Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: nntGWnGNO+QFKP2EYqGYS8AW7r3F0qSAobvNzlBDOog=
Subject key identifier: D0:37:03:2A:91:67:2E:0F:08:2E:22:00:58:21:A7:5D:0C:30:51:A6
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 0199FD34446360BA2C9447A8141B91E685C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0B8A
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: fF1G7l++ehtDePk0wGTFwIOtFKvV8uKnHEs/S7wMooQ=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:44:63:60:ba:2c:94:47:a8:14:1b:91:e6:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=d037032a91672e0f082e22005821a75d0c3051a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:aa:6d:eb:d8:c5:75:ee:35:4d:3d:ac:1f:
d3:5a:3c:ba:5d:d3:f6:1d:7c:ed:32:32:d0:81:72:
e2:c9:9b:db:db:b7:1d:17:a3:44:d1:49:6e:51:1d:
bf:9b:e5:81:22:27:51:3c:5b:44:10:2c:79:3c:7a:
e4:99:38:84:00:18:92:4e:92:10:15:b7:b7:d0:6c:
dc:4a:da:e5:82:f3:1c:24:78:8c:31:71:1d:25:2c:
de:c7:b5:cf:c6:6b:56:88:77:61:00:78:5f:ce:1f:
a9:03:31:8c:88:bf:05:96:68:f0:51:2b:ce:3f:eb:
8b:f5:78:ba:fc:f4:ae:e7:89:2d:d6:2a:e8:37:37:
09:c9:cc:8a:bc:a0:78:47:29:0d:4d:83:8b:29:05:
08:ba:24:82:cb:00:ee:4b:71:47:dd:e8:45:6e:dd:
e6:77:89:f5:76:56:d5:25:0d:39:26:c3:69:46:4c:
9a:5f:c0:9c:d1:ab:63:99:1b:a5:02:47:0d:01:f9:
e8:20:02:14:26:be:63:6c:3d:e5:53:fe:7c:3a:81:
b6:a9:3f:65:ff:a0:c7:9e:1d:df:82:53:08:4e:6d:
97:6b:c4:f8:11:88:14:27:63:9b:b7:f2:e7:db:ad:
9e:1f:c1:d8:21:33:34:f9:e0:08:32:b1:ab:3c:3f:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:03:2A:91:67:2E:0F:08:2E:22:00:58:21:A7:5D:0C:30:51:A6
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:55:2d:18:d7:18:f3:9a:f3:14:ae:93:74:cd:f2:07:76:
e2:17:8c:72:ca:ab:ff:0d:82:95:89:9c:06:18:fc:53:e8:8c:
11:b6:6a:8d:94:3f:e3:fb:78:5e:d3:b6:0e:d7:1e:84:3a:6e:
fa:30:c1:51:64:c4:6e:3a:2c:3f:4c:1e:73:95:b1:bd:0e:4c:
e2:26:7a:d8:28:b3:ee:29:4e:10:ba:b2:ab:5e:95:63:fc:f9:
b8:2f:b0:0f:a5:16:ab:f5:54:84:7f:5d:a0:70:a6:55:d3:3f:
c1:d7:13:38:b3:49:29:6b:41:79:ef:fe:5a:1f:0c:dd:d4:06:
12:7b:ed:30:9c:68:04:c9:93:4e:71:e4:b0:3a:a9:e8:ff:09:
03:26:a9:7c:65:da:70:c6:14:6d:81:db:f4:3d:32:4b:7f:4a:
d6:bd:ba:eb:00:49:fe:62:54:84:c6:cf:2b:cb:56:c9:ed:7b:
f5:72:81:de:54:ab:da:fb:c8:0d:6e:21:87:69:68:af:07:5d:
fe:e7:d5:ea:9d:c7:f5:6b:33:c3:b0:67:48:87:80:2e:2a:88:
04:14:09:3b:81:15:b7:1a:4c:d1:1b:a2:d8:07:35:0a:fc:db:
b2:5b:4a:0f:f0:af:9d:40:3b:0d:0c:bc:44:4f:bb:03:f8:20:
6c:68:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:35 2025 by rpki-client