Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: 0hzPBquofEE/I3gbgbhWcm5b5nStdZsu8unAB9RlzrU=
Subject key identifier: 25:F4:0B:BE:9D:2E:8B:4B:A9:DF:1D:19:44:B5:E0:09:CD:AD:82:5B
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 019A4E86B7FA26103FE3E18DAAEFC60FAEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: 4o0gn1fOk+YJWG8m9ePJOp85OwTD+F1T/apP6U7Acsg=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b7:fa:26:10:3f:e3:e1:8d:aa:ef:c6:0f:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=25f40bbe9d2e8b4ba9df1d1944b5e009cdad825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:05:49:b1:91:8e:24:33:b4:b3:f1:f1:08:
a3:3c:2c:0d:f3:33:ac:20:c4:a6:93:cc:9b:55:fd:
a9:ff:2f:25:96:3a:e9:ee:22:ef:07:e4:01:56:93:
d0:e6:cc:71:f8:d2:bd:5a:06:58:0a:d2:ba:80:83:
e5:81:cc:22:b5:0d:71:11:fd:c7:ce:d6:50:d2:90:
c6:32:41:42:4b:be:bb:cb:85:61:17:11:33:ff:38:
d6:31:0f:c3:08:03:a8:e1:50:83:4c:24:bd:f9:32:
1f:3a:ff:02:72:93:97:1e:a6:55:87:9b:0e:32:d7:
30:f7:35:db:97:01:a3:04:a5:fd:5f:2f:d4:c9:5f:
e5:d6:93:69:91:1f:27:30:4e:56:dd:f9:37:f8:df:
f9:d1:69:3d:9b:2e:f1:6b:c3:74:82:ff:3a:6c:5d:
c2:0f:e7:04:13:2b:6c:87:f3:c4:2b:bf:73:ce:d8:
93:3e:fe:af:e2:9a:f2:0a:c0:5e:3a:b9:eb:f3:44:
ce:cd:2f:ed:5d:09:74:70:e0:65:f2:fa:27:6b:ab:
a1:48:60:b4:6c:02:a0:8c:36:1e:a1:3d:7c:5b:d4:
fb:59:70:2c:24:8a:b5:3c:21:45:79:1e:ef:2d:a6:
78:20:1a:d8:a5:5b:e4:04:bb:37:0a:d3:11:d1:a6:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F4:0B:BE:9D:2E:8B:4B:A9:DF:1D:19:44:B5:E0:09:CD:AD:82:5B
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:c4:89:40:c1:c4:7c:05:39:2e:ad:f3:bb:d8:09:78:61:
c2:97:80:d9:db:7a:3a:56:24:75:eb:20:68:0f:87:b4:c2:15:
49:bb:ea:20:c2:02:73:9f:0a:7c:48:92:6b:19:dc:6e:94:bf:
5b:fb:5d:ab:7c:9b:52:72:48:f1:e8:8d:e6:17:22:da:af:9f:
38:aa:bc:00:3b:d7:86:70:35:f7:08:b8:dd:7c:8b:3a:5c:fb:
f0:0a:cb:ef:ce:dd:a1:11:3e:c9:90:19:bf:16:71:59:75:1b:
cd:a3:5a:4c:f1:6e:01:a7:94:82:ab:40:ef:e3:e2:6f:68:97:
99:c1:7b:a2:4b:06:1f:85:c4:82:e7:01:da:70:27:f6:28:16:
f4:db:f0:8d:19:d4:55:7a:e7:13:3f:b6:c0:fe:78:a7:dd:ff:
9c:5b:6c:65:96:4f:58:50:65:37:9d:37:2d:47:da:70:7b:9c:
a1:eb:6d:6e:e3:c6:52:3b:0b:07:ee:0b:64:0f:5b:41:cc:dc:
6d:e5:d0:44:c5:a9:f4:ae:94:dc:bd:68:1f:4c:2f:db:97:e3:
27:5c:85:3c:a6:c7:59:0a:1d:10:54:9b:f5:bb:ee:44:ed:ee:
e6:7e:99:97:1f:5e:ca:a2:d7:66:b1:eb:93:a3:b2:26:da:ef:
13:be:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:36 2025 by rpki-client