Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: g5IpxVQwee5Exbm2hxs9lajD6YtNgdnbeZfGveYEEaA=
Subject key identifier: C6:05:DA:72:CA:01:DE:F7:89:B4:BC:4C:17:9D:67:50:89:45:C0:23
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 0199FCC64B0B7D71AFEE2E981B50CE372A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0EBD
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: e2+hgHh9zIehv8VwM6e1gap92X5u+twvti1Vu2K7Gic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4b:0b:7d:71:af:ee:2e:98:1b:50:ce:37:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=c605da72ca01def789b4bc4c179d67508945c023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:92:41:e3:89:03:8a:89:72:c4:e1:e8:fc:
8a:09:f9:2b:9a:cb:27:82:96:bf:08:3b:f4:31:b0:
26:ef:41:d4:af:28:88:4f:e2:69:8c:25:4d:7b:47:
c4:bd:e7:05:3b:f5:ce:05:8b:ad:32:9d:ec:d6:aa:
13:57:82:43:d9:10:6a:13:c2:97:b3:b9:97:c2:23:
8e:cb:8b:39:7c:da:59:6a:77:4c:fc:07:1e:15:6f:
e7:b9:6e:3e:7b:d2:ef:9b:8a:94:26:d8:69:15:29:
95:a9:12:10:a1:4a:af:de:e1:44:7d:51:f1:59:0c:
9b:18:56:1b:7d:a5:5a:93:05:09:9a:6c:81:4b:6a:
38:af:7d:37:cd:f9:2a:58:b5:29:04:5c:ef:84:7e:
6d:5b:69:60:a6:3c:45:77:2f:0b:8c:9b:69:18:6b:
47:86:75:cc:3e:90:c7:55:e5:31:e1:50:ed:f6:e1:
a6:ed:be:48:b8:98:00:84:48:58:fa:e6:10:9a:33:
8b:38:e2:82:10:d1:48:84:1f:16:6d:d7:b9:4e:66:
14:11:2e:a3:0a:9a:34:ad:62:ed:04:3b:c3:36:48:
5d:08:05:20:50:fc:36:d5:60:d3:6b:4f:56:a9:d0:
c4:c2:e8:34:94:ec:3a:cb:d8:64:7f:1f:09:00:a0:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:DA:72:CA:01:DE:F7:89:B4:BC:4C:17:9D:67:50:89:45:C0:23
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:f9:67:28:ce:74:35:40:71:4d:1c:23:d5:16:a4:23:82:
cd:2f:6d:d0:31:4c:77:3c:f2:ce:0e:b3:66:e5:7f:f8:5f:b8:
cf:5b:6e:e9:f3:3d:15:89:3e:ec:9c:ac:01:ff:92:4d:26:d7:
90:82:53:98:08:b4:90:63:dd:40:36:67:47:be:e3:5e:b9:ec:
cd:97:0b:3a:08:dc:1f:59:01:0c:ca:a9:28:e0:a7:3d:fe:67:
e8:a0:f6:a2:b4:bc:b2:0e:3d:5c:37:ba:da:3e:da:a3:e4:36:
02:ef:48:94:1d:6f:2d:7c:a8:8a:9e:cc:40:59:17:6a:43:fb:
2d:59:d0:68:97:20:48:ae:ec:e3:f8:f9:e6:b3:19:5c:45:1b:
96:a5:a6:8a:00:e0:88:91:01:78:13:78:64:24:0f:f0:1f:1c:
df:5d:0e:b7:a7:94:b6:02:f9:d1:08:f1:74:81:0b:0e:85:49:
33:94:64:c1:74:a0:f5:c6:6a:47:32:47:0a:20:6a:cc:2f:e8:
cc:e2:d6:2b:0f:10:15:48:e4:e1:fa:db:0b:53:19:b5:93:fc:
f2:63:c9:c0:2f:20:6a:48:48:da:a1:fe:60:c2:4e:a1:ab:89:
33:73:6b:48:54:35:92:ba:60:d8:72:8d:ff:8b:bb:80:30:61:
2a:ec:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:03 2025 by rpki-client