Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: EqAQZkj5LyYeCsSAJjW4srSuq0RyehrCAKebQTfynAk=
Subject key identifier: 06:C8:6C:BA:F5:62:51:64:12:F8:0E:6E:FE:FD:B1:A6:88:75:D5:FF
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019A51BE7ECC26A7E242BF2D1A4862E20C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0EE9
Signing time: Wed 05 Nov 2025 02:00:30 +0000
Manifest this update: Wed 05 Nov 2025 02:00:30 +0000
Manifest next update: Thu 06 Nov 2025 02:00:30 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: F9D5hR33YYn6L0ad9iEaWNLH028ub+EQc+1I/9NuhjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7e:cc:26:a7:e2:42:bf:2d:1a:48:62:e2:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Nov 5 02:00:30 2025 GMT
Not After : Nov 6 02:00:30 2025 GMT
Subject: CN=06c86cbaf562516412f80e6efefdb1a68875d5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:1f:07:b4:12:1d:61:af:ca:a0:01:25:69:
b5:1a:d1:cc:8e:4a:54:1c:24:05:66:2c:1c:a2:db:
0d:4c:24:87:88:e8:01:1b:9b:95:9f:4f:67:46:03:
c8:f5:20:e0:6f:9b:da:18:ba:d6:00:6e:13:98:ac:
5d:c4:c3:11:2e:5c:21:69:ae:db:b1:72:36:a2:0f:
9e:a3:6a:80:69:ed:bd:89:08:ed:ad:21:3e:6b:ff:
d8:e5:d1:68:f8:f0:4a:8e:4f:aa:fc:26:e3:4e:23:
99:05:8b:40:28:21:3b:7c:c6:54:b0:9d:a7:72:b8:
72:8e:9b:b5:6e:57:1a:24:8b:b7:6e:9a:36:d1:de:
b8:89:84:56:2f:eb:53:3b:44:ad:f6:c3:6a:fa:1c:
4c:ff:82:03:3f:c5:45:21:e7:1a:17:1a:26:30:79:
17:6b:a4:4b:f8:bf:b5:64:35:c8:2c:d6:d3:29:be:
d8:a8:6e:54:00:fc:b5:37:b3:15:49:f2:1e:04:cb:
eb:bd:c5:69:56:4c:5e:bb:a6:1b:1d:84:ca:ed:07:
20:30:d6:15:a1:53:f0:49:f9:a7:ba:e9:26:e1:9e:
33:e2:32:7f:2d:38:dc:19:5e:b0:f7:62:b2:04:f9:
48:69:a0:e9:b2:39:5e:92:b4:99:c7:14:8f:23:a8:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:6C:BA:F5:62:51:64:12:F8:0E:6E:FE:FD:B1:A6:88:75:D5:FF
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:be:24:48:d9:98:17:97:12:b9:ba:ba:af:c8:97:5c:3c:81:
cc:15:4b:42:8f:d3:65:96:5c:03:cb:78:ec:43:93:38:ff:68:
8d:fa:79:e5:4b:26:6a:65:3e:30:08:8d:c3:7f:e9:74:f4:d9:
23:75:67:2a:2b:9c:eb:b8:17:00:a2:da:19:91:15:d2:92:89:
0c:a1:11:7b:79:68:52:3f:de:67:1a:91:98:8b:7c:1e:36:64:
2d:e2:f0:63:9e:73:4c:21:1f:79:30:c8:b8:3e:53:70:fc:ce:
6d:6b:e7:f7:f6:53:8a:cd:60:b0:14:c1:db:38:28:a8:19:70:
ce:75:75:33:19:1f:67:f8:69:24:a3:62:48:a0:60:18:ab:07:
17:9e:51:31:75:10:21:9d:2a:c7:04:4f:00:bf:1b:ef:61:de:
ad:41:9c:74:8d:89:64:59:e4:b0:43:2b:a1:e9:7a:0f:9b:be:
14:bb:de:1a:ab:f9:43:41:af:e5:1e:e0:df:5b:83:bc:45:91:
df:b8:d2:a3:93:bd:a4:ff:40:c3:4b:ea:0c:8d:9a:6e:7d:f2:
35:0c:22:ad:65:e0:54:a2:08:5e:1d:83:c6:32:c7:e1:77:7d:
96:d4:c9:4f:2d:0c:5f:db:fa:c3:d0:5e:66:fa:61:eb:c7:f7:
46:a7:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:52 2025 by rpki-client