Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: AERVMGatosmoPaHiFQmUrZoRjwDmPz9Ivktcd+64Y6M=
Subject key identifier: 54:7C:C7:85:F8:0C:BF:93:58:39:57:52:9A:DF:7E:B6:21:42:D7:E2
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019A4EF4E2546E08A28112222040A9E0EFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0BAB
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: qcH6SVbWLjsVtREkjSRVfHvudO01IIPr8+o97Ja/lcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e2:54:6e:08:a2:81:12:22:20:40:a9:e0:ef:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=547cc785f80cbf93583957529adf7eb62142d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:d7:fa:60:5a:f6:6f:74:bb:4f:4b:14:30:
f0:18:12:a7:8a:48:b6:3d:95:e1:1d:46:4a:8a:d8:
9a:59:ae:49:4d:0b:03:87:d8:7a:2c:c1:ef:06:2f:
be:57:ff:c8:2c:da:59:51:20:78:94:50:53:e2:45:
e5:03:69:34:19:4d:65:02:42:98:5c:92:2d:2e:61:
1e:a8:8f:27:16:45:92:3f:db:d5:eb:d8:55:4c:79:
14:d8:b4:6e:20:42:31:26:e3:aa:58:f9:16:78:77:
45:c4:8d:fa:ab:84:8a:90:80:f4:3f:41:05:17:50:
87:fe:b8:d7:b4:c1:ab:36:9d:7c:ae:fa:9a:08:87:
f3:2e:74:dc:5e:40:d5:66:31:6a:c5:a5:9d:23:0e:
b5:dd:d2:e5:2f:6a:ba:72:a1:81:2e:72:73:62:b6:
bf:08:23:c2:39:9b:01:e6:db:22:38:79:d9:52:a7:
f0:0a:da:c6:44:1e:6b:cb:19:8a:64:56:f0:8a:b7:
90:74:04:e6:a4:b4:89:ca:b2:14:04:4c:2b:e3:85:
4d:57:bb:30:d7:34:0f:58:9d:12:a4:7d:ee:d6:85:
1d:8e:1f:fa:d1:27:6c:1b:b2:8f:8a:46:57:84:a7:
a1:fb:96:ce:15:4d:1e:bc:e6:cb:db:d7:cb:dc:92:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:C7:85:F8:0C:BF:93:58:39:57:52:9A:DF:7E:B6:21:42:D7:E2
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d7:39:25:16:e9:dd:d0:1b:e1:4e:fa:31:a2:17:f0:25:c2:
d1:07:b4:4f:f4:98:e2:e5:4d:c5:d7:4d:6d:64:c3:9c:49:a3:
a4:9a:39:ad:76:4e:68:a0:93:dc:44:fa:f2:af:45:7a:b2:9e:
68:e9:1d:ae:69:ff:b6:0a:68:7e:8c:b5:3a:4a:4c:a5:00:61:
41:d7:9e:c1:9f:4b:6a:a7:da:07:2d:43:a4:3e:63:94:87:03:
19:31:bf:92:52:56:83:e7:a5:98:68:fa:76:f7:65:f6:d7:bf:
69:d4:ba:41:4f:02:99:8c:70:86:01:cc:08:ff:6a:d0:04:7e:
e9:a8:18:e3:41:cd:f0:89:39:10:04:ad:98:d0:a8:a4:84:98:
42:2f:48:b4:19:e4:b7:05:cb:65:bd:cc:35:bb:f4:99:ae:09:
bf:7a:7d:23:2f:1c:c7:11:a0:da:2e:c5:25:b2:c8:4c:64:7c:
d6:e1:87:a5:43:f0:c1:cd:be:86:5a:5a:d9:f8:fa:5f:80:55:
b2:97:25:8d:a2:0f:2a:70:e0:c7:68:00:38:0e:88:15:4c:11:
9f:1d:fe:23:1a:64:f9:78:41:dd:a1:44:ef:05:4f:28:61:23:
ab:74:69:f5:fd:6e:7c:41:1c:5c:44:90:52:45:4f:2a:c2:8b:
d7:14:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:28 2025 by rpki-client