Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: ozLLFfIBD1YU/x1r90pOy48864BQosS6wA5NCJ9jL6c=
Subject key identifier: 87:6B:6B:C1:E0:DF:34:01:BE:F8:EA:1E:BC:BE:6C:27:C2:19:64:AA
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 019A511989AEC5345747B6B8889EF8806B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:19 +0000
Manifest this update: Tue 04 Nov 2025 23:00:19 +0000
Manifest next update: Wed 05 Nov 2025 23:00:19 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: k4/byIIMYUTp7fcMvtB/Jdxvd7rVldrUBmTHmlibvsA=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:89:ae:c5:34:57:47:b6:b8:88:9e:f8:80:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Nov 4 23:00:19 2025 GMT
Not After : Nov 5 23:00:19 2025 GMT
Subject: CN=876b6bc1e0df3401bef8ea1ebcbe6c27c21964aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:66:2a:b4:37:24:a7:04:83:fd:ae:75:22:
bb:ac:a7:90:30:0f:26:da:1e:18:4f:96:fe:b2:e5:
0e:bc:41:bf:9c:1e:07:af:71:b6:43:bb:57:5a:c6:
e6:6c:70:1d:75:f0:c9:5e:dd:bd:76:14:8f:d8:f1:
30:c9:99:36:cf:43:ce:fb:9e:dd:3d:a0:3f:37:7e:
b8:ac:75:cb:fa:8e:03:4b:b0:de:01:37:c9:47:69:
f7:eb:7f:ef:9e:61:67:41:15:df:29:55:7c:7a:ae:
3b:1d:a8:65:a5:f3:14:a8:b2:2e:6e:0a:5a:3a:3f:
fa:8d:a2:1f:5c:d4:b8:41:80:73:c3:ca:65:ff:ad:
91:e4:3a:49:e2:21:fc:d3:3e:51:87:93:ff:a8:19:
39:4d:50:80:9f:21:c5:62:eb:ac:3b:b9:36:8e:42:
7d:c6:57:5c:7b:9d:60:e9:99:72:3e:1e:b1:9f:c7:
af:02:a5:9f:33:cc:41:2d:a3:51:ae:08:0f:41:8f:
81:45:d9:80:de:fe:38:77:0d:a2:cd:0d:5b:8b:9e:
e7:53:64:8d:86:de:99:93:da:0a:c9:25:51:f4:f8:
73:06:3e:4d:c1:de:12:bc:e9:a4:f1:a4:ec:a8:7c:
86:81:a8:1e:15:dc:f7:b8:38:ee:79:3a:df:95:2c:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:6B:C1:E0:DF:34:01:BE:F8:EA:1E:BC:BE:6C:27:C2:19:64:AA
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cd:86:ee:c2:c7:b9:4f:56:5a:17:e4:55:63:c1:33:9b:9d:
fe:19:0a:cf:3a:95:45:1c:89:03:bd:2d:bf:41:04:25:b9:06:
6c:9a:bb:73:25:36:a8:be:95:9a:59:57:77:05:f2:5e:69:48:
4d:fe:97:cd:83:68:07:bc:de:53:20:80:73:90:38:ea:57:70:
4e:d3:aa:3f:f7:87:e7:a1:4c:72:0a:48:ab:45:a7:b3:8f:cc:
ec:76:2b:d5:8a:1c:00:60:34:c7:35:e2:84:98:5c:42:2d:90:
dd:d4:1c:e6:4f:88:a7:a1:32:7e:48:4a:92:6b:05:5f:c3:f2:
9b:6f:10:6f:f6:df:73:22:b8:5a:17:d5:bf:77:7f:5b:a8:25:
30:e2:4b:9d:ea:96:dd:61:98:e3:30:75:4b:7d:69:14:58:13:
eb:2e:18:9d:84:56:bd:d5:0c:e3:1c:e6:51:a3:e9:82:9d:f0:
27:b3:20:60:a8:39:8c:2a:5e:18:c9:32:ba:2d:a8:51:f3:d4:
0a:9b:2b:17:db:7c:cb:3e:39:07:b3:f0:ef:88:93:9d:04:3b:
09:76:eb:00:4e:fa:85:9d:9e:af:7a:15:42:d6:c8:19:41:5b:
71:9b:9a:8d:8b:b4:03:37:fd:2b:30:a8:89:e3:c5:25:ce:77:
67:1e:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:07 2025 by rpki-client