Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier: PZrvMz7kWKneQMsob9et7/v8nzdtYl368eq31V3CBrQ=
Subject key identifier: 3B:E4:72:45:68:8C:AC:4F:F7:CD:42:A6:0F:5E:EC:BB:95:A9:39:BD
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial: 019A50E2C7A227D020866D47AD623C93EC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number: 06CD
Signing time: Tue 04 Nov 2025 22:00:30 +0000
Manifest this update: Tue 04 Nov 2025 22:00:30 +0000
Manifest next update: Wed 05 Nov 2025 22:00:30 +0000
Files and hashes: 1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: sN3kNF+aZcH5+u+hAl4HtlIHNj17RcpZocyBMXBgg9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c7:a2:27:d0:20:86:6d:47:ad:62:3c:93:ec:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Validity
Not Before: Nov 4 22:00:30 2025 GMT
Not After : Nov 5 22:00:30 2025 GMT
Subject: CN=3be47245688cac4ff7cd42a60f5eecbb95a939bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:82:70:56:f2:d0:9e:f9:bf:d3:88:f6:b0:
ef:c2:34:32:18:46:7c:0e:a3:03:67:6d:cd:63:5a:
12:48:37:79:14:43:f1:77:ba:ed:a5:25:37:17:d2:
64:72:82:d0:31:eb:d1:86:82:c4:46:01:3e:f5:b6:
e0:b6:7e:29:53:f0:4e:4e:16:1b:ac:ca:4c:aa:08:
45:a9:22:3d:65:bb:a3:73:b3:fb:7e:52:0a:d5:4f:
6f:30:43:f4:21:33:4d:72:75:8c:ef:9d:2d:7a:d8:
29:2e:20:fb:07:bb:de:1b:cc:ad:29:55:91:5c:56:
30:64:48:5b:53:51:dc:79:61:ea:8a:10:73:a8:75:
0e:68:aa:b5:f4:45:11:5e:93:2a:90:a3:d3:44:53:
a6:be:ed:2a:12:fc:fd:0b:47:20:8e:a3:2b:1f:f2:
fa:e5:20:2b:8c:18:ab:f4:c1:6a:67:7e:50:5f:69:
e7:a9:1b:64:33:74:80:2f:16:dd:bc:5e:de:28:7d:
52:6d:fc:0c:6a:ee:ea:77:e9:31:ba:7c:3a:ff:24:
c5:44:ab:ec:ca:41:19:cb:8d:29:3c:70:93:a1:01:
de:e2:77:8c:26:13:96:0a:08:af:a0:fc:fb:67:be:
9b:e8:89:40:f2:63:73:02:50:e3:88:dd:8e:07:81:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:72:45:68:8C:AC:4F:F7:CD:42:A6:0F:5E:EC:BB:95:A9:39:BD
X509v3 Authority Key Identifier:
keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:8f:d5:a7:83:65:32:dc:72:a6:1b:50:79:0b:8a:10:6c:
83:50:f8:94:1d:39:95:b1:52:95:61:53:94:ca:ca:fb:60:8c:
7f:8f:c7:e9:b5:5c:eb:52:f0:d6:d6:84:2a:7e:58:42:32:25:
3e:6c:de:b1:90:d7:df:1d:d1:cf:10:77:9f:cc:72:fa:56:c6:
b7:13:82:3c:df:20:88:de:54:d7:d6:f8:9a:30:87:d0:10:0a:
f8:b1:6f:41:34:e2:5a:66:d9:9c:b4:26:26:07:80:38:e7:93:
37:45:7e:03:a9:c3:e1:47:5a:c9:4d:78:f0:9a:87:1a:58:72:
02:6a:82:7c:41:d7:9f:03:85:fc:2b:10:a8:a1:ec:d7:89:d4:
c2:64:be:b6:2d:b9:c9:e1:ec:a8:2b:1b:af:bb:18:b1:f2:99:
3e:bf:53:cf:70:01:26:fc:bc:f2:d7:27:e9:af:6f:7b:b1:2d:
d9:e6:e1:23:c9:ed:13:f3:79:26:a1:41:20:7f:50:35:2c:8b:
e5:b6:99:4b:22:90:d9:9c:1b:cd:a0:74:f3:0a:c8:9f:a9:72:
34:83:c8:57:fc:10:86:02:1f:0d:5f:81:ae:06:7e:a0:b6:32:
4b:d7:67:57:63:62:41:cb:04:13:f2:ba:88:22:ff:c1:ed:6f:
c1:5f:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:41 2025 by rpki-client