Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: E7AFxoXruEK6BVm20Z5dSvLs6Mmw0+aE0Zno36BIWDM=
Subject key identifier: D0:89:2E:9B:3D:DA:28:F6:CE:A5:FF:2A:62:F1:7E:94:6F:B4:F0:71
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019A00350810D8AB92F5223B2D9D5BAE5C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 133C
Signing time: Mon 20 Oct 2025 06:01:06 +0000
Manifest this update: Mon 20 Oct 2025 06:01:06 +0000
Manifest next update: Tue 21 Oct 2025 06:01:06 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: OsX6yll7iohcc7K39tPSVZ/74Oiu7bAQEKsbXXf0MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:08:10:d8:ab:92:f5:22:3b:2d:9d:5b:ae:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Oct 20 06:01:06 2025 GMT
Not After : Oct 21 06:01:06 2025 GMT
Subject: CN=d0892e9b3dda28f6cea5ff2a62f17e946fb4f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:49:de:b6:1b:50:2c:5e:08:a9:7a:f0:f8:
a8:e6:7d:97:15:29:c3:e6:26:e9:61:78:d5:72:c7:
a6:e7:cc:f6:71:62:81:37:83:21:6e:7e:43:27:34:
d3:b2:a1:f6:75:b4:b3:d0:c7:88:f7:8c:f2:ea:f7:
cc:2b:77:6d:6c:5c:23:c8:c6:67:51:0a:11:96:af:
25:4c:5a:81:30:87:42:09:88:06:1a:72:ad:5e:55:
6c:3f:12:a9:2e:5a:1f:1e:94:d9:92:f8:21:03:07:
1f:38:2d:5e:d7:a1:64:56:05:6c:5d:5d:6b:79:69:
82:30:3f:97:51:83:ed:e0:9b:6a:ac:48:9d:b3:29:
41:28:73:44:06:9f:03:47:df:75:a0:71:79:d4:e2:
2d:a5:44:e4:8b:f3:dc:b5:0b:b7:b6:83:e2:21:16:
5a:e5:95:9c:f8:d4:b0:26:48:59:ac:34:29:d9:a5:
a5:ad:16:18:63:2b:25:8a:68:3d:ae:d5:b8:60:dc:
e7:80:aa:40:33:6c:5b:37:1a:16:49:1f:31:07:c9:
3b:0d:e5:cf:60:de:00:00:92:01:27:f7:fd:6a:97:
d5:3e:78:2e:bb:9a:33:d4:76:48:73:35:46:3a:24:
1e:a9:b3:e0:5f:f1:6d:aa:22:e5:79:b2:d5:62:b3:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:2E:9B:3D:DA:28:F6:CE:A5:FF:2A:62:F1:7E:94:6F:B4:F0:71
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b2:c1:45:08:db:8a:b0:c7:61:08:9b:1f:b0:ce:7f:a3:99:
22:6c:fa:45:38:02:88:f1:9c:f4:91:d7:b1:4b:7f:8e:65:2b:
5b:91:17:43:37:08:b8:3f:2f:cc:6e:c0:bf:18:76:9c:43:91:
36:fb:cd:1f:4f:cc:2c:00:6e:5f:cd:09:6e:b2:9b:68:71:f4:
0c:ee:8f:57:7e:fd:21:bf:ea:50:ba:0f:69:b4:0e:a7:f6:a4:
75:6d:2d:59:87:7a:3e:94:ef:f8:b8:57:2f:b5:e9:a5:32:47:
4d:65:07:92:67:d3:2c:c5:54:2b:87:ba:86:26:68:d2:88:23:
90:9b:24:56:1e:f4:3b:92:59:db:a9:8e:c8:d9:1f:e9:c8:a0:
9a:a1:2f:1d:0f:02:2f:f2:b0:d3:ae:01:b0:4d:ff:e5:f6:14:
1f:ee:df:8a:d9:c3:59:74:37:43:fd:be:55:3c:3f:44:5b:76:
47:3e:4c:9d:fc:58:0d:d9:60:c3:be:a3:ce:dd:87:65:41:6b:
f2:8d:a3:19:fb:c0:58:97:a4:7b:e6:c2:a9:4e:07:33:f9:cf:
c5:00:a2:45:87:47:a1:af:72:60:5b:ab:12:c6:5c:bc:de:08:
3e:89:4e:1b:7b:07:80:1b:b8:99:bc:4d:1e:64:b4:35:20:1f:
04:6e:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:44 2025 by rpki-client