Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier: 0MUPEdzDXiIMnv0bs/vTf6kvwjmhyhGe0fcinWMnxdQ=
Subject key identifier: 45:2D:26:C7:96:0D:C1:B9:07:D6:23:3C:EC:C5:47:AC:36:6A:9F:26
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 019A4EF5C82BC4375509E4DF3B2A67C5CEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=)
2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: 3w1TCCgSF6HV9rReGbflYi6fubqBuqrhvAQ1F28mRec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c8:2b:c4:37:55:09:e4:df:3b:2a:67:c5:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=452d26c7960dc1b907d6233cecc547ac366a9f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:df:1c:7b:50:e0:f6:a8:9a:81:3a:8b:e4:
7d:13:69:a5:99:71:ca:de:98:23:69:ac:74:0f:63:
15:12:b7:03:28:a7:24:85:a2:bb:e6:46:4e:f0:39:
06:d5:0b:ad:ab:26:29:2a:9d:f2:6e:86:3f:58:f9:
2a:7a:7f:5b:df:5c:f0:7b:7b:a9:88:2b:1b:20:71:
73:fd:e2:bd:ea:bd:68:fa:cc:8a:bf:16:fe:57:63:
8d:a3:8a:f4:df:bd:bc:ae:64:67:3d:ad:79:43:f8:
b3:b1:d0:a3:f4:b5:fa:fa:68:e8:a5:17:97:26:2f:
35:46:30:5b:2c:e1:62:91:3d:0a:61:f3:d5:32:00:
36:dd:f2:1b:47:ab:2f:7c:10:42:b8:9d:f2:93:de:
3c:0b:c0:5b:19:e9:aa:e6:76:ee:eb:ae:e3:5f:c6:
7c:02:e4:7a:b5:29:e5:7a:cf:93:cb:62:21:2d:44:
df:89:22:7c:89:3a:10:7a:56:f9:a9:4e:27:f5:ef:
5e:af:5b:c3:0f:0c:80:7d:89:83:4c:c9:8e:89:91:
a1:2e:5b:fe:c1:e7:de:72:3e:ed:0c:43:6f:f6:0d:
c8:de:28:f5:d8:16:9c:76:32:61:1e:a4:4e:f1:01:
76:07:f3:3a:90:5f:d9:92:aa:8e:f7:a8:42:95:2a:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:26:C7:96:0D:C1:B9:07:D6:23:3C:EC:C5:47:AC:36:6A:9F:26
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:8d:14:a8:e6:1a:0c:6c:3a:65:f3:6a:df:71:84:e0:55:aa:
e2:68:74:cc:c0:21:64:a9:19:95:bc:25:0b:08:e4:f2:0f:f3:
dd:49:8b:34:93:57:91:29:3c:b8:fd:dc:d4:b8:5b:02:ed:01:
cb:11:93:f4:45:d0:af:e9:b3:b3:75:03:fb:4e:c8:e7:19:b6:
a3:2f:d5:21:19:79:31:66:8a:33:ae:af:de:77:47:ea:93:7d:
3c:87:82:74:e6:18:6d:8f:12:74:cd:e4:fe:8f:d5:2e:0f:ef:
3e:a9:3a:2f:59:a3:b9:46:41:76:3d:98:68:3e:3d:36:c6:f7:
6e:98:20:57:fe:26:63:91:70:b1:20:b8:b2:07:ab:92:64:ec:
d0:d6:2b:3d:c3:23:99:4c:60:30:e0:7d:34:40:00:e5:c3:d9:
98:8b:04:bb:98:29:f2:6f:8e:d1:99:26:e9:b5:e7:4d:7f:83:
dd:db:95:1e:cc:53:48:2c:d4:6c:7b:0c:65:de:d7:c8:76:b6:
7c:10:ef:8c:9d:6c:ae:40:44:a8:01:f0:f2:89:03:c1:5b:3c:
47:9c:b8:56:4f:fb:c3:c1:4c:cc:e7:2c:9e:d8:cb:40:59:ad:
f9:50:f1:54:2e:26:5b:38:a5:d6:9d:f2:2f:2e:78:20:74:93:
de:bb:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:09 2025 by rpki-client