Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: zR1FgvjGtvaYBareG3NwhqTCNWbfe+O1qYlksyGwiZ0=
Subject key identifier: 01:81:1E:DD:71:49:7D:F9:BC:18:83:E3:38:47:CF:20:59:F8:44:C4
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019A503E1C4678A06776EDD29261FF09DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 8HYDyjilESntKe3YZbTUEzvpYZeBXSa/uhjK+hU+3HY=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1c:46:78:a0:67:76:ed:d2:92:61:ff:09:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=01811edd71497df9bc1883e33847cf2059f844c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:bb:98:6a:6c:79:45:9a:d5:4d:0e:7a:f4:
3a:7a:7a:b4:64:be:71:48:99:55:ac:07:4c:bb:d1:
96:30:13:89:99:49:35:b3:f3:a3:27:49:15:75:8e:
ee:af:9d:e6:2e:3b:66:c2:55:95:e3:44:25:5f:68:
26:bb:81:bb:ba:f8:6a:e8:2b:81:34:58:5e:13:60:
d9:e9:41:ef:8e:74:d9:52:b5:fe:c8:6d:8f:d9:6a:
26:a3:8b:08:72:4c:5d:8b:7e:da:ff:23:7b:8a:47:
0f:fe:cf:b5:de:d4:37:2a:4d:e8:57:31:b0:76:30:
a5:d2:b7:60:c3:50:30:56:a5:e5:8b:bd:4f:b6:f0:
90:06:42:d9:46:fa:9a:69:cf:47:2a:af:b7:11:8f:
82:ca:45:e0:37:c3:28:ba:6d:6c:69:91:85:6e:e4:
68:b3:83:e2:6d:8c:16:f3:72:d3:00:b5:c3:60:54:
d2:20:1d:ba:ca:28:60:00:5b:5f:e6:ea:d6:67:47:
10:94:4f:64:74:c6:76:6d:6b:d3:e7:dd:b0:c0:fe:
d7:2e:43:d5:b7:4c:98:99:56:a6:b7:cb:24:d1:55:
d3:f9:94:ce:d8:42:e9:f2:de:70:8b:5d:4d:3a:25:
0b:76:87:77:47:ee:31:b4:70:f2:4e:37:2e:91:ba:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:1E:DD:71:49:7D:F9:BC:18:83:E3:38:47:CF:20:59:F8:44:C4
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:6c:02:0b:e4:7d:5a:fc:40:ed:ac:07:19:40:26:d6:0f:
4b:ef:7c:fc:f8:7c:27:3d:22:d3:2f:09:fd:7d:2d:e0:62:da:
67:bd:97:3c:04:76:74:a8:db:03:43:9c:f9:b8:c7:69:0f:83:
10:ef:3c:ba:a6:9f:b8:ab:78:16:4d:3a:b3:01:6e:82:5b:dd:
2e:b1:bd:8b:9e:d2:5b:20:73:0c:86:6d:43:45:bb:df:15:d0:
9c:71:13:be:c0:8a:19:ac:ca:74:1d:fc:35:10:7d:72:37:aa:
d6:ba:c9:3c:0e:81:c8:3c:6b:fa:ff:5e:a7:89:ef:f6:4a:2b:
8e:5e:19:11:9f:29:96:5e:ee:a5:e3:b3:62:af:5e:60:aa:72:
a7:db:ed:bc:95:c8:f8:b9:34:80:ec:d1:3e:25:be:73:4f:cd:
55:d7:d1:d0:2a:b0:1d:14:4b:0a:97:31:90:d5:e2:7a:2a:04:
39:9e:ba:ea:c6:7f:69:00:93:ba:7d:39:55:8e:6e:d9:30:02:
d8:e1:cc:2c:d0:fd:c9:e8:d9:03:ef:66:97:a9:09:58:5f:ff:
53:c9:9e:9d:34:af:e1:c2:ee:f2:91:dc:b4:35:61:df:43:58:
4b:4d:80:a7:50:d7:ad:04:d0:86:08:ce:58:9f:e1:54:79:b1:
ec:02:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:09:13 2025 by rpki-client