Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: A9avOkWTFYMG9vptUhNJ2sxQrzcrOA2uO2PocPLKNCQ=
Subject key identifier: 5F:57:DF:FD:75:20:A8:5D:70:33:04:76:C7:74:B2:97:10:48:0A:74
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019A503DE806B0876052D8664A9C28C41D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: 6JPLX1nBPFf8OqUXPUyVcpg4zi6V2upGMJym+wdL8YE=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e8:06:b0:87:60:52:d8:66:4a:9c:28:c4:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=5f57dffd7520a85d70330476c774b29710480a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:ad:a2:0f:90:ed:fd:e4:76:6f:f6:8e:56:
fa:3f:da:b1:2f:9a:e9:7b:36:9d:a7:68:63:1c:48:
2b:e2:d8:c2:db:00:40:6a:3c:a4:29:f2:ee:94:e8:
e9:74:39:7b:55:b1:17:42:38:cc:bd:55:cd:c8:72:
ac:f5:cc:8d:17:f8:e7:21:bb:6b:5c:72:57:c3:3d:
7b:7c:53:f4:08:9f:81:ed:8f:51:07:45:39:2d:e8:
14:78:53:9f:d0:45:fb:89:b5:ca:68:ab:17:16:18:
b8:f5:ed:36:2d:ff:5e:4b:e1:bd:7c:a2:62:0e:22:
4e:79:6a:81:e6:51:51:61:5a:40:38:78:7c:58:3f:
18:a4:d3:d9:93:b0:c5:41:c8:bf:94:3b:07:5e:00:
ab:40:2f:72:9e:11:98:37:d8:cb:50:86:b4:c7:65:
9d:e9:99:65:28:3f:4f:29:64:e0:8b:8c:cb:04:6a:
95:75:32:6e:77:7f:d6:ef:91:05:51:ac:91:25:0a:
14:53:c8:f4:fb:e8:5f:10:46:ef:a4:60:0a:a6:c1:
7b:b6:37:ed:ee:cc:b7:06:62:89:3c:b4:93:eb:19:
eb:11:01:02:ec:e1:30:2e:85:99:f5:51:ca:6f:f3:
34:22:4d:cf:dd:a3:25:a4:1d:1b:a4:64:de:c1:91:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:DF:FD:75:20:A8:5D:70:33:04:76:C7:74:B2:97:10:48:0A:74
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:cb:8d:68:23:5c:f4:b4:e3:a3:f7:3f:55:fa:d4:fc:eb:
85:2a:1d:0f:49:80:37:76:47:56:6b:cb:96:cb:cb:92:d2:b2:
eb:05:da:f5:3e:de:3e:de:99:f3:83:62:33:64:40:c2:f1:59:
98:e6:c5:90:06:bf:d6:10:46:59:76:d3:e5:a6:58:6f:fe:bf:
77:67:87:5b:d3:01:9c:67:6b:cd:72:ac:8b:fe:f5:43:47:c6:
de:29:f2:fe:8b:00:64:6f:97:eb:ff:76:73:3f:9b:81:ef:bd:
a4:2e:3b:11:3d:00:fd:59:6d:70:32:ad:41:06:bd:c9:a8:72:
73:52:36:90:f9:eb:06:4c:bb:03:3d:11:52:0d:8b:89:7e:db:
f5:23:5d:9e:75:4f:d2:d3:98:e7:28:4b:1d:13:6a:e4:eb:6a:
a6:28:27:65:98:3b:0a:f5:b3:ef:e9:58:5e:af:80:07:44:c4:
71:1a:53:9f:59:91:59:63:7a:43:30:df:6a:ac:64:c2:12:8a:
fa:d0:c1:30:15:69:0a:d1:8f:c0:ac:9c:ea:21:28:6d:f5:f2:
59:d4:fa:e9:96:79:b6:fc:f4:58:8d:03:af:5b:5d:43:90:f6:
21:92:8f:94:e4:ad:3d:e7:11:89:35:a5:15:9f:fd:4f:61:e9:
ea:27:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:05 2025 by rpki-client