Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: KO2WQ8hNTSgM11vyKls1Xk32VX/IFagsdMYTf+rWIhs=
Subject key identifier: F7:8F:D9:C3:DB:B5:1E:F6:DC:A3:D0:35:B2:B0:90:52:EB:D5:18:07
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019A5119E200BD47AB48E2FD00A106F4BB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:41 +0000
Manifest this update: Tue 04 Nov 2025 23:00:41 +0000
Manifest next update: Wed 05 Nov 2025 23:00:41 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: oH5scVXbawm25i+wIrr12XCo5Qnvi0ldLdq9HzpBom8=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e2:00:bd:47:ab:48:e2:fd:00:a1:06:f4:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Nov 4 23:00:41 2025 GMT
Not After : Nov 5 23:00:41 2025 GMT
Subject: CN=f78fd9c3dbb51ef6dca3d035b2b09052ebd51807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:b4:7d:4d:14:a2:bf:fc:b9:76:cb:77:d6:
8e:0d:e0:5e:77:e6:6c:c9:0b:40:1d:de:c1:e9:dc:
4b:3a:10:2c:41:30:78:ed:f8:17:f8:23:f3:a9:d0:
f7:d2:6d:21:b4:69:05:65:12:6b:b2:f2:5f:36:cc:
cb:dd:13:a6:f9:ba:74:4f:3a:95:4a:fc:27:a2:77:
a3:b2:81:06:89:34:f1:a9:59:f4:fd:0d:e4:22:9d:
d6:41:38:8c:c8:cd:37:cb:5e:e0:fe:c3:d0:fc:74:
07:87:34:66:af:1a:9c:75:3e:19:7e:5a:6c:8f:bd:
89:e9:a1:e4:f4:6c:33:8c:0b:54:1e:46:74:36:03:
64:1e:9a:da:97:51:59:d6:83:2d:d8:22:7b:a8:58:
47:0d:31:cb:1a:20:55:e2:55:d8:d1:4c:61:a2:21:
b3:54:fb:1d:d5:15:4f:b4:54:3d:92:8a:2d:00:4d:
41:8b:97:9b:03:0c:c3:60:73:e9:08:06:af:97:ef:
5a:63:64:95:5e:01:2c:49:df:ae:f6:de:69:20:a6:
09:bf:03:b1:eb:51:96:76:d2:fb:66:f6:50:b8:e0:
ae:d8:6f:72:ba:c4:10:b7:7a:f9:ae:21:a7:1b:79:
6b:1d:c9:31:66:5a:ad:b3:31:3b:5c:7c:9b:83:4f:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:D9:C3:DB:B5:1E:F6:DC:A3:D0:35:B2:B0:90:52:EB:D5:18:07
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:16:87:64:7c:41:f4:71:24:33:2b:84:90:7e:b9:36:fe:
5a:c3:e7:9d:c6:b9:7a:65:f8:bf:6f:12:44:42:36:1f:07:4a:
99:f7:90:50:73:5b:03:40:eb:9b:19:e5:12:12:6c:0b:ad:23:
f9:f9:df:d8:47:13:00:3c:09:4d:75:c2:4f:bc:45:ec:d9:fe:
82:c7:71:4b:ae:b3:a5:53:a2:98:89:a2:96:b6:6f:84:1c:6a:
eb:ff:96:00:0b:3f:2a:d3:4d:a5:fa:8f:4b:1d:0e:b6:bc:0f:
1e:9b:6c:62:db:31:93:5d:ae:7f:ae:50:e0:63:01:87:97:19:
9b:14:f9:d1:9b:47:c5:55:06:3e:45:93:e1:bd:1c:4c:3a:fd:
c1:91:b0:f6:42:b9:f8:7b:e8:fa:c0:a5:69:8f:8f:7f:ec:71:
13:6a:49:1c:a3:29:8f:eb:65:27:1f:52:3f:ec:cb:30:dd:30:
cb:ee:10:2f:f9:68:8e:bd:64:f4:3b:68:ee:d5:8b:85:84:84:
05:ee:e5:5a:c5:74:c8:76:c9:ac:46:33:88:62:79:ce:6e:b5:
72:a8:38:7e:35:a9:58:24:2c:a0:58:bd:6d:7f:0c:54:02:88:
6f:49:f9:c3:c4:0b:49:d3:3c:09:fc:36:3d:6e:be:62:69:98:
f7:7f:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:33 2025 by rpki-client