Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: 6pk1h4gb+/N8zu5W8B3wV23pFI9neHZtqjQbeuFJcAQ=
Subject key identifier: A2:29:27:31:6E:10:DE:BD:50:13:C5:97:FB:83:0E:11:46:3A:01:61
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019A51BE568F532752C9982B3B7202A6A5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 3F
Signing time: Wed 05 Nov 2025 02:00:19 +0000
Manifest this update: Wed 05 Nov 2025 02:00:19 +0000
Manifest next update: Thu 06 Nov 2025 02:00:19 +0000
Files and hashes: 1: WThbGtz2IYxf1vTJRB2TjqMIzOc.roa (hash: TWCX9/z5Z1T4Mu8aWwo0GmQbY2mW+ddMS23z8G75JSQ=)
2: XEzXLFWCK81H0mYYJL-WVNmtqGo.roa (hash: qICBsdU+J42/dQHA/dNncrV4zPltBFGJMDpu4ZuboZc=)
3: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: bZ6fWJw0r+qwHjJ8A4bKDGX2cvLPsnTMQI244j5I+T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:56:8f:53:27:52:c9:98:2b:3b:72:02:a6:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Nov 5 02:00:19 2025 GMT
Not After : Nov 6 02:00:19 2025 GMT
Subject: CN=a22927316e10debd5013c597fb830e11463a0161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:44:74:e9:fc:33:be:68:f5:03:a4:90:7b:
65:ed:70:40:cf:3b:c3:f1:dc:09:16:32:9f:58:ea:
9e:08:a2:e4:82:ee:c2:0f:41:9e:10:49:a2:45:bb:
40:cb:2a:44:01:48:7c:02:fd:99:25:e0:1c:f2:93:
6e:3b:5d:f8:80:b4:c0:e3:f0:7d:09:e9:79:39:fc:
88:27:8d:c3:7a:f0:3a:14:cf:2a:81:c2:c8:ac:7e:
c3:02:e2:2f:8a:c8:07:94:54:6b:56:6c:e8:45:48:
ff:8c:1e:e4:b7:41:98:61:25:56:6b:6d:b1:76:a7:
b8:ce:b1:93:35:5b:90:99:71:2a:5a:9c:9f:b3:db:
d1:84:73:f5:bd:d6:40:d2:e3:c9:55:c4:a5:85:a0:
bc:8e:f3:5a:90:23:d4:55:15:3a:54:b1:72:7e:65:
27:2e:0e:d6:a0:0a:e4:ca:7f:75:c2:42:01:bb:00:
c8:3a:cd:6a:46:59:db:85:0e:5e:77:73:9a:fa:90:
65:08:d5:6e:c3:6f:7f:71:01:9b:47:d2:13:99:4b:
2d:18:5a:f7:66:5b:ba:79:27:d5:a6:88:04:7f:ae:
7a:7d:23:e1:a1:4b:63:dd:1c:36:f6:6a:19:ec:da:
07:32:19:dd:2e:0b:0f:d7:24:36:1d:02:b2:8e:a1:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:27:31:6E:10:DE:BD:50:13:C5:97:FB:83:0E:11:46:3A:01:61
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:7e:70:29:e6:58:f1:d8:1b:c9:68:18:4a:6b:d8:96:bc:
fa:1e:9d:f1:33:75:1a:b9:17:b8:30:80:71:79:fe:c2:2a:41:
31:f5:9b:9f:26:33:11:00:28:ce:5f:0e:9f:34:49:bd:f8:72:
c5:71:a5:c8:42:d0:eb:be:9f:2d:aa:42:51:bf:15:c5:7b:f2:
38:51:a7:72:6a:af:9e:10:70:c3:f3:a0:d7:07:be:db:30:d3:
09:65:18:8f:ec:a3:b8:5f:6b:d1:52:bd:67:1d:d6:04:f5:eb:
78:36:24:7b:a0:fc:8f:01:e3:86:ba:a0:2e:c5:a0:c9:a0:05:
eb:63:bf:1f:91:93:2e:db:6f:11:53:6d:8e:6f:f5:44:30:7a:
c6:fe:fa:f3:d3:e2:e2:d2:62:b5:aa:98:48:f9:4b:61:87:9d:
5a:d2:c4:70:a0:38:d5:76:b3:22:26:5b:8c:40:b6:3d:95:85:
45:5f:f6:97:81:46:db:85:8b:24:14:ec:d2:c6:14:65:fb:5a:
bd:66:87:d6:62:fa:19:83:a3:2b:68:14:00:5a:7f:b1:92:65:
d6:a3:cb:c4:1f:90:f1:ce:43:83:dd:5d:79:09:8d:8c:65:15:
4a:d6:34:f0:7d:49:bc:de:ca:ab:13:5d:39:dd:4d:73:9e:85:
fb:30:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:44 2025 by rpki-client