Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: DWUppCL2IYlFJR9NAWSZ+7m3YAY9RwFL/Q4ZJQ8tbf4=
Subject key identifier: 19:E8:94:62:19:51:5B:22:70:BB:11:05:A1:D6:B8:29:0C:55:E2:71
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019A4F61FEDB15612C6899CB964A28C92792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 06A3
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: QxYrFVcrQ+XIKhbXbmwKtSabjKiAa+BudlRkNH+SYWE=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fe:db:15:61:2c:68:99:cb:96:4a:28:c9:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=19e8946219515b2270bb1105a1d6b8290c55e271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:93:de:3d:12:bd:65:be:06:39:b1:3c:f9:
c6:14:2b:f6:65:a3:a0:e9:c4:a9:a1:3b:e6:83:da:
3d:92:9e:85:c4:f7:18:08:ad:ec:bf:3b:6d:2c:87:
4a:49:cd:08:11:18:c6:e2:36:e9:87:df:da:be:c8:
2f:c7:a3:9a:df:c4:b9:3d:9a:2e:ab:ca:86:03:24:
5f:46:eb:c3:78:49:e7:ec:2d:2a:c0:6c:38:db:92:
68:fc:f9:64:6f:a1:68:91:41:92:ac:38:90:61:b6:
c1:6f:93:d8:88:e7:20:26:ca:35:0e:e5:01:bf:d5:
db:34:ad:85:50:29:c5:aa:ac:28:cd:cf:e5:60:07:
bd:e0:f4:3e:ff:24:77:ce:15:04:13:a1:a3:aa:05:
aa:52:7f:51:8e:1c:f0:33:03:9f:55:96:3a:25:85:
9f:57:f1:33:e4:44:bb:98:ca:2f:b8:73:b4:18:35:
05:72:46:99:c6:f9:68:69:91:64:61:c3:03:67:87:
d7:d6:cd:28:38:b8:ce:28:c9:8b:6e:dc:6b:3e:5c:
f6:5e:9d:6f:3b:4e:93:c1:63:94:5e:a0:d3:b1:71:
1c:13:ac:bb:6e:d6:45:3b:f5:b9:1c:44:31:a5:f5:
32:f4:df:30:3c:a7:13:17:8d:8f:72:65:4f:7f:2d:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E8:94:62:19:51:5B:22:70:BB:11:05:A1:D6:B8:29:0C:55:E2:71
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:ba:d5:cf:df:57:a7:d1:74:e7:06:b7:76:33:19:95:e1:
ca:18:26:a4:dc:20:3c:d7:2f:43:38:ff:3b:10:9c:e4:36:8a:
15:c7:a9:e7:47:ad:bb:24:ab:f8:1c:f0:44:62:bf:53:57:7e:
5c:73:7a:f0:51:89:72:e9:8a:d3:f0:57:c3:91:da:18:7c:d4:
a9:d5:6c:de:41:35:77:8c:96:43:05:72:51:90:0a:0f:ab:15:
da:83:91:fc:b4:66:9c:86:f5:9c:fc:0c:a8:a1:a9:f7:64:36:
37:1f:16:8b:3c:25:c1:f3:0a:ce:38:8e:db:a4:b5:ff:1d:e9:
71:8c:96:9b:8e:2c:01:2c:39:40:04:b0:a7:64:cf:50:4d:be:
ee:bf:46:04:01:04:52:7c:1d:5e:89:99:89:df:7d:08:cd:15:
50:15:af:65:d1:41:09:03:93:65:4f:ad:bb:7e:f7:33:fd:8f:
14:8e:9a:cc:fb:57:fa:c6:e9:26:ef:5c:34:1e:27:64:b8:5e:
5b:b4:5e:12:9d:1a:80:f1:96:20:a2:c8:76:ad:54:56:3f:c8:
c6:de:41:bf:6b:87:d5:42:1b:d9:15:65:3d:81:84:5a:b6:5d:
59:43:6f:df:c7:99:d7:8e:1d:9f:39:c8:1b:e8:e7:4f:ea:4a:
2a:80:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:44 2025 by rpki-client