Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 2VGGp3ycVtRTQ1vDKELTCQQE+1aIfjS+oAOPpDPyMzI=
Subject key identifier: 70:78:9E:D0:AF:53:E0:08:41:60:63:72:ED:5B:61:93:9C:EC:41:74
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019A4D741EC3D58FE396735FF9DAB6340865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: fZ7MAx99OR6IBMk4g72TIFekwnX3UEq5IFhGN1B9cdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1e:c3:d5:8f:e3:96:73:5f:f9:da:b6:34:08:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=70789ed0af53e00841606372ed5b61939cec4174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:f6:5b:08:bd:5d:3b:12:57:b9:72:86:04:
15:5c:17:7d:c5:67:49:49:f2:55:df:46:a2:ef:d4:
4c:7c:0f:81:ac:e8:5f:ed:ea:23:b4:a1:bf:40:4f:
cb:35:bd:a5:bd:fa:31:a8:8e:7b:11:b5:1d:6a:cd:
5f:2c:30:cb:bc:f8:19:99:ca:fa:b8:57:8a:46:4c:
1c:a8:d9:bb:00:75:e9:66:d5:57:1c:27:c6:f3:0d:
15:36:39:00:22:2d:9f:80:b0:2e:f8:f3:6d:87:8a:
8d:ff:79:46:95:75:43:5a:fd:49:db:e5:6d:19:a8:
08:aa:65:53:ff:ff:16:3d:27:f1:93:2a:e4:d7:14:
9f:66:ef:6c:c2:71:05:16:7e:0d:4a:86:86:f8:60:
ef:06:7f:ed:2c:ed:45:2f:fc:91:0f:2d:ae:42:ff:
b2:be:2c:a2:b1:bd:ef:a7:fd:98:dd:23:2e:3d:ea:
ee:69:5b:72:7c:39:bc:67:7f:d0:4b:83:f2:b6:93:
ce:23:a8:07:39:70:4a:6c:40:c6:54:ee:0a:8b:10:
09:26:9c:16:26:fd:41:bf:f7:94:d3:f2:a6:a5:80:
bb:1b:e5:06:eb:c3:2b:b4:a2:af:55:3f:83:11:36:
59:b2:ec:ef:63:69:2b:88:77:2b:ab:10:b5:9c:2d:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:9E:D0:AF:53:E0:08:41:60:63:72:ED:5B:61:93:9C:EC:41:74
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:b8:23:f8:68:f0:48:02:22:93:a8:90:2e:1c:43:48:31:
6f:12:cf:3b:37:36:45:7e:f6:aa:eb:d7:b4:77:04:96:94:e6:
ac:00:0d:da:80:fc:98:81:18:74:d1:bd:c8:85:fa:c5:f7:c0:
69:58:d9:48:c5:4d:ea:ae:38:be:f9:4f:4a:c9:12:df:1a:42:
7d:99:5b:07:06:d7:5a:cb:03:fc:0c:70:f5:8e:d6:bf:36:47:
81:ba:8e:6b:06:8e:e1:18:46:0e:ac:2c:e9:7c:4f:b8:dc:ca:
5e:31:3a:09:81:a5:c4:ad:5d:12:89:e4:6a:7f:f7:34:2a:97:
85:0d:33:6e:3b:5f:38:40:50:9e:85:90:3a:d6:38:92:40:d5:
c4:04:7a:2f:00:8a:a8:f2:55:64:d7:c9:bf:1f:58:f7:cf:73:
04:b7:3e:5a:40:38:72:57:82:72:4d:64:35:82:66:76:f1:c2:
34:65:61:66:26:49:03:98:08:75:e0:9d:70:9d:30:b5:04:a7:
cf:c2:77:fb:da:68:02:82:ac:43:26:61:e4:d9:c5:f4:b2:42:
3b:61:76:74:85:e3:1a:4d:65:6d:bf:78:de:03:35:2f:a6:d5:
7a:ca:98:8b:50:17:a3:46:ec:f9:8f:df:6e:e9:40:11:2c:9a:
a1:c7:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:50 2025 by rpki-client