Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: tzf4ZIgHy19M9iKoipMqKmcb8unPDtzLX90NRCmTSJI=
Subject key identifier: EB:FA:A4:DD:AD:0F:32:95:DC:09:40:E3:9F:98:CC:F6:81:B4:A5:F9
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019A51510A5A2FA4D147E8423C4F81E0A5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 07A9
Signing time: Wed 05 Nov 2025 00:00:56 +0000
Manifest this update: Wed 05 Nov 2025 00:00:56 +0000
Manifest next update: Thu 06 Nov 2025 00:00:56 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: A6WwGvkM5TAvsYLpkvl6+HbNc1qZvNW29ouY1u9tyDM=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:0a:5a:2f:a4:d1:47:e8:42:3c:4f:81:e0:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Nov 5 00:00:56 2025 GMT
Not After : Nov 6 00:00:56 2025 GMT
Subject: CN=ebfaa4ddad0f3295dc0940e39f98ccf681b4a5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:a4:90:07:87:ea:7a:cc:d7:8b:44:7d:ed:
75:1e:3f:57:b7:5b:7f:32:28:00:4b:3c:2f:5f:92:
47:32:34:f4:6e:bd:e6:9a:66:b9:f3:b1:18:59:54:
0c:3c:3f:28:21:35:56:2f:e0:52:c7:bb:ea:46:ad:
b3:fe:71:e9:e3:96:f9:95:e7:89:3b:d3:75:4a:70:
e7:c5:49:0d:21:f1:66:ae:d4:af:14:aa:b3:3e:57:
38:7f:18:f4:07:f8:79:c4:5c:3c:7e:3c:f9:cf:cc:
4c:50:49:fd:bd:80:69:fb:87:02:e0:98:33:68:a0:
5f:eb:be:47:1a:0f:cb:64:f8:da:76:43:ea:ef:42:
d0:ed:8a:55:61:36:06:b1:1d:c9:76:b3:d4:78:25:
b7:5f:c4:20:7d:9f:45:87:ad:77:f2:e4:81:1a:c0:
00:24:c6:99:77:a9:57:45:0f:c0:73:37:ef:93:0e:
f9:4c:9f:16:61:04:5d:81:1f:ce:28:4f:32:21:44:
94:cb:be:fe:be:e7:25:02:5a:98:f7:98:1b:d8:89:
5d:36:74:71:a2:af:fa:a0:13:a8:a5:ce:23:7e:d1:
f1:1a:1c:f0:b2:99:85:a3:85:a1:2e:da:ee:14:a9:
64:61:cd:b5:38:b1:5e:b2:e1:b5:09:e2:24:25:21:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:A4:DD:AD:0F:32:95:DC:09:40:E3:9F:98:CC:F6:81:B4:A5:F9
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:76:94:50:82:c8:f1:70:b9:af:b2:65:04:ca:06:e9:98:
60:b0:33:97:b5:d8:48:3e:5a:20:55:73:31:8d:58:5a:9c:06:
b7:90:4c:b3:60:d4:fb:f9:fd:87:54:cd:34:35:0f:75:c0:ec:
28:66:1e:5e:e2:5c:a6:ec:02:c5:31:3d:be:e8:63:d1:0a:9f:
25:be:49:cc:5b:5b:92:6a:f1:7c:ee:e5:f0:e1:aa:ee:16:11:
a1:a3:a9:b0:83:ab:30:9e:08:3b:37:b3:3d:e3:c9:1f:da:b3:
9b:2e:dc:fe:de:7f:05:c3:d4:4d:88:3c:38:43:70:7e:2d:9e:
26:78:fe:f5:c0:3b:67:03:1f:fd:b7:d1:b5:3e:a4:1d:1d:a2:
76:50:f2:56:07:26:4d:8f:32:83:d4:a2:97:b0:f6:3c:c3:dc:
a1:7c:51:a9:81:fd:62:40:5f:03:f1:88:ef:0a:88:3c:96:0e:
ec:b9:85:78:94:ab:96:16:7b:93:c1:8b:19:50:3c:8e:e8:31:
6e:66:54:ae:ee:7e:0d:f0:2c:ac:05:b0:c1:15:b4:59:72:d4:
07:4e:7e:d0:14:d2:43:a3:0c:49:78:af:0b:0e:da:a2:13:19:
68:72:ea:be:ba:18:d3:8d:c3:4f:49:72:9e:86:ad:36:ca:f3:
ca:cd:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:41 2025 by rpki-client