Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: P8gwGdacaj623dsB9Z5YiumAHMsx33yzNehB+S3lqxU=
Subject key identifier: 25:82:B9:42:A3:CF:E1:E1:41:13:88:D3:0F:37:E1:7B:93:95:F4:42
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019A5119CFD8905C25546CE69FA7371CDCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0CE7
Signing time: Tue 04 Nov 2025 23:00:37 +0000
Manifest this update: Tue 04 Nov 2025 23:00:37 +0000
Manifest next update: Wed 05 Nov 2025 23:00:37 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: YHW0gu0ajzP5Ux36X1DgpgOCFDGfyGoVe9juFI2NSdw=)
2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=)
3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:cf:d8:90:5c:25:54:6c:e6:9f:a7:37:1c:dc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Nov 4 23:00:37 2025 GMT
Not After : Nov 5 23:00:37 2025 GMT
Subject: CN=2582b942a3cfe1e1411388d30f37e17b9395f442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:89:9f:41:9f:59:13:d6:1e:b6:a8:fe:2d:
85:87:bd:81:e8:82:41:0e:42:da:a7:ea:80:06:ae:
48:08:d0:98:40:80:54:22:61:f8:e4:30:78:95:21:
c6:bd:b9:1e:39:5c:03:46:44:e9:57:3c:1d:14:1b:
8c:89:eb:ab:bb:05:4e:b3:ed:e1:ab:b0:5e:25:3f:
2a:0c:f0:60:b5:d3:6c:c3:04:0c:b2:f3:7d:51:94:
44:58:b5:66:5a:27:10:df:df:57:d4:87:81:66:69:
99:2c:27:9e:0e:9d:83:ad:d0:49:5f:e9:7e:79:22:
3a:3b:5a:f0:91:13:c8:47:41:94:4f:00:00:11:43:
8c:43:57:7d:8a:9f:19:1c:ba:bd:cd:00:d4:14:69:
ca:f8:b2:52:6e:30:ef:5e:6b:79:3f:f1:f8:94:09:
c1:14:65:f7:94:98:4c:d0:10:83:6e:fe:e3:d2:43:
e3:17:40:94:b7:c6:a0:d8:63:36:89:42:06:f9:96:
bd:64:93:0a:31:a9:4f:70:5a:a7:68:f1:eb:d1:e9:
dc:db:43:d7:3d:d3:74:ff:87:b4:1d:b4:93:4c:a1:
7b:c0:5e:8d:c2:ea:db:8d:07:27:56:01:6c:84:4d:
62:8c:c0:a3:f7:40:24:de:7c:a1:d9:66:e1:9a:29:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:B9:42:A3:CF:E1:E1:41:13:88:D3:0F:37:E1:7B:93:95:F4:42
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:1a:81:de:88:10:2c:40:6a:c9:3c:42:2d:4e:57:59:e4:
af:ac:09:b6:c9:38:42:7a:7f:99:6a:82:8d:a0:a1:b0:07:a1:
58:af:00:b0:0b:75:84:53:77:f4:14:63:80:3d:af:27:cc:f8:
3a:b0:54:24:9f:94:b3:ad:fb:21:0b:5b:45:77:47:35:10:90:
96:b2:c9:4a:20:89:aa:23:a0:44:1f:5b:0a:4a:39:f3:35:3e:
c5:9c:3b:eb:12:a1:e6:72:53:2e:e8:f8:94:66:5f:af:f9:48:
a3:46:a4:13:2d:61:6e:8c:31:97:c0:6a:99:f8:a8:ae:83:37:
da:56:4b:a6:ab:48:75:05:a9:72:c2:51:d2:c9:11:74:44:85:
7f:ae:0c:ca:29:71:25:50:eb:00:0c:c5:5a:65:8e:d2:c3:f6:
44:5c:d3:67:f1:d1:ab:0f:a2:ce:5c:5d:7d:dc:e8:b2:65:92:
06:f9:17:aa:2d:c0:24:ff:3d:b1:ee:d5:59:c9:ef:26:e7:e6:
1c:80:9d:1e:9e:5e:5a:ed:7b:0d:51:e1:ba:ea:b8:99:a3:5b:
cb:53:ec:48:6a:d0:3c:0f:4e:9d:f1:74:15:4a:7f:d3:41:b0:
da:6e:09:dd:99:4d:80:e5:98:6f:2d:e9:80:a6:47:93:5f:53:
cc:65:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:55 2025 by rpki-client