
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: ZTM/oUn3hxv13teZwwsqeNGwbI9CaY16wzCrUGMe7BI=
Subject key identifier: F3:40:B7:7D:35:44:DA:21:13:FE:AB:98:2D:5E:8E:ED:5B:4D:B4:4D
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 0199FEB52AF5680439D8C1629F8076EDAF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 02EE
Signing time: Sun 19 Oct 2025 23:01:49 +0000
Manifest this update: Sun 19 Oct 2025 23:01:49 +0000
Manifest next update: Mon 20 Oct 2025 23:01:49 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: kPx5Xdtnx7v+Lr1mKj6wQtdxQpz77GESnZxKxIcdElw=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:2a:f5:68:04:39:d8:c1:62:9f:80:76:ed:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Oct 19 23:01:49 2025 GMT
Not After : Oct 20 23:01:49 2025 GMT
Subject: CN=f340b77d3544da2113feab982d5e8eed5b4db44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:bf:3e:6e:d3:7d:1a:41:4e:9a:e8:24:8c:
44:ca:0b:8f:b5:84:d0:98:59:54:6d:12:da:fd:93:
dd:08:df:75:f9:3f:4b:dd:f7:51:84:b3:2c:1c:7e:
f3:fc:56:04:64:a7:e4:74:be:31:38:7c:49:bf:ed:
33:b3:56:38:1c:95:8f:9e:6a:8d:d0:41:aa:43:a2:
97:71:8a:2e:de:29:a0:44:2b:9e:51:c5:2b:00:61:
96:ee:60:b0:23:f5:df:b4:37:49:6c:0c:ec:29:f0:
de:1a:42:d5:21:2a:2c:5f:69:f8:ed:b3:89:74:e8:
83:70:35:64:04:b0:36:6b:3c:96:aa:ee:a6:73:83:
83:09:ba:6b:22:4f:3e:19:61:fe:38:18:60:24:b6:
a9:4c:3e:0d:20:79:1f:23:b6:54:a6:81:25:c7:13:
fd:72:61:3e:5c:8d:84:c4:a1:04:48:25:47:ae:78:
b4:f7:5a:44:29:9d:2e:ae:02:2b:67:08:b3:61:44:
7f:1f:db:89:5b:b3:7e:96:98:6f:3e:2d:bc:d2:a0:
da:36:b2:68:70:c8:82:1d:07:e9:3f:70:f2:92:72:
c2:04:32:b1:4d:e5:3e:a9:34:0f:bf:3f:1e:17:68:
2d:48:2e:19:17:b5:6b:56:c1:13:2e:08:2a:de:ca:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:40:B7:7D:35:44:DA:21:13:FE:AB:98:2D:5E:8E:ED:5B:4D:B4:4D
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:29:d3:83:e8:be:5c:bc:de:10:88:e7:b3:a2:b9:07:3d:
6f:6f:93:80:58:bc:1a:92:47:67:02:a7:41:2b:89:4e:4d:ed:
42:22:41:d1:89:5c:37:94:37:0f:a5:21:f5:57:a5:65:84:0c:
49:79:29:27:5a:8f:86:ee:d9:68:4a:ba:14:57:af:36:ec:f1:
8c:0a:2d:3c:39:45:83:87:f6:f4:03:89:a0:67:65:fc:6c:71:
f1:dc:b0:66:a6:13:49:8c:f7:63:58:96:f5:1c:20:35:f9:58:
61:4d:f2:f6:44:3e:76:2e:57:ec:a6:89:77:3f:1a:27:85:28:
33:96:78:d1:87:ff:31:f2:35:21:b0:52:9a:71:1f:fc:0b:38:
7c:5a:22:e2:3f:80:39:02:e9:ab:3b:d2:1c:79:b4:03:0c:11:
ac:c6:9c:be:17:b4:4a:11:13:27:dc:10:2e:bd:a9:75:a8:94:
49:ee:25:df:c9:2a:ba:b0:3d:86:bd:34:01:77:ab:a6:42:84:
6c:b4:d1:78:0e:be:39:8b:45:79:cc:35:dd:06:7c:11:13:4d:
2e:f2:aa:d4:77:b6:67:f3:41:5f:ce:43:2c:6b:7f:a0:c0:df:
14:26:9c:9f:1b:aa:97:35:6d:cd:70:6e:ba:07:fe:3f:b2:ec:
bf:81:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:19 2025 by rpki-client