Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: +eQ+ePsdt1VVZ161fZBTZka1H9nLJ5K9LPRcjJGKXc4=
Subject key identifier: A8:2E:DB:B5:BF:43:B3:48:C9:06:59:DC:6F:59:4E:39:E2:1C:41:23
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019A4E86AA387EAC29E4D4AF20B9FD8067C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0E53
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: KBuZV34j2RRpxjte9pVkICLHSZMogA1b3g8LpegvPEg=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:aa:38:7e:ac:29:e4:d4:af:20:b9:fd:80:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=a82edbb5bf43b348c90659dc6f594e39e21c4123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:59:21:75:09:bd:14:53:32:0a:88:5c:a4:
ab:4e:f6:f6:c0:3d:a2:fb:d9:4f:c1:65:32:b7:13:
bd:d4:2c:36:7d:6d:f2:0f:68:99:75:68:20:48:ed:
dd:4e:16:e0:a5:9e:86:ba:33:6e:4a:15:ac:c6:4d:
9d:40:33:5d:43:d8:1e:5f:8d:53:5f:4e:d6:49:f5:
1d:b9:46:e2:6e:6e:b9:76:83:83:ca:59:5e:53:50:
01:fa:f7:c1:a1:3a:66:de:3d:8e:b1:8e:f4:44:9e:
4c:84:73:be:5c:e3:5b:39:77:09:71:99:03:1d:10:
39:0b:a1:08:9c:1f:ab:9f:72:4b:cf:82:c2:a8:b8:
52:56:7e:4e:5e:29:98:aa:11:b9:c9:f8:38:0e:fb:
b9:5d:24:36:51:2c:50:fe:3b:8b:26:a9:00:82:3d:
44:f0:25:4f:8d:ad:7a:cb:84:f1:94:88:a3:2c:3e:
c3:87:c5:98:53:5f:b2:63:87:d6:01:2e:06:9a:24:
17:82:e6:d7:14:63:9d:c8:b1:a0:9f:6a:48:3e:10:
cc:c8:d1:68:dc:66:5d:ba:91:bf:20:98:66:75:56:
ab:44:cb:57:aa:73:aa:cd:6d:55:63:27:39:45:20:
61:72:8a:d9:14:5b:e8:ce:fa:1f:9d:20:90:e0:f9:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:DB:B5:BF:43:B3:48:C9:06:59:DC:6F:59:4E:39:E2:1C:41:23
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:8e:b7:be:bf:6e:c0:f6:6e:28:86:74:c3:e8:1b:36:ff:
c5:ff:9f:78:77:74:0e:86:1a:bd:8a:1d:15:29:09:93:b4:33:
76:17:3c:67:a9:ba:5c:3a:32:f0:2c:fe:eb:17:09:14:17:31:
d3:1c:3c:b6:04:f0:42:ab:6e:f1:d4:58:83:c3:0f:1e:9f:8f:
4a:25:55:10:fb:ec:b5:05:1c:46:9f:fc:21:df:7a:42:b0:f8:
0f:71:09:ce:2e:13:d1:8d:ae:f9:78:72:62:19:5d:b6:bc:78:
20:3c:f4:40:a5:bc:d1:4a:75:39:6e:e2:4a:bb:00:5b:d0:c3:
78:72:d2:e9:0e:94:57:f9:b0:1d:e1:2c:86:d9:33:d2:5b:49:
a4:97:fc:6f:e4:8a:ae:16:83:4d:a5:3c:de:f2:f0:ec:ee:cf:
da:40:be:4e:2a:eb:b6:2c:90:15:54:d7:bf:b8:bf:71:4e:5d:
09:1b:3c:49:8a:67:05:e5:6a:1a:59:db:19:24:1f:2c:d1:d7:
d3:cb:77:45:48:8c:d6:24:5d:00:ab:9b:4e:6e:d5:c5:e8:6f:
54:86:d5:8c:06:63:47:93:53:50:94:49:8b:35:22:41:e3:ca:
d6:be:2d:48:b3:67:cf:bc:c5:1d:30:ea:fe:c8:b1:6a:7a:49:
dc:be:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:27 2025 by rpki-client