Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: 8/X6iwoPRGNeAZeU0vSzsXZZ3hNBGzNf7qMODbJ7DjM=
Subject key identifier: 24:51:F5:83:3E:B2:A4:C6:D3:92:37:00:7C:A2:41:63:57:41:CB:59
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019A4E4F30470252A07E0EC37439944A7A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 07D3
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 3j0DJNki0MVcjkWW4QbMETnqgCV/rCR1Cms+jlNUzWE=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:30:47:02:52:a0:7e:0e:c3:74:39:94:4a:7a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=2451f5833eb2a4c6d39237007ca241635741cb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:cd:1c:6e:6c:4d:11:13:8f:3a:2f:96:34:
b6:03:bf:f7:9f:c5:28:50:36:8a:c4:5b:34:c8:ce:
dd:1c:07:ce:c1:06:d7:fd:3f:77:5d:71:02:ad:3d:
41:00:83:ae:63:ab:a7:b4:01:da:8a:4e:cd:c5:08:
ab:6b:e0:e7:37:43:7f:0f:ad:5d:67:35:2b:58:b5:
87:2d:d8:b4:b3:76:3a:4f:ba:37:84:cf:4e:e6:1e:
db:99:31:69:9e:92:44:72:4f:65:d7:ce:f9:55:e5:
a9:37:bc:99:39:7f:15:88:ef:d2:12:19:ff:29:08:
14:b5:3f:df:69:a7:77:77:9c:8d:96:ee:bb:a1:82:
bc:40:91:1f:3c:98:11:2c:ae:6e:13:f9:11:44:7b:
ba:32:76:81:d2:bf:6a:29:bd:1e:dd:81:98:1e:11:
da:eb:37:a8:d9:c0:e8:82:44:27:7a:0f:6f:38:46:
5d:9e:bc:87:75:4b:26:67:81:dd:c3:db:80:fe:20:
65:22:61:c9:f8:a8:a9:13:51:68:c0:99:21:53:2d:
1e:cd:5e:ee:c0:bc:c3:2b:0e:52:07:57:60:69:67:
38:1b:34:9e:c5:40:a8:1e:e7:c2:ea:d0:c0:7a:10:
3b:43:5a:13:96:3b:a6:6b:eb:d8:b2:92:15:2f:44:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:F5:83:3E:B2:A4:C6:D3:92:37:00:7C:A2:41:63:57:41:CB:59
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:7f:7c:57:0c:3f:e7:f8:3e:79:ba:a3:80:04:f7:e4:fd:
f9:4b:9a:2d:df:b8:58:8c:5a:9a:a1:b3:3c:6a:4f:4e:10:7c:
f6:8f:5b:19:f9:e0:cd:d1:08:4c:2a:97:77:9e:61:2e:51:0b:
93:d3:6d:c6:77:ab:d7:f8:90:58:7c:40:31:7e:db:42:a0:a2:
00:64:62:40:e4:61:69:1a:31:d1:02:93:7d:56:74:93:11:7d:
ab:aa:20:d0:91:ac:af:14:ec:90:fb:92:97:84:2d:6e:4e:33:
3c:d8:9a:fc:93:ca:3e:90:ff:77:05:ff:80:8e:f4:e3:b8:40:
8d:e0:84:c9:a7:d0:43:e4:31:3a:d6:14:e2:e7:18:be:50:4f:
ed:46:8e:36:7e:01:28:98:36:2c:22:75:ee:22:2b:d0:d9:d2:
14:e0:0a:e9:eb:79:cf:3b:ad:85:a0:3f:58:2f:a6:08:ae:40:
f9:eb:84:6f:f7:1d:c7:1e:5a:fc:0a:c1:8f:70:77:01:44:53:
67:2b:0a:0a:0a:2f:a5:8a:60:ef:44:43:84:e3:5b:55:4c:d0:
ff:84:18:1d:77:c7:15:0e:86:8c:db:4c:1e:fc:9c:7d:04:fb:
2f:1e:75:28:09:6d:7f:05:f5:7e:94:82:88:c5:4e:5d:4b:ea:
aa:44:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:05 2025 by rpki-client