Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: wVWsXD5amg6RJf/8WI7BAOEBw76lG8r9P9aE5G2z7dA=
Subject key identifier: BE:FE:A8:58:22:23:E0:21:51:11:B5:AE:FD:8A:8A:70:76:4F:34:49
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019A4F98CF563575E3CA81D5AC0542334069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0E52
Signing time: Tue 04 Nov 2025 16:00:05 +0000
Manifest this update: Tue 04 Nov 2025 16:00:05 +0000
Manifest next update: Wed 05 Nov 2025 16:00:05 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: rfDshFRW6QJ47rL386UPhRFBtcmDZ0xqGHZMmzVG124=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:cf:56:35:75:e3:ca:81:d5:ac:05:42:33:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Nov 4 16:00:05 2025 GMT
Not After : Nov 5 16:00:05 2025 GMT
Subject: CN=befea8582223e0215111b5aefd8a8a70764f3449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:34:24:97:db:da:c8:bb:5c:9b:71:85:b1:
70:69:ca:da:a5:06:94:15:84:b8:10:11:00:31:53:
1c:58:b2:b5:89:54:5c:ae:9f:a4:87:54:18:4f:41:
03:a7:aa:ab:5b:f7:03:78:18:6a:63:c6:89:d5:de:
fd:27:54:c8:64:34:ab:6e:16:4a:13:77:77:a6:49:
c8:14:ee:80:ae:51:e3:1c:e5:6f:62:10:a3:a5:45:
c1:4e:7c:5b:5d:29:5a:97:70:2f:25:ee:01:61:ae:
ed:b1:7f:ab:63:39:66:bb:9d:54:e6:21:8b:51:95:
53:2f:9c:b2:95:53:3a:a3:a3:43:2e:bc:57:44:05:
73:c4:c4:38:9d:c3:a4:00:7a:c2:29:2f:5c:20:2f:
4c:c9:d1:3a:33:03:8f:ff:b1:c7:19:ae:4c:fa:57:
e1:d4:65:b9:77:ad:72:06:52:0f:e5:29:30:72:11:
46:d8:40:6f:e5:7b:20:22:04:92:2e:c7:ae:e2:a2:
7b:e8:40:74:3e:12:f3:b9:96:62:74:b4:1b:a5:63:
76:d8:c2:73:fd:f7:cf:8b:8e:fe:85:32:97:67:18:
cd:c8:d8:7b:b4:a8:e0:d7:21:f1:a2:0f:73:5e:0b:
59:f6:74:24:ed:95:37:8d:1f:71:e3:5f:18:72:59:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:A8:58:22:23:E0:21:51:11:B5:AE:FD:8A:8A:70:76:4F:34:49
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:c3:84:c2:14:96:23:41:49:6b:c1:88:f9:70:78:34:3d:
80:83:3f:d2:76:3d:3f:57:25:60:8c:2b:8f:a3:fc:e3:d6:f6:
ad:0b:53:49:6f:68:ff:57:b4:39:a3:67:0d:ce:03:48:93:35:
be:ac:3f:e8:ee:6d:05:1c:5a:68:6d:22:ea:d9:64:e8:77:cd:
48:55:55:01:80:59:a4:0c:62:b0:46:b0:00:eb:88:4d:61:9e:
99:7b:82:49:40:c8:c0:90:22:22:1a:e3:07:92:3b:e0:04:e9:
df:b3:df:03:ad:57:0d:05:21:b2:4d:e2:a4:ca:0b:3b:d5:be:
ac:20:38:14:2f:44:fc:8f:43:23:55:df:ea:26:2d:73:65:4c:
73:2e:db:9a:44:7a:67:5b:1e:af:fd:ec:8f:6f:e5:8c:a0:0b:
1d:10:0e:cf:7d:90:4d:fe:98:db:a5:6a:4a:da:d2:6a:30:35:
80:94:f1:6a:d6:c7:82:85:82:1a:c3:24:ea:5e:c8:37:65:18:
53:7c:87:e4:b7:42:fa:2c:28:1b:e1:db:e5:7a:1a:5e:60:26:
11:19:a2:21:c3:de:92:fc:0d:74:6b:6e:2b:ec:32:3a:68:ee:
08:43:96:9b:2e:54:6e:c9:ee:50:83:c1:6b:64:46:69:df:e3:
74:79:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:15 2025 by rpki-client