Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: cWMgducCJ1dlXocEepkkt8M4M9kFqP/ef/MKjF3O9Q4=
Subject key identifier: 1E:1C:33:33:AD:3D:EF:5A:43:4F:6A:20:B1:72:9B:73:B3:C4:5F:AC
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019A4D3D16E950360E3BC28DD9F42775B188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: u4fqCF8toXOmol7il77YTLybBsJe7QDgw8kBkHL8mis=)
2: I11yOf8621A4bMVjivGCunNhodU.roa (hash: zD+DtTuh65HplID/p8Q/zTlZEI94dke+hM79PxEcBgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:16:e9:50:36:0e:3b:c2:8d:d9:f4:27:75:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=1e1c3333ad3def5a434f6a20b1729b73b3c45fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:82:25:f8:a0:ad:92:ba:2f:2f:c0:b1:6b:
12:65:49:a0:60:bb:89:10:e1:1f:91:38:75:3f:83:
2d:73:00:b4:63:1a:b8:a6:07:7c:d9:ec:28:c3:9e:
06:fe:e0:78:e7:ac:29:44:3b:4c:db:47:b0:43:f3:
81:c7:64:2a:9f:2d:1b:fb:b5:71:8f:e3:52:58:ee:
ed:cc:5a:13:1c:99:03:b9:e7:fe:4a:31:4a:a7:8d:
77:9e:07:14:89:26:d6:60:c1:cc:1f:7c:2c:b6:d6:
29:0e:42:09:d4:6f:38:17:90:b6:ad:58:b6:ad:ee:
23:a4:a5:08:13:6b:55:d4:40:5d:2b:d1:5c:29:15:
aa:34:09:24:80:79:23:9c:1a:70:76:21:ce:8c:88:
46:fa:ef:fd:60:c3:58:d2:9f:da:69:50:b1:45:aa:
c1:d6:55:a8:ad:88:2f:89:31:fa:44:c9:8d:8b:af:
e9:85:90:5e:81:7a:e6:3d:7c:a6:45:e9:62:3a:1e:
8f:99:03:71:90:3c:3e:0d:3b:df:f8:c3:7a:a5:05:
fe:79:df:cd:78:63:d0:2b:31:ec:f0:ca:33:4f:3d:
ca:b6:3b:ca:cb:e9:93:fb:1e:5a:b0:fb:0a:36:a2:
7d:d1:ab:98:94:0b:66:28:f9:0b:88:1a:0b:ba:f8:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:33:33:AD:3D:EF:5A:43:4F:6A:20:B1:72:9B:73:B3:C4:5F:AC
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:7e:9c:32:ef:5a:49:fb:9a:e2:d7:d4:3e:de:67:ce:8d:
71:97:c4:92:7c:1c:62:a3:9e:aa:6f:7f:59:8c:89:3a:24:ca:
82:34:25:cd:52:28:28:0c:32:e8:82:3b:c1:fb:1b:61:be:c4:
e0:0a:a0:20:2a:91:02:26:17:c9:c0:9b:33:7c:fe:7c:2e:77:
60:b3:5e:cd:29:ec:31:b0:0f:aa:3f:55:ed:af:63:87:b4:45:
dd:4e:15:b2:f2:b8:fa:ce:1f:41:49:01:39:52:cd:ad:2b:6e:
e8:5d:07:e5:2b:30:37:da:27:cd:97:a3:71:08:51:f3:a3:99:
83:14:3f:a5:c6:05:88:b0:ea:6e:6d:60:12:f8:a0:1e:3d:52:
3c:f0:fe:6a:c0:2b:2d:ca:b0:67:ec:a3:33:ef:51:81:93:7a:
19:be:da:bc:d2:7b:eb:e9:5c:b8:f3:e2:d0:51:f8:0b:2a:f2:
95:f9:d9:56:ea:fc:67:aa:52:60:79:de:5b:cb:41:89:c6:b0:
ef:42:c2:53:9f:f3:fb:fa:eb:8c:5c:0c:7c:d2:3b:7b:b4:81:
42:9b:b6:ee:e6:47:01:29:ac:82:46:d0:85:f5:ca:0e:f5:e0:
8e:b9:fe:6f:2d:5c:9d:56:75:a1:8a:01:c8:6b:15:8a:b5:b3:
88:34:f3:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRbpUDYOO8KN2fQndbGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRmMzU3MjFjYTMxYTgzZTJmNmU5MzdlMTc0MDhlNmU3
YjJjNjEwHhcNMjUxMTA0MDUwMDQwWhcNMjUxMTA1MDUwMDQwWjAzMTEwLwYDVQQD
EygxZTFjMzMzM2FkM2RlZjVhNDM0ZjZhMjBiMTcyOWI3M2IzYzQ1ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fWCJfigrZK6Ly/AsWsSZUmgYLuJ
EOEfkTh1P4MtcwC0Yxq4pgd82ewow54G/uB456wpRDtM20ewQ/OBx2Qqny0b+7Vx
j+NSWO7tzFoTHJkDuef+SjFKp413ngcUiSbWYMHMH3wsttYpDkIJ1G84F5C2rVi2
re4jpKUIE2tV1EBdK9FcKRWqNAkkgHkjnBpwdiHOjIhG+u/9YMNY0p/aaVCxRarB
1lWorYgviTH6RMmNi6/phZBegXrmPXymReliOh6PmQNxkDw+DTvf+MN6pQX+ed/N
eGPQKzHs8MozTz3KtjvKy+mT+x5asPsKNqJ90auYlAtmKPkLiBoLuvj3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4cMzOtPe9aQ09qILFym3OzxF+sMB8GA1UdIwQY
MBaAFNok81chyjGoPi9uk34XQI5ueyxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lY2VjZjQtZTkzMC00MTkyLTg0ZGQt
ODBmMzFkM2VhMTUyLzEvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lY2VjZjQtZTkzMC00MTkyLTg0ZGQtODBmMzFkM2VhMTUy
LzEvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx5+nDLv
Wkn7muLX1D7eZ86NcZfEknwcYqOeqm9/WYyJOiTKgjQlzVIoKAwy6II7wfsbYb7E
4AqgICqRAiYXycCbM3z+fC53YLNezSnsMbAPqj9V7a9jh7RF3U4VsvK4+s4fQUkB
OVLNrStu6F0H5SswN9onzZejcQhR86OZgxQ/pcYFiLDqbm1gEvigHj1SPPD+asAr
LcqwZ+yjM+9RgZN6Gb7avNJ76+lcuPPi0FH4CyrylfnZVur8Z6pSYHneW8tBicaw
70LCU5/z+/rrjFwMfNI7e7SBQpu27uZHASmsgkbQhfXKDvXgjrn+by1cnVZ1oYoB
yGsVirWziDTzbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client