Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: Syej2aOFqdph8E1fhU3NwCPtWrzpgZ8wWm/Fa4gTTak=
Subject key identifier: C1:AD:7E:85:40:15:70:35:B3:93:26:C3:76:B6:03:4E:8F:3D:41:F2
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019A4FD04A811601815ABD4CCF0522AB6C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0318
Signing time: Tue 04 Nov 2025 17:00:41 +0000
Manifest this update: Tue 04 Nov 2025 17:00:41 +0000
Manifest next update: Wed 05 Nov 2025 17:00:41 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: bcCuSuwdvCUYxJ7jRyG0Fx4qjHGPi+ACIK7kCqezqQ8=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4a:81:16:01:81:5a:bd:4c:cf:05:22:ab:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Nov 4 17:00:41 2025 GMT
Not After : Nov 5 17:00:41 2025 GMT
Subject: CN=c1ad7e8540157035b39326c376b6034e8f3d41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:40:28:6c:b6:b7:a1:4b:d4:7a:73:87:db:
90:9f:dd:70:3c:33:6e:0e:ba:06:eb:5f:4d:55:18:
87:42:33:63:3f:38:09:83:2d:c3:b6:28:d0:f2:55:
f8:27:81:28:86:71:ec:f7:1b:4c:71:f9:00:1a:e8:
5b:c3:33:b9:f4:04:5b:09:35:a2:96:1b:2d:b8:14:
a2:af:d5:e7:3a:af:15:f9:df:21:c0:3a:08:16:02:
2d:ee:ec:c2:28:f4:df:50:54:c2:a6:6d:77:fb:b4:
c2:22:72:b9:8d:30:c5:c1:40:0f:5f:80:07:25:be:
ee:8b:bb:79:64:d3:22:e7:e6:16:ad:ae:18:c9:52:
37:78:61:03:94:99:7a:29:de:04:35:18:97:f5:fa:
3d:4b:90:4b:14:af:c5:67:77:37:82:81:f0:d3:e0:
54:29:65:dc:8c:bc:7d:d0:dc:d1:0f:35:45:91:73:
13:c6:1b:3c:4f:2c:e7:67:77:06:26:5e:38:c4:85:
70:b4:c9:c8:ea:a9:e6:72:5f:2b:0d:3d:a7:69:99:
d4:a1:d3:dd:78:e7:9a:1d:23:dd:ff:30:31:fc:57:
e5:ed:91:bd:ca:ef:ab:62:e1:78:30:fd:cc:1b:7c:
5c:36:29:f5:ee:2f:64:74:98:77:f3:e0:30:cc:c3:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:7E:85:40:15:70:35:B3:93:26:C3:76:B6:03:4E:8F:3D:41:F2
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:df:65:75:f3:07:c3:f1:04:07:c1:ee:3d:c7:26:76:53:
6a:bd:0f:f8:2d:6b:f3:0c:24:d1:cf:b1:2b:4c:1d:b8:f9:2a:
92:b1:96:cb:61:b3:6e:7a:e9:07:70:c5:4d:8d:36:f3:fb:3c:
0b:f6:c7:a4:c2:35:11:4e:0b:a0:9d:39:c8:15:ec:89:9f:a0:
3d:15:39:5b:61:83:d4:42:32:92:32:bf:16:4f:02:59:98:88:
a3:58:d3:99:93:37:8f:5f:a8:ce:ba:2f:3a:00:38:ac:bf:52:
6c:e2:f7:ee:a4:91:dc:65:56:4c:23:91:90:3d:98:6e:b9:fe:
db:a6:3a:7f:4d:47:2f:15:71:6b:4b:ce:9d:e0:cc:3e:4e:a7:
77:97:b2:ee:a9:a0:6c:70:02:40:2d:69:dd:f2:d6:8d:2b:dd:
1b:3c:81:e3:69:95:53:bf:e2:cf:c9:39:b0:5a:85:2b:f1:09:
3d:e0:8c:fa:91:e2:66:c7:a7:5d:a1:e5:cb:55:a9:6c:6d:5e:
69:69:b0:18:fb:df:f8:32:0b:2f:45:6e:ff:48:13:94:3b:5e:
c2:e0:dd:82:59:39:49:69:53:69:19:db:02:05:c5:6e:ad:14:
c8:4c:8a:fb:7e:82:eb:53:a2:34:61:b3:3e:f0:1f:89:cf:59:
bf:fa:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:12 2025 by rpki-client