Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: 2FkYvpFzAkTcYaOtkUvLgn8ifrJ422OntZag7MGy2eQ=
Subject key identifier: D3:C5:D0:E1:1A:DD:45:B5:78:A7:06:DB:A7:04:83:69:E9:84:C4:D8
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019A4E4FCC50AF5197B6B4BF43B971518E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: N6CEzVo/ZERMgeA9kaWKFfE7FWwFuGAnYy6hs+tuTTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cc:50:af:51:97:b6:b4:bf:43:b9:71:51:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=d3c5d0e11add45b578a706dba7048369e984c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:f3:f7:af:b2:98:bd:2d:47:e4:31:a0:00:
c1:3e:ff:0e:ae:da:85:14:87:01:2d:f4:23:20:e0:
36:62:c3:72:f2:3f:79:d0:2a:62:3e:21:a2:39:6b:
3a:ce:e8:f9:c2:d9:ff:a8:a1:0d:98:dc:1e:4c:cf:
65:f8:00:c6:50:a5:c7:08:d0:0d:6d:9e:6a:06:98:
13:1d:6d:60:8e:58:39:5b:18:b1:00:8e:8d:67:7d:
7a:29:5c:96:31:62:2d:be:e5:fe:18:25:c7:0c:22:
0f:bc:b1:2e:be:ba:cb:f5:f9:ed:6b:4f:0e:17:52:
dc:9b:dc:ab:e7:3a:69:ea:4a:39:c9:62:82:aa:42:
19:a0:5b:d4:92:a8:da:14:7d:6a:27:c2:33:04:88:
dd:20:e4:0b:3e:55:8a:40:ed:31:03:ae:87:d6:27:
21:bf:ca:ec:ea:9f:d2:49:bd:f6:1a:4f:00:b5:da:
e6:1e:c6:da:0a:f6:61:f6:93:ac:b3:77:e7:13:e7:
a8:f0:04:87:fc:a7:65:0a:59:11:7f:8e:e8:b1:fc:
2c:05:f6:49:64:8b:cc:1e:74:a8:3a:3f:65:dc:b3:
d2:85:24:9c:9e:3c:d1:5b:6a:da:75:f6:4f:91:e2:
eb:76:56:06:b9:82:fc:02:19:7c:a4:25:2f:e3:bb:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:D0:E1:1A:DD:45:B5:78:A7:06:DB:A7:04:83:69:E9:84:C4:D8
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:20:f3:dc:51:0d:9e:9e:7e:1e:de:41:d8:2b:3b:0e:ed:
ae:fa:0e:91:b2:92:21:f2:70:2a:48:ee:1b:08:53:72:d3:41:
fa:17:10:66:b6:17:c0:d4:70:2e:25:29:ea:7a:fe:56:df:86:
84:c1:43:df:58:5c:58:97:f0:4b:8b:15:f7:02:84:9b:98:e7:
a5:37:c0:ef:7e:c1:09:3f:d4:c9:20:f8:3e:5b:da:bc:08:6e:
02:4a:26:af:71:87:ec:fc:15:a4:5b:0c:5f:df:11:df:3a:8e:
c2:b7:7a:58:e8:99:75:c8:ba:72:fc:36:90:52:29:d0:38:e6:
fa:b8:51:16:97:03:eb:f0:26:3f:c0:c8:bf:3d:84:7b:d9:12:
3b:8b:80:4b:76:1e:1b:7b:c2:3d:d3:b7:63:a4:33:c2:4a:5f:
7d:d2:74:10:3a:72:67:2f:ff:71:f9:90:6e:b4:de:9d:1a:70:
57:ec:58:75:26:c7:f2:ed:93:86:22:3e:6e:cb:f5:69:5b:ca:
7e:df:d6:84:4d:b3:0e:b5:e6:07:aa:fe:ab:9a:ae:27:8f:b4:
16:08:cf:db:8d:9f:ff:8c:96:39:b2:61:54:cd:ff:4d:29:a8:
ac:2d:3f:b8:72:6c:51:8c:2b:6a:78:bd:d2:9c:c1:9f:19:50:
db:9e:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:17 2025 by rpki-client