37:
88:7f:a8:d7:24:67:45:e1:8d:1f:56:79:dc:c7:17:
5c:13:2d:01:63:16:44:f6:07:ae:ce:82:f0:74:c4:
c5:e8:8b:8a:40:4c:3d:be:b6:cb:12:a9:7f:15:dc:
f4:57:6b:41:19:1e:b3:87:cc:76:e2:d4:2e:7c:57:
b7:86:88:6b:ec:87:b5:58:02:b5:7f:7b:e5:65:35:
77:7e:1a:34:37:e2:01:7b:f2:34:e2:7c:d7:09:02:
0f:24:f6:e7:75:69:36:b7:68:c2:f6:22:70:f2:db:
49:7f:8d:6e:07:bd:0f:ae:2f:12:c7:df:7a:74:0a:
0a:d3:b5:0b:72:86:66:3a:d5:16:61:fd:95:18:26:
62:b8:5e:4b:3e:56:74:2c:7d:ce:46:c5:ce:7b:7b:
1f:a1:b0:79:b6:69:6e:fd:cf:87:8b:9c:c1:65:69:
44:bd:11:70:2b:db:9f:ab:18:96:60:9f:8f:54:c2:
27:7e:1c:de:b1:1f:5a:4b:76:ce:cb:d4:79:6f:8d:
02:92:c2:48:98:6a:1e:50:ce:56:10:5f:d5:41:b0:
9a:c3:8c:17:33:1c:23:56:02:a7:de:8d:a7:c7:3d:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:F0:EE:FF:E2:9F:04:08:1A:57:6B:FE:DF:BA:60:30:77:A3:F2
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:19:b8:b1:0d:2d:11:5a:a7:a6:1f:65:c2:b0:d4:a1:4e:
88:28:28:d0:98:48:a2:63:ee:c8:ad:4f:8a:53:3d:3d:9e:cf:
d9:07:94:b9:a3:66:f3:30:66:b1:b5:63:e3:24:7c:33:1f:69:
d3:82:b3:7e:7d:0c:06:ee:d4:ec:2e:0d:79:57:20:e2:80:da:
72:e4:b4:08:ea:80:e4:bd:c6:ab:8e:2f:84:b7:23:ff:ee:09:
8a:72:5c:71:35:23:53:21:ef:0c:f6:b0:33:cd:a9:6d:44:ef:
be:45:dc:56:05:fa:72:76:a3:1a:74:5f:b5:4b:4d:dd:49:8b:
36:8f:63:b9:d8:9c:2d:10:00:1a:cb:28:be:36:0e:aa:59:d3:
96:27:a6:3e:0e:cd:b7:87:23:e5:41:47:be:b9:01:bd:44:9d:
af:43:a5:87:f3:3b:2e:60:86:a7:97:b9:fc:b5:d8:c2:48:6c:
83:c3:aa:03:0a:f2:a8:a6:97:d2:95:52:af:dc:22:e3:47:70:
4f:6f:28:60:fd:a8:03:db:35:63:ba:92:85:9e:b8:dd:d1:72:
33:2c:b1:66:b6:c9:04:a5:41:8d:38:4e:65:8a:74:b8:f3:23:
d6:d0:ef:63:57:e6:2f:0c:04:ac:79:c9:38:d2:47:35:8f:78:
d2:31:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:41 2025 by rpki-client