Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: +OTXdCJk418RgNAu4yxlbirlSdMxbW3vK0oTWR3HKO8=
Subject key identifier: 0A:D2:98:20:66:D2:09:8B:86:D0:9E:7A:03:E4:DC:77:3F:07:E0:22
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019A4DAB2B69D438006816280A33107F920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 13D3
Signing time: Tue 04 Nov 2025 07:00:54 +0000
Manifest this update: Tue 04 Nov 2025 07:00:54 +0000
Manifest next update: Wed 05 Nov 2025 07:00:54 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 9uNm0UkHi7EsDwK5J83jYHhjnubFswoS8fSvzOXl9XU=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2b:69:d4:38:00:68:16:28:0a:33:10:7f:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Nov 4 07:00:54 2025 GMT
Not After : Nov 5 07:00:54 2025 GMT
Subject: CN=0ad2982066d2098b86d09e7a03e4dc773f07e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:ff:81:2f:86:10:84:bc:61:89:37:35:31:
7b:ff:82:cc:3e:cd:01:f9:f4:8f:27:d1:09:91:8a:
71:d4:42:b2:03:a1:1e:21:39:2f:e6:d2:25:34:60:
42:ce:37:d8:e6:c8:2a:b8:41:cf:26:5f:12:0f:42:
62:bc:79:90:b0:3d:db:11:8f:19:70:11:ba:54:e0:
a5:29:9f:11:dc:68:36:ec:29:67:d4:c1:a5:70:52:
9a:e2:7f:4e:bf:8a:62:05:ec:7a:92:96:d8:f5:01:
b6:d2:10:3f:9c:4f:b3:5b:45:52:20:7e:51:4b:53:
fc:0a:d3:d1:43:bd:dc:bc:68:5f:80:4f:ed:0b:6d:
4b:21:e6:b0:01:1f:b9:b0:66:63:b4:d8:95:01:d5:
be:8e:42:d6:a1:fe:33:7d:95:83:1c:47:be:bb:69:
7d:1c:95:b6:80:06:f8:ad:9c:11:e9:f3:84:d8:27:
42:44:55:e0:62:79:42:e6:a3:7b:fb:96:dc:11:29:
b6:b1:c8:81:d4:fa:9b:2f:bf:42:b0:5f:50:71:a4:
07:50:82:9c:c9:4f:0d:36:cd:5f:15:81:78:35:c8:
1b:43:d5:fe:0c:76:ad:c1:2b:0f:94:fe:c3:af:f7:
d5:47:81:21:cc:0a:47:fd:c9:f6:b9:ce:f6:cc:e3:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D2:98:20:66:D2:09:8B:86:D0:9E:7A:03:E4:DC:77:3F:07:E0:22
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:80:ea:f7:a4:bf:48:1a:29:26:03:1e:1f:a3:03:92:d8:
d7:20:ba:92:8e:21:b3:6e:ba:eb:7b:e3:27:3a:00:8f:aa:99:
fe:95:96:f5:97:c3:41:ee:1b:7c:2b:d9:56:da:af:a7:eb:77:
97:ea:29:26:c5:9c:dc:80:71:6a:8c:f3:c3:51:98:2a:e1:0a:
12:89:f2:f8:2a:63:d6:e2:61:80:0d:65:79:4d:77:98:53:75:
75:23:cb:e6:27:4f:82:96:aa:38:19:ca:19:a5:8b:1d:ec:e8:
f0:01:be:34:e5:e1:97:43:bb:67:3b:8a:7e:58:41:41:4d:f8:
42:ff:be:8a:66:9a:7f:9c:4a:62:9d:25:c9:52:d1:14:0f:64:
96:cc:f7:c9:2e:55:57:f0:22:3f:72:55:87:73:6c:30:10:a6:
1e:8d:d6:9b:89:19:91:fe:96:8f:1f:41:3f:33:64:8c:e1:4b:
8b:9f:ff:af:7b:29:59:29:ad:1b:c0:8e:e3:80:60:63:2e:35:
24:dd:d7:42:8a:36:ba:1c:76:df:3c:61:c2:db:5a:8c:e7:25:
b3:bb:6b:74:8b:f9:84:85:cd:47:1c:b9:b9:69:1a:2d:01:87:
ab:29:75:a0:40:c2:37:e7:79:4f:b7:94:13:31:79:b0:4e:86:
de:2d:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:28 2025 by rpki-client