Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: oS8i1B5Ofgirc9R5NQ2EN1vDhE2PxXhbwP1XcXzFAFg=
Subject key identifier: BB:14:23:F0:C0:40:77:3D:3E:DD:F3:70:A6:AF:F4:91:65:A1:8D:F8
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019A530849F03A0FA7E8A472DF5AA745055F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 08:00:43 +0000
Manifest this update: Wed 05 Nov 2025 08:00:43 +0000
Manifest next update: Thu 06 Nov 2025 08:00:43 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: AeT29sKHD5mEjtiul0I4KDrEksqQh9RmuJlM4kLFlwQ=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
4: u5lPRSy8TTjSrS9sU6cP6pvHWTY.roa (hash: nHXVS6U6ny2U+TZRyYNc9upvg7oq5CrJlEbjCC7RIaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:49:f0:3a:0f:a7:e8:a4:72:df:5a:a7:45:05:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Nov 5 08:00:43 2025 GMT
Not After : Nov 6 08:00:43 2025 GMT
Subject: CN=bb1423f0c040773d3eddf370a6aff49165a18df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:80:9b:69:11:96:80:57:e3:9d:dd:09:84:
cd:af:7a:59:61:04:91:11:ce:7e:88:b5:37:53:41:
19:1e:3d:d7:83:c0:c3:7c:88:ca:45:11:bf:10:55:
a8:4b:1f:0e:c9:51:e6:64:e6:14:36:15:22:d0:c5:
2c:53:0f:25:1a:57:36:4f:4a:71:a0:8f:48:3a:7b:
3e:8b:25:56:c0:e4:ed:d9:96:59:a3:a8:a1:1e:c9:
10:39:e0:ab:9a:2a:16:79:45:ac:1a:de:bb:4d:e4:
cf:04:e0:ee:a5:23:fa:a8:bb:42:6c:b5:05:59:38:
0d:6c:1c:72:e0:d2:2c:43:e7:1d:64:eb:51:da:35:
98:7c:ab:f7:4b:ac:aa:39:eb:84:e5:47:41:c8:1b:
0a:76:e6:a6:5d:eb:94:27:c5:f4:4f:a9:e1:9a:d0:
5d:03:69:e5:ca:ee:48:37:d2:a7:18:49:b6:f7:0a:
1b:3d:eb:fe:37:ea:6e:bf:e4:73:42:62:95:0c:56:
5b:8b:b2:9b:3a:a2:7e:ec:f9:20:e7:10:6a:d5:31:
60:15:fc:e6:f8:84:68:bf:f3:11:50:e5:c5:d8:a4:
e6:94:c4:00:44:97:68:4c:dd:df:b2:ad:bc:5f:03:
cd:45:18:ec:ea:4e:f1:4b:73:77:b2:44:cd:ae:ca:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:23:F0:C0:40:77:3D:3E:DD:F3:70:A6:AF:F4:91:65:A1:8D:F8
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:d3:48:f8:6b:72:51:38:50:35:1f:0f:13:23:ab:f5:a5:
95:84:9b:e4:6f:69:e4:8e:30:3c:56:fb:3c:54:ab:9b:b7:40:
4a:3c:71:7c:10:b6:9e:5c:e1:0f:63:73:ea:0f:60:99:ab:e9:
8c:db:d3:70:08:bf:ab:0e:73:17:7f:36:76:1d:ea:55:7c:2b:
78:8e:97:32:06:11:3d:13:ec:ff:77:f9:8b:7c:6e:14:6f:3c:
02:59:41:ff:4b:58:38:6a:66:8a:dd:22:db:07:7d:40:b8:ac:
99:e4:10:21:8a:9f:a1:95:a8:98:35:a6:2f:1b:61:76:b0:79:
95:c0:26:17:10:ec:aa:32:78:84:b8:ca:6d:67:b0:6b:85:67:
0c:8b:37:ec:e9:4b:70:b6:28:14:57:e9:50:f1:a0:f5:79:55:
dc:e2:40:76:96:0f:09:b8:16:ea:0b:aa:02:71:e7:1a:12:13:
38:ab:cd:05:dc:64:6e:df:f0:c1:b3:0f:52:49:91:40:df:9c:
46:0b:11:52:9a:07:42:6c:db:e4:1b:26:bc:69:19:df:2a:44:
49:b9:ea:a2:df:9b:ca:a2:41:c5:e2:3a:66:3e:5b:db:b4:9a:
0c:8d:bb:e9:b6:a5:5a:a5:9e:df:2e:83:0f:3e:28:8e:9a:54:
e4:cc:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:46 2025 by rpki-client