Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: U5UtclcVc9bZIfBHUNvsHqLYP7yJb7sIph+SZVbgd6M=
Subject key identifier: F9:21:0C:95:77:55:4D:7E:54:6F:E0:D1:A5:CF:B8:B3:AD:CA:34:E0
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019A4EF6014DFC38C43398D71E6CE5A61683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 086A
Signing time: Tue 04 Nov 2025 13:02:16 +0000
Manifest this update: Tue 04 Nov 2025 13:02:16 +0000
Manifest next update: Wed 05 Nov 2025 13:02:16 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: 5TTl92zHdO6vxwqmt+gaGl9QlCPh4EURcLV6/b/BswE=)
2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f6:01:4d:fc:38:c4:33:98:d7:1e:6c:e5:a6:16:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Nov 4 13:02:16 2025 GMT
Not After : Nov 5 13:02:16 2025 GMT
Subject: CN=f9210c9577554d7e546fe0d1a5cfb8b3adca34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:b9:a5:e6:e0:69:0c:46:8b:0c:26:50:3a:
40:37:0d:b9:21:3a:56:8c:c4:fe:1c:60:10:04:11:
27:47:53:2b:92:98:76:36:f6:d5:a3:21:2b:c9:b1:
49:a9:40:0c:fa:1d:ad:69:08:6c:a5:30:a9:90:d4:
80:b2:e9:c1:d8:80:f8:28:76:a4:bb:ec:88:e6:f7:
cf:99:35:49:5e:26:cd:aa:6c:5d:ca:19:45:5f:e9:
15:b2:d0:fe:a4:e4:17:fb:e1:78:5d:3a:ad:8c:2b:
57:95:cc:e8:6d:cd:e6:67:77:3a:54:80:3e:17:b2:
24:cd:d9:36:ad:a6:c9:77:80:f8:de:ae:2a:ef:0c:
2e:ed:0c:e3:f4:03:ca:ac:ae:c4:27:d5:6a:bd:4f:
90:1c:c4:f0:a5:90:33:8a:95:e3:c0:f8:9c:90:24:
c1:18:99:14:81:76:bd:ca:55:12:7b:12:37:41:6d:
ef:2d:84:2b:fd:50:39:bd:c9:1b:09:61:10:47:da:
a9:31:80:54:0d:28:37:d4:23:b9:da:ea:a4:00:30:
f8:2f:e8:e1:96:6a:e5:83:21:62:02:e4:10:f3:43:
12:f3:16:86:67:2d:7d:d7:41:c0:52:6c:93:04:51:
0c:3b:62:06:66:32:42:01:28:4c:22:31:d2:65:5c:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:0C:95:77:55:4D:7E:54:6F:E0:D1:A5:CF:B8:B3:AD:CA:34:E0
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a7:f1:b5:7c:95:9a:0f:41:c4:80:6a:97:76:07:66:fc:90:
1b:53:f0:ce:3e:c8:ae:b9:4f:ce:c7:fc:19:f9:28:d9:cb:7d:
d5:56:f2:67:f1:00:36:04:7f:89:a2:72:58:36:9f:73:ae:41:
e4:b3:7a:93:56:d0:47:f6:14:a5:88:18:7c:c3:5b:82:dd:fa:
cc:1b:f4:4e:56:81:bf:18:4a:29:22:75:db:11:26:ca:bc:5d:
02:b8:50:ce:dd:2d:74:97:b1:c9:49:ff:9d:3e:bf:c5:ed:a8:
c3:f5:07:8b:15:36:a8:b6:aa:41:f0:bf:76:db:e4:16:d5:46:
06:75:5d:6d:4e:0f:03:2f:10:a8:b3:ae:4c:8e:1f:de:06:b7:
99:83:ae:19:a1:96:03:78:22:5b:0f:dd:5a:71:80:15:d0:7a:
c1:20:18:78:a9:d3:ed:31:b1:4b:9a:7f:a2:99:a4:46:0f:d6:
55:0d:94:1b:b1:a0:2d:e8:02:37:2f:03:fb:31:ce:11:de:09:
49:94:96:3b:f8:a7:2f:04:8a:c8:9f:6b:68:83:31:83:58:d1:
dd:92:1c:4f:af:52:ec:89:11:0d:59:6d:25:85:45:b7:64:cd:
11:f0:53:9b:44:a8:68:8c:3c:ea:38:46:53:6d:02:a2:5a:0f:
b3:5c:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:20 2025 by rpki-client