Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: 1THM/QHOhqjfKrGclyOfljXz4ckf0+ercbZqeM7iMuQ=
Subject key identifier: 3C:41:DF:D2:A5:06:CC:9A:EE:09:CA:86:AD:35:DE:60:F5:68:BD:9B
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019A5308213AF1A062638E4822B901CD7B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:32 +0000
Manifest this update: Wed 05 Nov 2025 08:00:32 +0000
Manifest next update: Thu 06 Nov 2025 08:00:32 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: Yp6U9GJok0h0qhcA5Z4xKqs9BNXr439iJE++hC5AkLI=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:21:3a:f1:a0:62:63:8e:48:22:b9:01:cd:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Nov 5 08:00:32 2025 GMT
Not After : Nov 6 08:00:32 2025 GMT
Subject: CN=3c41dfd2a506cc9aee09ca86ad35de60f568bd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:d8:ed:2c:9f:10:5a:14:b1:f1:2c:78:3c:
ab:49:a4:b9:8c:b6:28:ef:ad:2d:de:70:d5:47:55:
1c:ff:22:e2:ec:36:1c:66:58:22:21:7e:1e:0d:d3:
14:92:ac:89:a4:e8:31:8e:33:7d:59:57:dd:22:c1:
9d:db:2c:50:13:09:67:42:af:1a:b1:38:ee:6f:53:
21:2c:2b:b4:cc:33:1a:7b:d2:5b:ea:54:db:36:57:
fc:9d:aa:ad:6f:d0:87:8d:3a:48:c1:09:0d:86:e8:
ba:00:21:30:83:45:28:0f:a6:d8:f7:43:f2:36:87:
a5:4d:25:44:26:5a:69:f9:55:92:92:55:ab:22:88:
72:dc:bf:e5:0b:5e:d0:ff:53:85:76:4b:24:5a:7c:
99:eb:b7:10:06:e2:10:3c:58:58:91:a0:50:d3:6e:
c4:ff:66:38:06:ca:1b:8b:79:d8:ad:c5:77:10:36:
64:67:17:98:4e:89:8b:6b:dd:1f:d1:bc:a6:71:c7:
11:50:57:41:d4:0d:86:b0:41:c5:ea:38:3c:3a:96:
1c:69:df:6a:19:c5:5a:21:dc:32:62:6e:04:2c:a5:
22:81:a8:f8:7b:b7:ba:9e:47:84:85:83:cf:0e:f9:
75:b6:e8:e5:47:6e:95:1a:f8:3a:4d:27:b6:8c:c5:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:DF:D2:A5:06:CC:9A:EE:09:CA:86:AD:35:DE:60:F5:68:BD:9B
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:65:e4:0a:2c:16:a5:f8:35:5a:6b:3d:59:76:16:c8:98:4b:
f8:83:41:bd:61:b2:22:f8:37:54:6e:94:e9:17:c1:14:e1:f2:
01:1e:31:02:3a:76:b7:94:b6:35:63:23:e9:13:0c:06:48:df:
22:48:75:88:3a:b4:8c:a5:af:fc:b0:0f:2d:b4:a5:5b:6f:44:
df:db:5d:b1:a7:b2:ef:bf:f9:63:36:c1:a8:7b:97:50:f4:81:
08:f8:61:17:b6:d8:ba:69:93:c3:e6:46:50:3e:23:e1:5e:3e:
50:af:a7:9c:7e:62:cb:04:7e:7f:0a:77:21:fa:a9:31:8e:df:
2c:33:49:51:9d:a1:3d:8c:2d:c2:b7:1b:c5:45:87:70:5f:54:
19:44:1a:68:bf:02:98:a5:08:2b:08:1b:28:b1:6b:43:18:b3:
25:c8:d1:cb:51:f6:4b:34:5b:89:35:9f:32:eb:37:fd:33:61:
43:af:a2:e8:cc:e8:27:c7:f2:a3:ef:39:f1:6f:7d:ef:6c:c5:
ec:df:5e:ad:d7:a6:a3:53:68:18:ca:d4:03:df:c7:56:df:ed:
64:8d:ca:43:a0:c0:f2:bc:7c:2f:ce:3f:71:cc:ff:28:dc:aa:
87:9c:6a:bb:13:ff:90:c1:bc:0a:5c:ca:b0:ad:8f:fd:91:53:
fb:39:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:31:53 2025 by rpki-client