Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: rLtrnipwMWWKJQ/eUW9XPmHpQtob7Zl9HYC54tZeloE=
Subject key identifier: AB:EF:83:3B:E3:EC:25:85:23:26:C0:9B:60:72:D3:D0:BD:B9:D1:79
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019A518795A4AC7C798D7F06D53B09DFC2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:31 +0000
Manifest this update: Wed 05 Nov 2025 01:00:31 +0000
Manifest next update: Thu 06 Nov 2025 01:00:31 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: D77OROx1MaN1Wp68kXrBiVfAZmi4ZpK3xjkMVdmg9BA=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:95:a4:ac:7c:79:8d:7f:06:d5:3b:09:df:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Nov 5 01:00:31 2025 GMT
Not After : Nov 6 01:00:31 2025 GMT
Subject: CN=abef833be3ec25852326c09b6072d3d0bdb9d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:c7:67:95:01:1e:22:b7:89:e8:e1:cc:48:
1f:2b:0b:b4:c6:80:73:5d:60:70:6a:4e:b0:8d:8a:
f5:aa:26:e7:6a:4a:9d:05:9c:fa:6f:21:e3:9f:29:
c0:7c:72:8a:05:e0:aa:2e:6b:dc:d7:c8:ef:53:6f:
66:62:fd:0a:55:ad:2b:d8:57:b5:5e:3c:42:a4:bb:
5b:14:ae:de:a1:b9:23:8d:b6:a5:c1:1d:1e:a3:78:
d5:a9:61:fb:bb:b1:c3:b6:84:61:29:f5:7c:6b:e2:
ad:1f:c9:ea:be:a8:eb:5c:3b:2c:49:72:1f:1d:f8:
e0:7c:a8:bf:95:69:a4:ea:8f:e4:07:7b:35:42:53:
3f:57:6a:e2:e8:a5:61:07:36:c0:3c:02:28:fd:76:
15:cd:50:75:cb:4a:7d:38:d3:b6:79:d6:dd:03:05:
b8:fa:4f:21:73:26:d8:4f:b8:35:0a:81:3f:d8:25:
25:55:36:06:06:dc:51:9b:9b:be:46:e2:10:97:5c:
90:a4:30:3b:15:2e:83:13:20:c0:b8:ed:cf:7f:d2:
3a:ec:0c:b3:4d:be:b7:7e:0f:18:a6:f4:22:a3:ab:
ce:31:be:37:f5:a1:8e:23:bc:3f:bc:12:a7:1d:b2:
08:21:e1:a7:d8:92:8b:bd:c6:c1:9b:09:d1:66:78:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:83:3B:E3:EC:25:85:23:26:C0:9B:60:72:D3:D0:BD:B9:D1:79
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:b5:55:05:85:c1:fb:4e:3a:46:b6:0b:b5:b1:f6:8a:16:
22:0e:51:77:dd:f0:0d:d5:ee:34:20:f4:5d:fe:cb:80:f2:d5:
99:71:76:09:46:26:d8:2f:4e:ab:b1:d2:f7:05:8b:61:0f:ed:
d6:1d:a3:9a:83:49:cd:5e:d5:a8:79:b5:6f:21:f1:29:0b:43:
02:10:9a:6d:50:e7:f6:17:5e:05:bd:9e:7f:76:a1:a3:39:ca:
61:58:b8:18:61:80:dd:1a:09:4e:5d:0c:d1:d8:6c:11:ec:84:
58:6c:56:0e:45:8b:f7:44:93:67:29:8d:d0:c5:ab:5d:7d:03:
91:f2:17:c5:6b:c9:d6:df:22:47:a7:2c:b7:da:80:b2:af:6f:
ff:49:da:8d:4f:32:7f:c2:b3:f5:8b:71:d5:e4:8b:66:2c:e8:
cc:6a:95:da:66:51:af:cc:8a:d5:dc:e6:57:91:c8:02:63:26:
34:49:a5:b6:f8:bb:5d:b1:68:fd:58:6d:b6:05:d3:f6:74:44:
61:07:ba:b7:30:66:d2:12:ad:35:29:eb:71:a7:cd:02:2a:d9:
4a:8a:3a:70:3c:90:aa:5e:e3:a3:24:f7:e2:73:fc:82:8b:7f:
54:6e:ca:fd:98:cf:67:34:a6:77:68:63:db:a6:59:56:2a:9b:
09:db:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:39 2025 by rpki-client