Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 6fJaBUpM4yiYjug2kSNl6O1I5jXtnTNIEHb+9OC6334=
Subject key identifier: E8:CB:AE:2D:6E:D7:FF:AF:0D:A7:1E:81:2D:24:EE:10:19:3B:F6:59
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019A4FD071DDEFA66AAB930DA7291AF75599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0A53
Signing time: Tue 04 Nov 2025 17:00:51 +0000
Manifest this update: Tue 04 Nov 2025 17:00:51 +0000
Manifest next update: Wed 05 Nov 2025 17:00:51 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: 9x6NOE1t3GZe5KHiEAAy7XcsqQ9JrxFDD6iSUBVWi7o=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:71:dd:ef:a6:6a:ab:93:0d:a7:29:1a:f7:55:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Nov 4 17:00:51 2025 GMT
Not After : Nov 5 17:00:51 2025 GMT
Subject: CN=e8cbae2d6ed7ffaf0da71e812d24ee10193bf659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:c8:7c:ea:51:d8:95:01:e8:87:ce:ca:de:
96:45:f8:6a:34:8c:87:96:e2:c4:02:ed:3b:a1:ba:
21:0f:f8:c1:b5:d9:17:2d:10:fc:76:46:5d:61:10:
a7:aa:c5:21:c3:ce:39:95:e8:80:70:87:74:88:4a:
97:30:3f:8a:d1:57:74:2b:43:56:c3:9b:f5:6b:aa:
54:c9:d0:d6:99:16:e6:7f:10:4a:6a:aa:7e:62:cf:
75:61:56:2c:ab:a7:84:17:b8:6b:2d:b2:37:79:fe:
30:ab:28:80:02:df:c6:37:ba:97:f6:3d:e6:a7:e4:
d3:a1:be:46:62:18:76:b8:0c:cf:0d:ae:7d:cc:d8:
dd:dd:64:cf:f3:97:68:f9:49:f9:6d:d5:53:a7:67:
df:91:a7:e3:9d:eb:4a:2d:ff:66:4e:79:43:ac:5a:
3e:d6:e3:a7:23:42:3f:73:de:ba:60:f4:38:b0:1f:
b1:ff:a0:0d:e9:20:aa:df:ce:0c:c8:c9:39:76:81:
65:43:f5:d9:65:69:3b:cb:98:ea:a8:74:ca:67:b2:
5a:4a:f8:14:65:8e:99:b0:82:b0:43:58:69:cf:01:
b2:e4:9b:82:54:a0:eb:b6:43:cd:f0:87:9e:bf:f4:
f3:4b:96:d7:09:c7:65:fd:a7:f3:51:b3:da:eb:b3:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CB:AE:2D:6E:D7:FF:AF:0D:A7:1E:81:2D:24:EE:10:19:3B:F6:59
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:e1:b2:26:32:a8:0c:19:30:d6:48:bf:22:11:ad:35:e3:
34:cf:b0:63:57:16:f2:c4:b9:b2:cd:15:44:dc:d2:bb:d1:dc:
3b:aa:ca:8b:7a:21:7d:49:0b:bf:76:9c:f3:35:47:00:1e:aa:
ee:d3:9b:8e:77:f0:2f:a4:24:91:24:b7:74:7c:36:f5:91:6a:
ee:d2:38:e2:b6:08:92:92:f3:df:8d:c1:09:f8:bf:63:e7:e5:
c1:ab:31:d4:a5:f2:d8:e8:e5:6c:4e:cb:83:06:a8:9a:3e:74:
67:56:45:7d:2d:46:7c:b8:4b:0e:37:c9:ea:97:1b:7b:d2:eb:
fa:5c:37:35:5c:99:8c:f2:12:a3:57:e9:da:f4:8a:c2:b4:74:
f3:87:a3:fc:04:9d:09:bf:f8:10:89:5e:c3:36:4b:f4:eb:75:
2e:8a:36:ae:41:41:2b:b3:27:7e:29:ec:d8:5e:3d:d9:52:1d:
39:f0:aa:a2:b3:af:e2:74:c8:62:92:ee:70:78:b2:f1:4e:5f:
20:70:f3:e1:7b:e4:8e:77:73:c9:40:04:ec:19:8e:12:ba:87:
dc:b3:11:52:d7:47:15:db:55:63:bf:fe:30:96:c1:79:1a:95:
27:39:c2:06:09:83:bc:19:32:41:60:98:32:cc:7c:7e:a5:b7:
b4:d6:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:08 2025 by rpki-client