Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: p074pdHoLuvLmCYuKugkGB/PClOyxz5Xbiq0HuPW0Vs=
Subject key identifier: 3D:0F:AC:EE:DE:3E:F8:DD:A2:41:0E:09:9B:34:7E:32:75:93:BB:91
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 019A4F625EA67B14AD5B87E8697F81686C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 02F1
Signing time: Tue 04 Nov 2025 15:00:37 +0000
Manifest this update: Tue 04 Nov 2025 15:00:37 +0000
Manifest next update: Wed 05 Nov 2025 15:00:37 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: t4htVJXPpZiFfhUVE4cG8TfB+JTHSOg3GwTWh/Xio1U=)
2: u49LP2KZbug5chay4GBuyj76KF4.roa (hash: iitJr/xtGKA9fcThsDwdBfqlW1f+LjPeCOduA3NSE/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5e:a6:7b:14:ad:5b:87:e8:69:7f:81:68:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Nov 5 15:00:37 2025 GMT
Subject: CN=3d0faceede3ef8dda2410e099b347e327593bb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:13:d0:b3:9b:33:de:c9:3d:17:83:8c:c1:
1a:a5:e8:0a:b4:d7:68:2a:3b:86:5d:cd:32:ae:e6:
1c:49:d4:f9:5b:41:3d:f1:dc:e9:b3:a0:fe:e0:54:
93:5e:62:c7:0e:fb:a8:41:1f:f6:a8:05:d5:81:3e:
60:45:e5:b6:56:b9:d8:d2:8e:1c:97:dc:35:89:a0:
26:5a:d6:3e:46:e1:1f:61:8c:1b:91:72:cf:76:a5:
ee:ad:7d:ee:10:1c:77:61:d8:4c:53:3d:b0:31:80:
86:6f:f5:ce:f4:dd:50:2c:e6:65:44:de:7c:11:75:
ea:72:98:b7:3a:a8:1d:bf:86:96:bd:85:3c:89:a7:
03:0e:2b:eb:4f:66:81:f7:87:7e:90:b6:a1:8c:83:
dc:08:db:14:c6:4f:de:62:2c:89:ed:6a:3b:e7:b3:
90:d8:49:34:48:cd:9f:75:76:b4:8c:72:bd:39:4b:
b4:32:5e:49:08:53:ac:d6:4e:c0:24:b9:59:0e:00:
4e:e9:69:09:32:ec:56:ec:bd:e9:95:83:37:7d:48:
76:7f:07:cc:12:b3:46:ff:cb:fa:25:e3:e2:c5:6b:
1d:20:90:e2:0f:26:0b:c4:da:9a:bb:1f:fe:f8:96:
75:58:bf:2d:cb:9f:1e:45:24:e5:27:66:d6:49:87:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:AC:EE:DE:3E:F8:DD:A2:41:0E:09:9B:34:7E:32:75:93:BB:91
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:3e:2e:24:2b:d9:13:f5:79:da:85:2a:7a:cd:ea:83:e8:
72:8c:2a:fa:00:e4:07:45:ee:83:25:a0:66:fd:1e:2b:16:fb:
f0:91:a5:2d:f2:fb:f5:57:ca:90:77:c5:3c:f9:c9:f2:2d:f7:
3d:26:b3:b8:54:5a:a4:97:d7:4a:d6:48:d6:90:13:83:b4:7e:
3b:a2:cf:56:c3:e8:dd:2d:7b:d0:54:b1:75:ef:ad:b7:1c:8c:
20:a7:65:91:a5:cc:92:02:bc:29:4a:70:f8:5e:ea:69:52:b1:
dd:03:ab:30:1d:c6:dc:81:94:7e:40:f4:8a:af:44:76:8b:78:
ab:68:14:09:b7:42:67:4d:5f:27:1c:49:45:3c:bf:34:9e:5c:
bd:e0:e8:7e:48:39:a2:95:48:8a:2e:53:10:d8:31:cd:17:95:
90:9f:ac:a0:97:71:14:6c:fa:41:9d:70:d2:97:bb:32:88:df:
7f:96:0f:3d:e8:43:7c:62:38:c2:c9:f6:93:98:ec:8f:53:e6:
4c:12:38:51:23:ac:d5:43:15:23:93:fb:9a:90:e2:8d:2a:b2:
bf:c9:57:a6:38:6d:05:42:9b:21:32:01:a1:1d:29:60:00:73:
4a:6a:84:24:7c:6a:14:22:bb:3b:e4:30:25:7a:f0:88:82:f0:
04:bc:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:17 2025 by rpki-client