Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: betY+viax0P6U3xV4ThTFI9fqwSY2n12RC7SWxDbB+4=
Subject key identifier: F1:4F:67:99:D1:01:6A:8E:AB:14:44:DD:BC:01:67:D9:FD:14:4F:31
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019A500702E5836F1AEA6A7AF8AD223E9E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0629
Signing time: Tue 04 Nov 2025 18:00:28 +0000
Manifest this update: Tue 04 Nov 2025 18:00:28 +0000
Manifest next update: Wed 05 Nov 2025 18:00:28 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: Fzff64EpN/Ap169rM+0kt+/GEcW5qlwsTlRNRCFVQFk=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:02:e5:83:6f:1a:ea:6a:7a:f8:ad:22:3e:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Nov 4 18:00:28 2025 GMT
Not After : Nov 5 18:00:28 2025 GMT
Subject: CN=f14f6799d1016a8eab1444ddbc0167d9fd144f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:ea:57:4c:81:56:af:84:37:51:17:66:13:
e9:05:06:97:c3:03:c8:fe:70:74:a3:b8:67:98:25:
09:86:93:99:f6:3f:08:cd:1b:a8:a7:d1:e3:ec:7b:
4f:62:f2:48:ee:7e:16:82:6c:ee:96:d2:38:59:08:
5f:b6:e9:f0:4e:14:38:e0:82:d6:87:d5:ac:36:fc:
ea:b6:b4:99:de:f9:bf:8e:41:2d:77:8c:9f:22:a7:
4d:f5:1b:34:86:62:10:aa:3e:37:4d:71:33:2a:cb:
32:8e:84:12:16:98:2b:de:aa:af:5b:03:22:72:f5:
ec:01:38:66:20:a9:8a:9a:a7:3e:7a:aa:40:2c:33:
2a:1d:a5:b5:de:8c:3d:ee:47:25:f2:27:c2:f8:f5:
c0:3f:96:90:9f:c9:c0:b1:53:48:9d:7c:77:99:32:
74:0d:1f:dc:b9:c2:0f:8f:c5:9d:7b:ff:d6:4d:1e:
2e:bb:aa:50:f2:dd:c7:d7:92:bf:58:ef:d6:ce:7a:
4d:1f:7b:25:f1:96:cc:eb:b4:59:89:80:18:1e:73:
d6:8e:d2:50:45:8e:eb:17:11:66:6c:9e:9b:8b:b3:
34:b2:be:26:e3:b6:e8:96:d5:bf:09:56:65:06:76:
3f:5d:0a:b6:c4:f0:14:84:d4:1c:29:a4:a1:9c:c5:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:67:99:D1:01:6A:8E:AB:14:44:DD:BC:01:67:D9:FD:14:4F:31
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:40:75:7c:06:aa:2c:a4:99:ab:88:45:30:3e:8b:f6:4c:dc:
44:3e:18:36:88:0b:d7:2c:a0:87:87:b0:ca:1d:e4:8c:47:cb:
ce:1d:ce:34:2a:af:24:57:41:97:b4:57:57:49:17:77:95:2e:
23:22:f9:dd:a2:f0:70:77:00:ec:14:66:2b:81:da:ce:09:a5:
87:bf:28:ae:86:45:45:53:9a:99:c8:62:ca:4c:37:56:1d:ba:
bd:7a:1f:7b:fd:ad:dd:4a:9e:92:fb:6c:7b:a3:38:31:d0:59:
85:28:72:b9:10:6c:89:db:63:32:31:02:ef:65:c9:50:db:61:
a6:ca:3f:54:ae:43:ff:a4:eb:6d:60:84:c9:7d:00:34:c2:67:
b6:2d:94:0f:f4:b1:85:f9:9e:37:92:b2:75:c6:9a:a1:a5:cf:
f9:2a:5c:2b:65:a3:c5:22:bc:4c:ce:90:04:bc:d7:a8:e3:ad:
37:4b:d1:90:4f:cb:3f:19:c3:95:96:95:9c:93:4e:2f:6d:a0:
c6:0f:cd:39:00:db:1d:4d:51:50:bc:de:a1:b3:96:0f:f7:64:
31:32:02:ac:8e:dc:88:2c:f9:4c:88:3d:74:e2:92:c6:b0:a2:
1b:c7:42:fd:68:b3:79:8c:23:ea:f9:62:9f:c3:68:99:ed:e5:
7c:76:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:50 2025 by rpki-client