Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: b3Y2V78tpdFHUBVsDUkxdgY/pWpQ+mCjFyJMCz5cubk=
Subject key identifier: D0:87:78:B4:AE:36:83:0C:36:3E:58:0E:DC:8A:91:79:6B:21:A3:F4
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019A522CAD73D7BD3543A43208BEB7B85978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0D00
Signing time: Wed 05 Nov 2025 04:00:50 +0000
Manifest this update: Wed 05 Nov 2025 04:00:50 +0000
Manifest next update: Thu 06 Nov 2025 04:00:50 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: RSx9IS020PYSTfruoIV2ERstSvo7erS+77791ggPrXM=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ad:73:d7:bd:35:43:a4:32:08:be:b7:b8:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Nov 5 04:00:50 2025 GMT
Not After : Nov 6 04:00:50 2025 GMT
Subject: CN=d08778b4ae36830c363e580edc8a91796b21a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:96:26:60:29:07:c2:61:26:6c:56:52:38:
89:0f:7e:84:c0:a3:88:df:64:42:43:f3:b0:4b:d6:
3a:f2:9a:bf:3d:f9:1d:f4:3c:f5:8c:e3:71:f2:5d:
58:71:48:00:fa:9e:6f:26:a7:c6:5b:da:02:da:7d:
fd:f7:ed:29:28:d6:ab:dc:72:b8:2b:3b:12:41:84:
ca:31:28:5f:3f:5e:2c:5a:21:4c:ca:23:ad:a9:5d:
ae:d5:4b:00:92:ac:3b:b4:8c:85:6a:3a:dc:58:e8:
51:c6:a9:74:ba:db:21:d6:63:a3:5d:e4:dd:6b:29:
27:73:04:ce:e0:69:fc:ef:71:55:f3:ff:3e:cd:28:
dd:a1:94:ff:5c:17:a3:ae:4d:b5:46:dc:f5:45:a9:
ad:b7:55:79:42:de:b8:78:b1:c7:d1:03:73:c4:ee:
38:ba:5b:35:e3:eb:81:05:0c:42:9a:4d:a0:1b:37:
e7:56:e4:2f:45:d1:aa:9f:d7:44:1d:f5:69:8b:ba:
24:d7:0d:33:0a:6c:8f:63:b3:b4:ce:40:23:c5:fc:
2d:4f:06:8a:01:2e:1a:ca:75:63:bb:4c:b3:a9:05:
2f:c6:e2:35:af:3a:46:b4:42:74:ac:01:c8:de:9b:
d6:00:29:19:28:bf:70:43:60:f5:90:d4:f4:bc:d2:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:78:B4:AE:36:83:0C:36:3E:58:0E:DC:8A:91:79:6B:21:A3:F4
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:cf:b0:dc:ed:89:26:96:1e:67:38:7f:82:6b:70:33:b6:
7c:62:56:b2:3c:a0:79:9c:6f:80:44:39:df:df:4e:23:74:27:
05:f2:db:40:f3:9d:21:37:d0:a0:58:15:d3:6c:34:b6:ff:1a:
9d:6d:ec:2f:4f:fa:2a:06:25:a6:55:5d:94:9d:6e:11:6e:19:
a2:63:b0:16:a9:9f:44:6b:c8:93:d4:fb:75:4a:d3:87:47:ef:
e0:32:ce:a3:cd:48:c2:a9:03:71:4a:63:ea:2b:bb:62:96:dc:
6c:70:17:1d:f5:50:ad:14:20:7b:df:bc:d8:9c:e1:b4:39:37:
01:c1:6d:ba:40:79:91:c2:c6:e8:75:5c:36:a2:ea:cd:07:61:
6f:89:01:35:8f:27:a2:52:d8:9b:c7:45:d5:68:fc:30:91:f6:
fe:a0:57:7c:8b:74:20:80:5b:78:22:be:63:ee:7f:35:65:1c:
40:4f:6b:47:c6:0b:d3:7f:32:78:a3:ef:f6:68:8a:55:7a:5f:
53:94:12:b6:8d:0a:0e:74:83:cb:ff:2f:33:41:d2:68:6a:7a:
80:78:a3:21:45:35:b3:27:fe:15:1f:1c:02:3a:69:ab:01:1b:
40:b2:f4:65:d7:b8:7b:f0:93:0b:88:6f:fc:24:b4:63:16:78:
b4:d3:88:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:47:29 2025 by rpki-client