Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: eVu67zDAAl4xhyfqBH8w36TPzF23tYIVIo8DJnwwUAQ=
Subject key identifier: 7B:82:FF:F2:30:B9:4D:64:92:24:9E:B1:52:3E:FC:48:80:C9:46:FD
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019A4E187DC2D657720EB8A45272999BA662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: TR22ElDc/r65L13V0Xkt8HtdU2CNAwhX5CLOJPWujSA=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7d:c2:d6:57:72:0e:b8:a4:52:72:99:9b:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=7b82fff230b94d6492249eb1523efc4880c946fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:18:af:81:51:00:c8:e2:5e:1d:59:fa:09:
3a:7e:e4:03:b0:2c:e4:7c:c2:1d:67:29:1d:05:c6:
dd:68:2e:77:0b:e2:74:51:7e:78:ad:af:ed:16:4f:
fe:a6:02:c2:4f:43:20:5c:a2:8f:cd:63:fa:fb:b7:
50:2f:93:09:6b:c0:ae:c7:29:be:06:e1:b7:d4:9e:
1f:d5:18:95:0b:85:d8:15:15:60:be:d3:96:ed:37:
71:98:ce:e7:35:d3:ca:ce:1d:9c:d2:0b:ff:28:6a:
20:fc:26:1b:4e:41:b5:e6:7c:b1:1b:7c:99:f1:05:
75:47:f8:42:cb:90:c3:85:49:31:0e:3b:79:5b:0c:
ec:10:61:4d:7c:09:91:d9:96:d4:88:78:e7:f6:c3:
12:b2:61:bf:2b:cf:22:ba:e8:33:0a:94:2f:f2:9a:
1a:0f:82:4b:75:a6:64:ce:1d:fb:bc:5a:c3:07:38:
eb:3c:5a:96:57:a7:9b:5d:6f:e0:82:68:04:87:99:
f9:70:58:a4:a3:88:df:cd:56:dc:ea:f5:4c:7c:af:
8a:e3:27:13:8b:ac:3a:95:9e:8a:a4:58:91:fb:5b:
5c:e3:bb:3e:87:4a:85:f9:1c:cb:e1:3d:20:8d:b8:
dd:a4:1e:58:01:8e:70:2a:67:9d:1f:9e:95:84:05:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:FF:F2:30:B9:4D:64:92:24:9E:B1:52:3E:FC:48:80:C9:46:FD
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7f:28:e9:3b:b7:1a:9d:5d:6e:ba:d1:ea:77:32:d6:ee:cd:
83:06:ef:9d:40:ba:43:0d:3f:54:f5:02:9f:79:20:ec:ed:8a:
02:d9:a7:1e:2f:8c:e3:3f:03:8c:27:5e:5a:51:8c:59:0c:6d:
22:01:50:d6:88:1c:6f:c5:bd:3e:c4:ed:fa:93:43:a3:df:71:
b1:bd:3e:74:ae:6f:bc:7e:0b:85:f3:58:e8:52:38:ba:81:ff:
c1:37:f6:48:e3:63:52:14:40:e4:a0:7c:bb:00:50:fb:ff:36:
7a:58:18:70:49:fa:17:f7:92:c4:23:3b:65:d9:03:8b:be:99:
50:0c:6f:8b:98:07:92:be:1f:f5:56:04:fd:24:da:29:4e:13:
0f:a2:23:4a:da:dd:20:4b:72:86:b5:01:82:15:bb:0d:2d:62:
b9:87:c6:62:e8:8a:c8:44:e0:66:96:2c:5a:99:d9:ea:f1:e3:
d5:82:1d:2c:21:c5:a4:86:c2:de:ef:cc:01:e7:dd:f3:8d:8b:
a8:c6:cf:f9:e3:39:39:fd:ce:ab:f3:08:56:78:9a:49:03:b4:
2c:9a:73:37:94:b5:04:57:47:29:ed:00:a1:50:d7:14:cc:6e:
71:04:8b:49:d5:dd:f7:aa:f7:b6:1d:31:38:06:12:f7:a4:d0:
f0:fd:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:44 2025 by rpki-client