Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: ChupWOMXRUP8JPz+l9Ow4g2QxLoXpDMAlRqV6r+Urx8=
Subject key identifier: F7:C8:A6:04:85:35:F9:A9:D3:42:82:B8:E0:1B:90:A0:00:5C:CC:94
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019A5006D76F9250E5F3EFB410B3BA5469E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 0E00
Signing time: Tue 04 Nov 2025 18:00:16 +0000
Manifest this update: Tue 04 Nov 2025 18:00:16 +0000
Manifest next update: Wed 05 Nov 2025 18:00:16 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: 2Km1rbOWjdmQjxfVEqPIM8bI/NXyeNU1ely4zhE5oWw=)
2: wUSVu8lDNfoUWdaRO2jsDgRSmsg.roa (hash: A2CVwSparFGjp8/uMP7BcSnzpGUx0FpocYCZqqW30C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:d7:6f:92:50:e5:f3:ef:b4:10:b3:ba:54:69:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Nov 4 18:00:16 2025 GMT
Not After : Nov 5 18:00:16 2025 GMT
Subject: CN=f7c8a6048535f9a9d34282b8e01b90a0005ccc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:64:e8:6f:e0:3d:b7:72:01:c1:0f:7b:49:
ba:c9:c6:6f:80:d1:a9:20:6a:75:2f:f0:3d:e2:7c:
90:73:03:ab:d8:ab:d3:bf:f2:7b:4a:c5:60:80:bc:
f2:0a:d1:89:a8:15:24:ec:6e:b6:ca:7c:e4:c4:33:
99:44:3d:48:da:77:96:45:96:31:3f:1a:21:d9:c0:
d0:7d:83:a7:95:e3:77:75:64:68:5c:18:fb:c9:84:
91:af:52:23:82:ef:7b:8a:fa:cc:ce:ee:43:1c:3e:
b4:c0:fe:8e:a7:bf:e9:22:96:b3:7f:ee:09:09:5e:
97:4a:bd:bf:18:0f:66:2c:7b:36:5d:2b:f1:12:67:
68:bd:0d:6c:21:7c:e7:bb:53:84:bf:4f:7c:7d:24:
5b:22:8d:c4:22:0f:1d:5d:3b:d2:ae:e5:33:39:a2:
48:03:d8:6c:61:48:fa:ac:3e:1c:d9:fd:3a:b0:d6:
3c:98:f0:e2:6c:2d:6e:56:da:f5:ed:46:d5:1f:32:
07:53:a9:2f:4b:1a:eb:81:48:63:d1:4e:29:0c:70:
2d:2f:db:23:c9:d5:84:fe:d5:a9:85:1a:2a:72:7c:
2a:95:8f:9b:6d:2c:ff:a9:42:08:29:40:47:2a:d4:
60:20:12:20:af:ef:8f:f1:c3:3f:e6:22:9d:a6:ee:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:A6:04:85:35:F9:A9:D3:42:82:B8:E0:1B:90:A0:00:5C:CC:94
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:70:af:fb:e4:70:d8:fb:ad:50:3d:48:af:f2:5f:a5:e8:
d2:ba:14:a7:8c:77:d7:c8:6d:77:25:6c:ef:fb:7c:de:14:b8:
20:a3:90:47:3a:82:86:c9:c9:4e:d4:46:14:28:43:ee:6b:87:
ca:a8:da:1e:14:e6:90:77:31:7f:3f:81:b0:1c:f4:e9:82:ff:
42:1b:19:ba:0f:8b:d1:bf:6c:23:eb:39:11:18:06:cd:7c:fc:
fd:58:d9:31:1c:0a:a6:02:f9:c7:a8:33:af:80:15:cc:33:e1:
1c:e4:28:12:30:1c:27:91:31:73:de:aa:d8:5e:2f:78:44:9b:
9f:59:6f:29:77:f1:a4:e0:bb:0e:43:9b:7c:cf:da:dc:18:db:
14:ba:7f:fe:fe:77:02:28:cf:a3:3b:51:e2:d9:59:19:3a:44:
d2:0d:ec:21:0f:27:97:1b:03:e5:5f:2c:6f:53:e3:6c:cf:b4:
c2:01:a6:5f:4f:b8:3f:d4:ec:db:8a:d4:8c:f8:54:54:3d:c7:
af:c1:a5:c9:db:4c:87:83:9f:9f:5d:88:ff:17:dc:9c:61:50:
a7:a1:ee:75:75:88:ec:7e:d0:cf:ed:2b:1c:a1:48:62:44:c7:
34:87:0f:d3:c6:e4:d6:9c:de:9a:f5:da:60:76:ca:a6:af:16:
4d:dd:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:30 2025 by rpki-client