Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: TlC5gN8bkryGT9+2QhKydZZmDHLfQ2tGkzEgy4n1KEA=
Subject key identifier: 81:CF:35:35:85:BA:5A:7C:21:C5:CF:F4:F5:E3:F8:CC:88:1D:24:5D
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 0199FB7CAD906C3562368EA32E717D965B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: A5
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: +MJ8PlT6oGQXcNA4rC10yyqdNxG0YqaeC+ka3hLQobY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ad:90:6c:35:62:36:8e:a3:2e:71:7d:96:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=81cf353585ba5a7c21c5cff4f5e3f8cc881d245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:0f:13:ac:ac:63:eb:c6:a6:0f:ba:3e:83:
63:59:8b:ad:13:0f:fa:0d:a5:be:7c:ec:c7:d9:0e:
99:97:d9:3e:ac:c9:b7:4b:ee:5a:fb:01:7a:49:38:
43:6f:85:c2:fe:ec:ff:cc:17:23:61:7e:f5:0c:37:
d9:f3:38:59:84:73:a1:59:30:48:df:ad:10:d5:88:
93:cc:72:9b:1d:93:4e:23:41:d3:25:78:68:82:f2:
11:0e:1e:2c:95:bb:2f:94:f9:5b:41:d9:39:6f:4f:
79:85:b5:2f:d9:98:ed:5d:69:35:89:32:16:63:7f:
55:b0:9e:e8:cf:85:0d:d2:42:ad:f9:7b:70:22:79:
c8:65:d7:b7:70:44:56:d7:a0:58:4d:9b:32:da:cd:
03:49:82:7a:d0:3d:5d:14:1b:8f:6e:b4:64:db:1a:
2e:39:00:2c:68:e7:9b:8d:ac:f8:05:98:cf:f3:e8:
26:43:83:3a:80:44:32:2e:fe:95:b8:9e:9b:53:6a:
a0:b9:d7:1e:01:09:08:a2:d1:7e:bf:0e:d8:b1:12:
a2:27:b9:db:99:c8:6f:d3:c7:1f:02:3d:f1:28:20:
20:ed:16:b2:84:32:82:a4:cc:0f:77:6d:74:f2:38:
12:f4:73:3a:64:53:84:6d:89:14:2a:1b:64:a4:94:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:35:35:85:BA:5A:7C:21:C5:CF:F4:F5:E3:F8:CC:88:1D:24:5D
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:61:4c:b9:26:7c:d7:d4:94:9e:4d:70:ca:4d:5c:db:74:
81:65:fe:3b:02:58:80:cf:26:1e:6c:d7:92:c4:99:47:0e:48:
b4:36:3d:ad:b6:19:92:03:ea:e2:5d:57:ef:6c:85:10:07:88:
b9:03:fe:25:46:56:0c:da:93:f1:c7:ca:1f:f5:47:fc:81:01:
8c:4e:17:8d:78:2a:09:c3:f2:e9:eb:95:a4:28:46:d0:ae:d6:
d5:6d:c7:1f:eb:f5:d1:4b:84:77:66:86:01:e8:75:77:03:52:
d8:fa:ea:58:4d:3e:e0:6d:8f:0e:ec:75:8a:e6:e9:03:a0:89:
39:46:c3:dc:6c:6f:28:34:bc:46:a3:ad:d2:d9:89:86:2d:af:
c8:24:4c:7b:b0:d5:e2:a6:63:db:64:68:44:a6:df:a5:d8:24:
05:b7:da:e2:07:61:91:3b:49:6d:b3:7f:be:97:fe:4a:19:5c:
82:9d:1c:ce:e0:dc:75:e8:7b:aa:32:5d:49:5e:5f:86:60:f4:
2a:4d:8e:2d:21:54:3f:83:be:a4:c3:fc:46:5c:3b:70:b3:2b:
8b:e4:f5:ab:82:ed:99:6d:a7:b7:54:07:4e:a4:79:32:24:5d:
41:2c:aa:80:fc:30:c3:eb:37:89:36:ce:31:4c:fb:a0:a2:c8:
76:45:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:40 2025 by rpki-client