Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: KW84WJmA4Bc7xHO9S1QpLTdulsACw4CxIhIbMm1xwhw=
Subject key identifier: C6:46:3B:AB:E7:9A:02:6B:01:AF:06:19:5E:94:CA:8E:12:8D:64:C6
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0199FCFD6393E69ACFC8793A98024C0A04F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 1140
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: zhIhg3/KXjZkGSho4+Y5cigYfUSDmGV2S6v+RjAd3rs=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:63:93:e6:9a:cf:c8:79:3a:98:02:4c:0a:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=c6463babe79a026b01af06195e94ca8e128d64c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:67:f3:49:de:bd:f4:e2:8d:3b:da:55:bd:
d2:eb:65:be:15:28:34:82:97:66:c3:e5:ae:94:5b:
c8:66:9a:56:42:6b:0a:98:cb:d5:77:5b:50:62:5d:
8f:03:c5:72:99:02:89:1b:56:c2:8c:49:4b:cd:a5:
44:a3:92:22:06:dc:55:aa:69:74:1d:82:0d:4e:51:
20:bd:cc:c0:88:2b:4c:1d:cb:24:3b:66:f4:d4:fd:
22:31:46:73:39:23:a5:12:ec:4f:ed:b6:b7:02:b5:
b9:6c:ce:86:83:c6:32:83:ad:55:78:a0:eb:63:19:
82:5e:d2:9c:76:ac:01:91:4d:00:d5:e5:62:a1:d3:
8e:69:44:ae:9b:1a:af:df:7f:54:9c:6e:4f:16:36:
93:51:b2:3d:c5:4b:f7:49:fe:26:af:b6:ed:ae:1e:
ba:85:5f:f2:d1:0a:e4:c3:77:6d:58:e8:2b:a1:b6:
50:5f:17:eb:22:02:c2:23:6d:08:f7:7b:25:b2:66:
2c:8b:bf:93:7c:8c:5b:ed:96:6f:13:be:c3:b1:7e:
47:d9:90:85:8e:e4:46:f5:1c:91:af:41:f1:16:74:
d2:ce:ae:d6:50:54:ab:0f:98:cb:2e:35:7c:4d:2d:
83:be:03:48:74:16:69:d1:77:81:77:d8:5f:0c:00:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:3B:AB:E7:9A:02:6B:01:AF:06:19:5E:94:CA:8E:12:8D:64:C6
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0c:9c:6e:b1:32:20:c1:0d:32:54:30:59:55:81:f6:7b:f0:
95:49:d4:ba:74:30:ce:d3:23:23:5e:63:b4:5e:95:1a:b0:fa:
e1:f2:19:c1:c2:f8:8d:fe:b3:27:a3:3e:8d:1a:51:f8:2d:7a:
f3:42:e6:6b:97:56:74:60:df:68:cf:3e:41:9f:d1:8f:ac:39:
89:ea:d2:a9:25:99:36:aa:df:92:bd:78:2b:09:aa:79:c8:c3:
95:e2:45:fd:68:bc:fc:a4:0a:ff:db:de:09:f6:74:7e:76:52:
4a:33:29:e5:16:51:e0:4d:e5:bc:70:e6:4e:3e:d3:ff:ec:1d:
91:7e:46:db:c3:e4:15:fc:a4:c6:e3:e9:31:62:b0:b5:f5:31:
20:80:a7:b0:74:13:ec:b3:de:55:d9:0d:24:09:a0:2a:53:19:
ad:9a:78:d9:5f:c5:0f:e6:70:88:a5:44:74:82:92:75:ed:3f:
9f:17:53:6f:c5:f6:fb:ca:84:1a:87:1c:05:3a:c0:d2:bd:55:
a4:19:d7:6b:4c:54:1d:71:10:ce:bf:3e:65:58:80:5c:ca:be:
63:72:87:3c:93:57:27:17:20:28:d0:e9:93:93:04:80:d5:02:
65:eb:fb:d3:7f:02:f5:6d:76:09:fc:93:6d:77:e4:7c:88:81:
a6:f9:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:25 2025 by rpki-client