Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: kO7MNsBuFViIPSRaZizFABTtvAFn8tYbakSfkw4y5VY=
Subject key identifier: 0C:2E:24:C1:B1:3B:66:3E:D3:46:7A:BE:97:7E:2D:63:C4:18:66:03
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019A52630B33D4B66D471D111847CE7B8233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 017C
Signing time: Wed 05 Nov 2025 05:00:13 +0000
Manifest this update: Wed 05 Nov 2025 05:00:13 +0000
Manifest next update: Thu 06 Nov 2025 05:00:13 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: 01jVAEc1sj5CKT7xM0iX5jE+ywcgM7DuVWchh9114ZQ=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:0b:33:d4:b6:6d:47:1d:11:18:47:ce:7b:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Nov 5 05:00:13 2025 GMT
Not After : Nov 6 05:00:13 2025 GMT
Subject: CN=0c2e24c1b13b663ed3467abe977e2d63c4186603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:be:a8:74:1a:d7:0a:4b:48:8d:b3:d3:98:
73:e7:4b:ce:43:60:34:7b:77:66:47:36:0b:19:31:
e8:ee:cb:d9:41:57:06:ad:09:aa:5b:40:d2:fa:05:
7b:e3:2c:de:64:80:cc:a0:1d:02:a0:1f:3a:98:3e:
d6:23:90:4f:b6:0f:2a:ed:8b:74:1d:17:c5:40:f6:
79:0d:85:86:ef:29:6b:36:5c:b8:82:1b:0c:78:aa:
33:7c:a3:7b:59:70:84:45:40:07:3c:a0:9f:b7:c0:
f2:da:f1:0b:cb:59:10:24:d5:8f:5f:c5:77:eb:79:
af:d4:39:40:a5:8d:d1:d3:e0:cd:a1:32:87:4c:06:
3c:00:09:56:6f:99:eb:3b:f4:e6:52:52:bc:c8:c0:
c0:5b:f4:5f:90:e0:e0:29:31:6b:2a:ab:3e:e3:ef:
ec:ed:da:d4:56:0b:d5:8d:d6:9b:f0:42:fe:76:fc:
27:85:ab:67:fd:ae:53:42:21:9a:23:19:83:27:28:
17:de:0b:63:76:11:f5:4c:71:e9:22:40:eb:46:94:
3e:03:f2:53:1c:aa:7e:9a:56:8f:f2:aa:d6:d7:ea:
9a:9c:17:46:87:66:d4:73:7e:ae:f2:ea:c2:ee:de:
fb:2d:46:81:fb:7e:af:b0:71:2f:28:aa:93:7d:40:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:24:C1:B1:3B:66:3E:D3:46:7A:BE:97:7E:2D:63:C4:18:66:03
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:b6:a7:d3:52:c5:8d:d4:99:88:62:d0:6d:90:cd:d6:06:
0d:82:5b:5a:3d:a9:f6:b4:71:71:2d:61:41:bf:2a:7a:8e:f2:
9c:0b:05:bf:7e:9f:20:32:ea:60:ce:5c:95:27:ca:fe:85:27:
2a:c5:fe:0d:84:78:53:8d:51:d5:52:bb:c0:58:db:64:05:49:
0b:16:0e:32:69:20:ce:6b:4a:83:95:7f:17:6e:e9:ea:5e:35:
cd:19:ee:e1:c1:f6:34:db:c9:08:92:40:93:3c:c7:8e:76:b2:
ac:67:ff:dc:f8:f3:e8:4e:a0:5a:a3:f8:4f:18:ca:fe:d5:f9:
d2:c1:6f:40:fb:95:8e:a9:75:07:65:b0:87:4c:9b:82:8a:43:
58:45:ea:70:41:25:eb:d5:c2:1e:df:27:be:82:eb:54:89:23:
ce:54:b3:1c:0e:67:9c:dd:e0:25:9a:b9:97:ed:8c:e7:96:12:
11:af:57:7b:a5:78:fe:8a:71:c3:80:ac:55:c2:22:7f:49:24:
9f:6a:b8:b2:55:1f:c5:bd:30:0e:73:9f:34:64:9c:ca:a6:28:
b2:54:28:21:c2:fd:d2:4e:e9:e7:4e:64:62:46:fc:8f:c6:90:
64:b3:17:5f:a5:f2:73:a5:b0:c7:61:1c:a6:b0:22:b8:aa:35:
ff:ba:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:10 2025 by rpki-client