Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: m2+A488zVnt4buQnX6RVYImIRLbhO5ytq8VVlKcgeEg=
Subject key identifier: 70:A4:84:73:15:CE:F7:6C:2A:C8:EA:15:01:DC:C7:25:E0:89:CB:73
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019A503DDCEF25C365E1156676E7A598A5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: DVWd9l1ol1ZTCgazRg2MywRfxOUUAOijV3sLSbYY3ws=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:dc:ef:25:c3:65:e1:15:66:76:e7:a5:98:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=70a4847315cef76c2ac8ea1501dcc725e089cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:35:08:5e:dc:9f:74:3b:1e:c9:6a:1a:43:
a9:89:83:0a:7a:73:fa:9c:f5:75:eb:bb:9f:ae:4e:
f9:60:6b:23:e6:69:30:a1:5f:6c:c5:0d:ad:69:da:
99:02:e6:cc:10:9a:14:97:ec:e7:9e:2b:34:47:1a:
0a:a5:03:ec:0a:26:b3:c6:e6:cf:27:7c:1c:ce:f8:
8a:d4:25:18:a1:10:62:00:14:d0:17:93:06:70:7a:
cd:58:19:53:61:75:fb:28:f4:9b:96:cc:13:4c:af:
66:26:9e:71:3c:e7:a2:fd:b2:f0:36:bc:d8:2f:91:
03:d5:07:04:1e:c8:6d:eb:71:d0:4b:e5:63:97:76:
c6:21:26:66:46:d2:64:f5:cf:4a:7a:43:7f:02:3f:
eb:a6:7a:e0:92:93:a6:ad:6d:b0:38:18:ef:20:20:
4c:3a:12:6e:d9:a7:fd:57:0d:86:a4:0d:92:2c:2b:
f7:ce:76:af:4a:ce:6a:a1:54:33:2d:94:b5:6e:93:
87:c8:af:37:4c:61:15:9e:84:d7:8a:95:48:38:58:
36:6d:58:11:63:4b:2a:fb:ac:32:bc:24:d9:44:d9:
7f:6d:06:9c:ac:25:c3:1a:79:74:c9:1f:fe:9c:dd:
f0:ee:5c:23:46:31:bf:5f:8a:41:ac:7d:26:fc:57:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:84:73:15:CE:F7:6C:2A:C8:EA:15:01:DC:C7:25:E0:89:CB:73
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:b8:b7:11:dc:b8:c6:dc:43:98:76:d1:83:35:7e:0f:04:
d0:b4:05:c2:a8:e3:38:c0:ce:2c:51:dd:e4:0e:7c:14:4e:4f:
57:11:1b:ef:36:59:5c:37:64:04:4c:16:41:02:e7:f3:0e:35:
ce:86:2a:4d:42:02:be:c8:d1:73:d8:21:0a:9c:4c:f3:ea:12:
43:d6:a0:a2:09:df:ab:07:26:85:a1:a4:a8:5e:e0:95:90:49:
42:88:ae:3f:ee:27:bf:dd:60:f1:57:52:de:84:a9:a5:4f:4c:
35:5a:25:6d:89:48:99:b4:8b:7b:d7:be:86:24:3b:6a:9f:5d:
98:79:bd:1f:7d:85:93:5a:1a:3b:b9:ea:a6:11:d5:98:ff:d1:
a4:85:29:47:90:dd:8b:5f:98:96:1e:99:15:db:b3:25:ac:7f:
1e:d1:9c:d3:2f:81:5e:85:6e:02:8f:79:68:ff:26:02:e0:4f:
1f:64:79:80:22:82:4b:6c:7e:58:14:72:ff:be:ae:be:b4:eb:
56:01:65:5f:d1:6f:38:13:a9:86:36:8f:d7:ae:d6:af:8d:63:
89:3f:a3:1a:f0:51:28:b7:a3:33:c3:9a:ea:3a:fb:3b:02:7a:
12:00:02:7a:a5:58:a5:d2:12:cc:7b:ed:eb:8f:02:d5:28:85:
f2:f9:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:28 2025 by rpki-client