Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: j28QlZPTZ8o3kGSIGdoA6oXlxmykz89U6NnK4QwR83M=
Subject key identifier: 70:C8:E0:39:9C:B5:92:69:DA:8A:1F:56:EA:1B:DC:E4:C9:3B:4C:41
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 019A4EF4193653DC6C36E0160424B48A5E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 1677
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: 2NIjgppmhuxRYrz3DLITLBRmQ5Y.roa (hash: pfK3DW+mhfPMlrHb+zKcoWL6SLQiJQcLNvXFegBqlig=)
2: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: kGLy2PLyOmWkKDAsG9fXfjQeRphRPzlnmwN06705G5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:19:36:53:dc:6c:36:e0:16:04:24:b4:8a:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=70c8e0399cb59269da8a1f56ea1bdce4c93b4c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:8a:de:7f:48:b4:49:89:3e:32:f2:e6:87:
70:1e:53:b5:1b:f1:36:d1:04:68:3d:36:81:3f:1d:
af:68:94:49:93:5d:25:d4:a6:e7:ab:1f:81:5c:4a:
0d:21:ba:3c:fd:f9:57:80:4b:f9:f3:42:0b:a9:c7:
60:35:90:88:83:e8:a3:f4:b0:e5:c3:5b:31:43:38:
a4:e7:4f:7f:80:8a:dd:43:84:7a:9b:7c:89:3e:a4:
72:a1:4a:49:2d:a9:5e:ad:38:a7:a1:b5:84:11:6e:
b8:cc:6b:63:30:7e:d8:e5:df:9d:3c:9b:06:5d:f3:
cd:b6:22:71:ce:19:63:c6:f1:b5:f2:26:51:99:1e:
63:57:c2:c0:2b:f8:36:57:a9:ac:4c:fa:60:f9:98:
36:5c:f7:c0:ba:b5:ff:19:be:51:84:60:92:ea:6a:
a6:85:d2:b6:c6:9c:a0:7c:91:03:5c:b6:df:b9:9b:
d6:79:7a:10:64:a4:f4:2a:f7:28:98:67:47:50:21:
17:b3:90:c4:be:98:fb:9d:b0:19:79:af:f5:39:7e:
b1:4a:b8:4a:bf:ec:f0:75:f4:1d:f9:0a:4f:9c:94:
29:1d:66:34:e7:9e:0f:22:95:d8:21:1b:a4:75:8f:
7e:6d:1f:49:e6:40:1a:5b:2b:16:a7:dc:a3:9a:0a:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:E0:39:9C:B5:92:69:DA:8A:1F:56:EA:1B:DC:E4:C9:3B:4C:41
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:6b:24:36:58:5d:ea:f6:1b:04:84:03:c6:ad:bc:55:e5:
47:06:80:cb:ec:0f:43:cb:be:df:ba:90:c6:12:ee:3f:8a:90:
81:55:6d:bf:85:4e:d5:05:23:f9:0a:ae:7b:15:f0:42:ef:d5:
c0:e7:8c:6c:ed:df:8d:d3:84:21:11:e2:fc:ce:8f:bf:de:63:
80:94:bc:1f:10:b1:fd:54:20:5d:4b:d0:06:9d:6a:d3:c0:04:
00:ea:8c:2b:4f:11:a0:49:75:44:bd:41:dc:20:fe:f5:cb:e6:
e9:40:8f:3c:7f:b2:2a:b8:97:9a:6a:de:e8:5b:cb:33:45:0d:
66:ab:f1:ea:5f:a8:f5:a7:15:f4:13:45:d1:ed:9f:32:e0:95:
71:61:9c:0d:70:79:68:35:28:38:09:89:ec:87:e4:54:fe:e0:
3b:91:60:62:7e:66:09:c3:d1:cd:19:56:71:13:59:1b:93:af:
40:63:14:bc:ff:62:db:3c:02:e7:26:4e:32:20:02:36:9c:64:
8f:19:e3:ce:a5:f4:b7:d7:f3:4d:32:d2:0e:73:0e:8d:fc:29:
66:86:93:bf:0e:d9:7a:00:87:fa:ed:67:f2:36:0a:6d:c0:3c:
92:c4:f2:5b:5f:be:07:94:d1:33:56:85:bf:2c:11:c9:c8:83:
2a:4c:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:19 2025 by rpki-client