Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: m+dAezkcs+seO0c4avFRfNYE8hC498uJhSlwwHAJlEg=
Subject key identifier: 38:03:E0:1D:F5:6E:F9:CA:BF:8A:43:23:8F:4B:7C:BF:38:A8:63:89
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019A4F98ECA37F14B4B1519F07DD48B0BAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 05BE
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: v8nO42ITPlm70guKtkXy9g1Lua6EuLGwWn4Gn5eMOnM=)
2: HlRlmfqG33_y8zZWUJ5cFuyj6Fc.roa (hash: u9+BSFLokNeEPeP/eOU5bAd4eXptmEVrwo502ugbJuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ec:a3:7f:14:b4:b1:51:9f:07:dd:48:b0:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=3803e01df56ef9cabf8a43238f4b7cbf38a86389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:6a:ec:5d:52:4d:5f:6d:d8:5e:8f:01:3f:
f9:20:0e:91:40:cb:fb:a3:57:38:2c:7a:44:01:8b:
80:1d:1f:19:5b:00:57:85:b6:ef:48:aa:13:e0:ce:
69:7b:bf:cc:b6:7b:7f:71:55:d1:19:39:e4:07:19:
98:4d:1f:d5:cc:bf:d0:0b:70:2e:1c:1a:8d:87:7c:
50:4c:01:09:4d:86:b4:90:f9:50:69:a8:73:84:a2:
f9:fa:a0:f7:1b:39:32:4f:03:d8:8b:b8:5a:7f:74:
d1:df:f9:16:68:86:3a:c1:89:22:c2:f2:4e:f7:34:
45:79:fb:bc:17:fe:df:37:df:d6:9b:bb:b7:43:eb:
df:ea:91:43:5d:7e:42:c6:9c:89:cd:07:58:df:70:
ad:0a:ec:1c:91:31:87:f7:ce:58:58:c6:b3:b4:fe:
e3:a6:1f:d0:9b:5f:67:06:6f:91:25:3b:0a:bb:01:
4b:6d:ef:b5:77:83:87:86:b3:ba:fb:89:88:fc:c9:
c9:9e:64:1d:6d:2d:d9:c7:bd:7c:03:1d:29:9c:d5:
0c:a4:74:d7:ea:e0:f3:67:ee:13:9f:36:11:0f:1f:
40:50:48:cc:8f:92:82:1b:03:84:7f:98:1f:25:79:
a2:54:17:0a:7f:1b:84:43:66:4d:bf:9e:a2:65:fa:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:E0:1D:F5:6E:F9:CA:BF:8A:43:23:8F:4B:7C:BF:38:A8:63:89
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:6d:58:3f:66:29:6a:07:b6:de:4c:1c:67:b8:e3:e1:d2:
63:3e:cc:7c:ef:1e:c2:fd:aa:89:1d:f6:0b:55:0c:2b:2c:3c:
64:f3:dc:83:43:d6:df:65:79:7b:85:0e:12:9d:9d:91:2a:69:
36:4e:cc:32:02:12:ae:3d:a8:63:c0:38:1b:e1:3c:2b:eb:c9:
3a:76:12:23:55:3c:b5:7a:ee:2a:b3:04:24:e0:ce:6f:d9:c7:
4a:5e:82:00:b0:2e:2a:50:a8:df:19:a2:c3:ef:50:62:43:ca:
9a:f5:24:8b:0f:2f:04:4f:a6:1c:77:fa:22:9d:84:4e:56:40:
d1:b0:15:11:52:9e:ca:a0:6c:66:22:2a:0f:f8:17:20:bc:0d:
b1:7f:d7:7a:5d:b3:60:b8:fd:7f:a4:c5:28:28:dc:5c:1a:c5:
c2:00:93:7b:b6:ff:c7:98:6b:73:01:b4:3d:f3:d6:a7:f6:ed:
63:26:43:e5:64:a5:9c:72:7e:a2:b8:9b:36:9d:0b:b6:01:e3:
df:fb:ce:9b:13:fd:bc:e5:da:ff:a8:48:af:fa:45:49:29:d0:
89:04:00:8b:0d:2a:66:88:b8:02:c1:21:bd:eb:5c:f3:f6:77:
86:fb:9e:e9:c2:b3:18:96:34:1a:ee:63:7d:e2:9e:bb:ae:70:
79:f3:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:36 2025 by rpki-client