Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: RozdTlfpOgOLEuOycKkRZ7FIdLw9W16Hem8jcJtcOJs=
Subject key identifier: 97:0D:16:7A:0A:1D:19:91:1B:4B:E1:30:D1:CA:68:1D:FD:23:62:01
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019A533F6BD7D81669DD17ADA9DC397A0B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 09:00:56 +0000
Manifest this update: Wed 05 Nov 2025 09:00:56 +0000
Manifest next update: Thu 06 Nov 2025 09:00:56 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: QJ1VzzvdiSjjUt8d9+jDvxibYq4SQ+mfkBlRq+yC48o=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:6b:d7:d8:16:69:dd:17:ad:a9:dc:39:7a:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Nov 5 09:00:56 2025 GMT
Not After : Nov 6 09:00:56 2025 GMT
Subject: CN=970d167a0a1d19911b4be130d1ca681dfd236201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:12:85:e8:23:63:5a:a9:5b:bf:27:a2:1d:
0c:60:3a:05:09:0d:f9:39:87:7a:c8:aa:a3:3b:42:
dc:88:df:95:c5:bc:d7:4d:0d:84:7e:dd:be:4e:6e:
18:25:11:57:f7:3b:86:31:18:52:22:7b:ea:15:64:
2e:95:2d:a6:88:3a:43:21:6c:be:72:db:fb:ae:e1:
97:38:75:74:0a:2e:6e:ca:ba:e4:c3:ef:db:c3:2e:
45:e1:3d:e6:8c:5b:50:0d:3f:3e:5f:84:e3:c0:29:
38:91:be:21:f4:4f:d4:5c:4b:96:f8:68:57:54:c6:
8f:41:14:bc:47:34:f3:ab:72:51:a6:8a:84:ee:27:
fb:12:6e:2c:e5:bc:08:13:d3:0b:f0:4d:7a:0a:96:
01:9a:de:54:fb:ed:50:e2:69:8f:0a:c3:d2:34:8f:
d7:59:52:c6:6f:6d:b7:fb:1c:87:25:af:21:7f:08:
43:e4:52:33:bd:3d:a4:d9:fc:48:49:ee:04:2b:6d:
84:ed:a8:f1:9e:2e:3a:a4:47:3a:6a:3f:0e:24:96:
2b:9b:9a:07:6c:70:1e:44:2a:f6:4f:cb:a6:80:0c:
9a:3d:fa:d7:80:a9:c5:32:94:70:0c:b3:74:68:63:
f1:f0:05:76:2d:c9:2d:81:e5:e5:aa:6c:09:fb:61:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:16:7A:0A:1D:19:91:1B:4B:E1:30:D1:CA:68:1D:FD:23:62:01
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:dc:d3:2d:89:29:c6:b0:d7:48:e8:30:a7:8d:44:11:6f:
70:fb:ba:52:89:0c:31:0a:d3:8b:b5:e3:7c:96:0e:6c:b4:7f:
9e:e5:f6:81:c2:28:e1:6f:87:e7:7b:4f:0b:77:00:86:2e:97:
06:f4:2b:5a:2b:7c:96:30:94:8d:c2:50:9c:e8:63:3d:14:d6:
85:94:9f:d4:c5:da:64:15:63:b8:27:31:ce:f5:9f:1d:a6:b3:
b4:fe:18:c3:f3:fa:bc:53:fd:e4:22:36:b1:ad:8e:58:9f:31:
ae:f0:cb:6d:75:59:ba:9f:c3:43:f7:67:84:3b:bb:42:55:f9:
e2:11:a5:21:6f:32:e6:c4:b0:6e:d0:67:3a:f1:ec:2c:78:b3:
dc:f0:8a:f4:f0:ad:46:05:df:2a:16:4c:ae:24:61:06:14:58:
66:c3:e4:c6:70:2d:e8:11:db:3a:e2:18:85:59:c5:47:75:f0:
40:89:00:1d:17:f9:d7:b8:69:94:4a:5d:3b:a3:b6:56:26:47:
0f:7d:a4:5a:a0:21:52:68:dd:73:7d:38:17:93:69:d9:54:e4:
21:37:fd:80:d1:c6:b2:26:65:96:e8:68:3a:da:9c:f1:86:b3:
46:ee:5c:07:08:be:57:f5:be:3c:8e:7c:26:7d:5d:1e:72:dd:
5c:e9:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:34:51 2025 by rpki-client