Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: QLaKNCqAlECw/IxGEu1PPxR/N4LPlP28aCfqzfhEyeI=
Subject key identifier: D8:48:D0:76:47:96:9D:B6:09:B2:AE:8A:39:6B:7C:36:9B:7C:45:26
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019A4F62B39B4CF6451CED8EAED479CFB522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: z/wJxMQ2VbynP+V9Wh5yBDbmkdAXbaslfm0A7nRYi4g=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b3:9b:4c:f6:45:1c:ed:8e:ae:d4:79:cf:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=d848d07647969db609b2ae8a396b7c369b7c4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:7d:52:2c:cf:c7:8a:1b:0f:9e:f6:df:8d:
47:78:62:1e:df:8b:d1:31:49:a8:fc:c7:f3:1c:fa:
df:6f:f6:7b:b9:de:15:3b:c7:99:fe:45:9c:30:03:
00:06:41:f9:a0:60:7a:a1:71:b5:d8:f8:af:d3:8f:
48:d0:30:58:75:e5:a7:04:2c:ac:50:3a:1d:30:de:
a0:c1:07:b3:ad:e0:ed:e1:54:89:cc:b0:20:07:6a:
d6:a7:fe:b9:dd:bd:cb:99:51:90:ac:94:7f:f2:c7:
87:c8:01:13:c5:47:b8:c2:a7:d9:6a:d7:7f:c7:e1:
51:c4:da:35:ec:31:1c:2e:23:d3:66:bb:bd:fa:3e:
ef:c8:c9:2e:5f:2a:2a:e3:fb:4f:e9:7e:80:75:a5:
49:26:ce:ca:7b:ca:46:99:5c:5f:9f:a5:d5:eb:85:
b7:4d:b4:e7:d8:14:8b:7e:ff:cd:25:65:a5:a1:5a:
e8:02:50:d7:1e:5a:8b:24:ef:df:76:1c:9f:bb:0f:
6b:70:f7:3c:b6:18:8a:44:c7:cb:c8:b6:f7:76:40:
80:2d:b0:0b:3c:f5:7c:12:90:46:71:d4:d4:34:48:
5c:58:79:22:99:19:fb:72:df:46:36:c4:bb:80:dd:
56:20:db:f1:ae:e9:fa:68:70:fe:db:b3:07:7e:ba:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:D0:76:47:96:9D:B6:09:B2:AE:8A:39:6B:7C:36:9B:7C:45:26
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:f8:5d:77:e0:ba:c8:0f:2c:42:c4:f2:f2:14:ce:f5:23:
c3:94:8a:9f:86:8e:b6:01:7d:df:b2:9a:ce:7d:98:fd:9e:d3:
45:f1:5b:5e:44:6f:3e:65:44:74:c3:9a:ed:37:74:c7:d5:06:
5c:af:0e:48:6b:5e:ac:34:31:b4:b5:57:72:9c:7f:0d:42:da:
fe:d2:c5:fd:48:d8:51:72:01:c8:60:12:4c:d0:9a:6d:65:62:
95:cd:59:0e:78:16:f5:c7:ed:96:92:44:23:28:96:4d:a3:3e:
b9:b5:21:7b:f8:6c:37:31:79:25:d7:4a:08:b9:cf:42:3a:5d:
ac:40:9a:dc:17:fd:a8:f8:f9:f4:cc:cd:0a:66:ec:ed:24:3b:
1e:c5:77:0f:0a:39:a9:0c:02:a6:b8:f1:1c:73:31:4c:8e:13:
b0:34:e0:8f:d1:cb:88:cf:df:6b:c3:11:d6:55:da:69:7f:0f:
93:75:e2:2e:62:5c:1d:1f:f0:59:13:14:6b:f9:07:74:a7:23:
cb:94:60:c8:6a:8c:e4:1c:1d:fa:2a:c7:91:bf:a0:51:2d:30:
4d:d4:f5:1e:a5:04:8b:d8:26:e3:cc:4c:db:89:10:cd:f8:cb:
ce:ca:18:85:9f:05:54:32:fe:27:30:8a:4a:59:73:07:19:f1:
b7:9d:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:01 2025 by rpki-client