Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: V9dpuddcDTeyK1GVY7H9z4idTi7WiWS7E5YldQxNxRU=
Subject key identifier: 09:B6:AD:4E:02:B4:9C:1C:6F:7D:AB:A4:3E:81:68:78:60:95:40:A8
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019A4DE16B52DDD718036AA44817BF276734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0CEB
Signing time: Tue 04 Nov 2025 08:00:09 +0000
Manifest this update: Tue 04 Nov 2025 08:00:09 +0000
Manifest next update: Wed 05 Nov 2025 08:00:09 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: mGh/xqf66tqeyXwvEJrIUqZgxbeXalhrdH659MjVaYE=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6b:52:dd:d7:18:03:6a:a4:48:17:bf:27:67:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Nov 4 08:00:09 2025 GMT
Not After : Nov 5 08:00:09 2025 GMT
Subject: CN=09b6ad4e02b49c1c6f7daba43e816878609540a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:5b:91:74:a1:19:1a:bd:e5:41:b5:f1:75:
7f:b8:9f:0c:fe:fe:a7:0e:64:e8:a9:a2:00:41:91:
d8:78:6e:31:64:1c:51:46:75:54:3c:78:76:b9:c4:
bb:25:e1:9d:dd:6e:f8:59:16:02:82:e1:f1:ba:bf:
67:8e:ae:85:9a:2f:28:20:40:69:4a:da:a9:ef:4b:
8f:bc:41:dc:ff:24:16:74:75:3e:64:68:53:39:d2:
56:80:b5:15:e9:ed:ff:7f:8b:80:ad:ba:2e:92:09:
44:0c:c8:cf:0b:c2:d4:89:1d:12:e0:3c:f8:15:b6:
66:16:be:79:40:80:0c:6b:9f:0c:0a:19:e4:6e:22:
17:b4:5c:32:5e:04:a7:f7:b2:ec:93:89:24:39:70:
37:2c:69:1d:0f:69:6f:06:1a:ec:29:2f:29:42:7d:
8e:b1:b2:3d:9d:24:bf:61:0f:8e:5a:f9:5e:1e:d1:
ab:34:64:72:59:20:10:d6:1d:44:e7:15:81:bf:88:
c6:3f:ba:23:fd:13:79:56:40:85:fd:6c:92:98:77:
e6:00:90:6c:52:49:80:60:b3:2a:5b:6d:94:e4:7f:
6e:e5:99:ad:d0:3a:1f:0f:e7:41:e8:e3:1a:e4:cb:
5c:96:30:ad:fe:68:b4:e9:4d:f2:11:e2:fd:8b:14:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:AD:4E:02:B4:9C:1C:6F:7D:AB:A4:3E:81:68:78:60:95:40:A8
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:fa:ec:3c:65:7a:98:34:05:f5:8b:21:bd:f0:03:89:95:
f3:7c:f1:bc:6b:e2:a2:b2:0c:c3:b2:45:96:48:75:2e:14:22:
f1:03:91:1d:2c:98:2b:09:5c:66:5a:93:1f:4d:01:93:e3:a9:
94:94:97:fd:95:6b:b0:6a:1b:40:98:01:17:64:26:ae:48:46:
5b:f7:19:49:53:cb:04:e4:7a:e5:02:78:fc:31:b1:ff:5a:59:
0b:bf:5f:28:ca:d7:ae:15:34:f2:79:9f:10:2c:04:1c:31:a2:
c3:b2:7b:28:d6:26:59:6d:cf:5f:a2:6c:85:60:5b:1b:ee:16:
32:38:ad:60:50:d7:f9:ac:5a:60:14:d2:ef:db:fe:99:75:2a:
d6:a8:7f:51:8b:c7:35:55:31:14:a3:4a:c1:8f:1f:85:d5:66:
16:aa:9c:e4:04:4c:1a:0d:09:87:74:1c:20:c0:06:20:d7:ea:
0b:2e:b4:ce:30:f6:08:05:03:f2:01:38:eb:0e:70:5d:61:bb:
22:76:60:b6:a4:1d:93:fe:18:cd:ec:fc:2e:a6:a0:d0:72:e2:
51:5e:ff:c2:77:ea:0f:19:6e:2a:9c:7c:5c:cb:62:d7:d1:b6:
64:d6:8d:0d:1e:ce:b9:dc:28:3b:65:b9:70:41:5f:d7:3d:d3:
5e:08:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client