Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: FyZMu2TlwX+xucXy4RBLL6A6mpqPI53fDy1jRwFh4OE=
Subject key identifier: 29:E7:1E:62:2E:02:42:DA:2E:58:0A:23:D0:31:DB:3D:DE:B8:FB:14
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019A4EF5BDBC8404FEA0433B2D0FD95CD3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 14FD
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: +E9Txzr/f8cAMPab9N8gM1gJ6/QpE9gNLQzHmH+5SQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bd:bc:84:04:fe:a0:43:3b:2d:0f:d9:5c:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=29e71e622e0242da2e580a23d031db3ddeb8fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:10:e2:3f:0f:d7:de:8b:e1:a4:f2:d2:4b:
d9:17:91:5c:63:98:b9:fc:19:a7:92:65:9d:ef:db:
d4:60:84:44:31:5b:dc:42:e1:1d:38:7e:36:c4:f0:
d3:7b:3e:b2:91:96:b8:fb:70:ed:ad:7b:9b:35:25:
0b:66:a7:6b:69:ba:44:9b:ae:e7:c5:3a:2a:8b:2d:
4e:c4:da:17:23:c4:22:87:e6:c5:94:e1:dd:e0:74:
f0:95:50:ba:fe:1d:26:24:24:5c:c6:56:77:f3:a9:
08:fb:a7:9d:85:f6:33:06:16:89:4e:94:e0:57:e4:
d0:c3:7f:bb:34:c8:4a:97:05:aa:03:d0:9a:ac:82:
2f:13:33:09:22:4c:74:be:f1:44:44:1f:ef:f0:84:
68:f0:c7:a6:80:7a:12:4b:0d:8b:26:6d:83:ca:70:
cb:22:4d:0f:07:29:03:1d:a7:ee:7e:b0:92:7a:a4:
98:3b:81:d3:0b:49:43:93:3f:9c:8d:8a:70:11:55:
78:25:76:05:4b:8c:cc:05:04:09:b7:89:87:3f:cc:
51:13:07:81:a3:21:bd:9c:65:d2:89:ac:8e:07:5f:
22:77:c2:4f:91:5b:7d:2b:ff:d2:e1:98:8e:02:81:
7b:03:91:49:44:55:72:93:3c:fa:ff:74:10:94:11:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:1E:62:2E:02:42:DA:2E:58:0A:23:D0:31:DB:3D:DE:B8:FB:14
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:28:4a:d3:71:da:b4:a2:b4:b2:1a:0d:1c:01:db:3b:18:
a8:5c:ce:99:2b:3c:40:74:5e:ce:bb:c7:f8:83:21:3c:71:db:
5e:fa:62:69:a0:26:f1:1d:af:69:e3:0c:47:a8:ab:50:04:b4:
24:1a:09:3c:41:87:61:8c:b4:32:bd:0c:c0:ea:7a:2e:eb:b7:
2d:b4:df:47:23:20:3d:c2:60:b1:83:04:14:36:33:a9:f2:5a:
da:a3:67:84:52:ea:f0:18:d2:a7:4f:9a:83:51:dc:46:76:ce:
9f:1d:da:cb:ed:db:db:5a:ba:a7:9f:13:d0:27:70:e6:ec:3f:
ed:4e:9b:4b:fc:fd:4c:c2:68:7f:16:17:fa:54:ee:00:9a:f1:
49:1f:ab:50:50:ac:5f:3a:ec:ae:b8:39:71:ba:e4:bd:b4:91:
af:36:69:54:2b:8c:22:f9:70:b4:0b:56:f4:54:8e:2c:09:ad:
70:2a:7c:94:52:4e:f0:85:d5:8d:57:f9:ef:ef:60:07:07:d8:
6d:ab:9e:c5:98:63:a5:f8:7e:5b:01:01:1c:3c:44:15:d6:d6:
e1:c7:f6:15:ad:ef:52:ec:ac:c0:eb:58:82:13:e9:a6:0d:91:
d0:4e:1c:74:4a:dc:4f:cc:21:7c:76:61:98:b1:49:81:b7:67:
d2:f7:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:52 2025 by rpki-client