Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File: 2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier: PE8MNwo/RGyCIlIxSbiqRUWsAaFHBh4nWCm4cnciKXg=
Subject key identifier: 82:49:35:CF:E2:67:84:90:7E:92:3D:39:1C:92:75:22:25:7F:D6:72
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 019A4EF436170C5397CAECA33E391F6AB25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: JibyURtmFuwqp+DqH0g7RHowfG4UDBA82c8MzZgGIL4=)
2: 9AJVL74Koo20QslQbsW5LgWmuN0.roa (hash: ywfcVkqztZIsa4yV5w7CN7DaKI/bsZeXQWa9VUzq1PU=)
3: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (hash: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=)
4: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (hash: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=)
5: k8SmLkdRoGivF16GFM2hqIOouBo.roa (hash: Ktq3us91dVySgQu0CPwEqVesPVx0pk3gPFhcWjBn49E=)
6: qHajeM7KS0OkvXZ6gKIN6UcTzPg.roa (hash: 9Inme+UM24UQgsOmhNMhOS7m0XYuhceY/GRE7b5eI94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:36:17:0c:53:97:ca:ec:a3:3e:39:1f:6a:b2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=824935cfe26784907e923d391c927522257fd672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:4b:75:11:71:94:2b:fd:09:cb:65:a7:f3:
30:ce:d4:6f:1e:94:66:bb:f9:42:88:5e:d9:20:92:
10:62:e5:ba:81:e6:25:b0:83:ce:d2:fe:c7:13:15:
b9:04:12:4b:40:a6:54:34:cc:74:5e:1c:c9:7e:07:
1e:8d:12:61:56:ba:11:72:40:ee:4a:32:38:3f:e2:
a2:45:4c:29:9b:94:33:9e:e6:cb:df:18:75:fe:36:
8e:0e:7e:a3:6a:fd:09:aa:a6:9a:62:ad:b8:ad:c0:
28:d6:4c:51:7a:33:8b:20:5d:08:c3:fd:6b:49:ab:
a7:2e:a1:31:d4:9c:9b:33:15:c0:c6:41:54:0f:10:
d9:b8:63:e2:44:e9:71:2b:70:27:24:0b:0e:6f:45:
16:d0:a1:27:2f:33:27:df:07:15:f4:3f:fa:63:ed:
dc:49:49:96:10:05:5a:1e:b7:fb:9b:c4:9b:cf:9a:
93:1f:07:d5:90:57:fa:bd:c3:f4:5a:43:9b:f5:39:
18:2a:55:4f:2c:35:38:68:1e:7e:e4:71:ac:11:d4:
4f:58:26:db:bd:6f:1e:89:5b:9b:f9:7e:90:d9:0e:
82:be:ec:01:70:7f:08:ae:06:b4:cb:c5:03:c1:81:
d3:dc:2c:0a:e0:01:cb:3f:ae:75:56:25:aa:ca:df:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:35:CF:E2:67:84:90:7E:92:3D:39:1C:92:75:22:25:7F:D6:72
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:15:60:40:6b:a1:f1:db:b4:3d:54:e6:3a:20:aa:8f:f3:
5c:be:15:4e:da:a1:29:40:eb:2e:64:65:01:fd:81:f8:ab:06:
99:18:22:5d:f6:4d:1a:b2:c7:17:82:be:f9:55:fd:a6:cb:ec:
eb:1c:e2:91:65:1c:3c:98:3e:d5:47:01:04:96:54:76:69:ce:
52:23:87:24:e2:dc:3f:ab:d4:38:e9:41:50:0b:4c:6c:8e:a2:
3a:74:c1:70:b1:29:2a:61:f8:52:59:d9:d0:c3:1d:71:8b:a1:
27:db:5e:28:7b:3b:8d:42:16:a4:d7:d4:66:a0:ce:d7:67:d1:
07:3e:6a:56:33:d7:b1:f0:42:6f:21:1a:f4:24:f8:aa:61:de:
8d:a4:01:77:bc:90:84:16:fb:39:2a:5a:cd:fd:e5:7d:48:29:
35:2b:f0:5a:e9:ea:f8:d7:99:0b:5c:77:d8:1f:80:fd:e4:4a:
a7:d0:fd:d3:5a:0a:24:98:49:9c:33:9d:bf:61:c6:36:77:f1:
27:35:b8:42:44:55:2b:cf:af:fc:8d:bc:22:59:ef:1c:d0:59:
70:16:30:2f:5e:38:70:61:d0:1e:21:1c:13:01:f6:82:0f:30:
31:dd:aa:d8:90:62:d5:a4:b9:f3:45:72:ad:e7:9d:35:55:72:
e8:a6:3f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DYXDFOXyuyjPjkfarJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjUxMTA0MTMwMDE4WhcNMjUxMTA1MTMwMDE4WjAzMTEwLwYDVQQD
Eyg4MjQ5MzVjZmUyNjc4NDkwN2U5MjNkMzkxYzkyNzUyMjI1N2ZkNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbVLdRFxlCv9Cctlp/MwztRvHpRm
u/lCiF7ZIJIQYuW6geYlsIPO0v7HExW5BBJLQKZUNMx0XhzJfgcejRJhVroRckDu
SjI4P+KiRUwpm5QznubL3xh1/jaODn6jav0JqqaaYq24rcAo1kxRejOLIF0Iw/1r
SaunLqEx1JybMxXAxkFUDxDZuGPiROlxK3AnJAsOb0UW0KEnLzMn3wcV9D/6Y+3c
SUmWEAVaHrf7m8Sbz5qTHwfVkFf6vcP0WkOb9TkYKlVPLDU4aB5+5HGsEdRPWCbb
vW8eiVub+X6Q2Q6CvuwBcH8Irga0y8UDwYHT3CwK4AHLP651ViWqyt+NHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJJNc/iZ4SQfpI9ORySdSIlf9ZyMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqoVYEBr
ofHbtD1U5jogqo/zXL4VTtqhKUDrLmRlAf2B+KsGmRgiXfZNGrLHF4K++VX9psvs
6xzikWUcPJg+1UcBBJZUdmnOUiOHJOLcP6vUOOlBUAtMbI6iOnTBcLEpKmH4UlnZ
0MMdcYuhJ9teKHs7jUIWpNfUZqDO12fRBz5qVjPXsfBCbyEa9CT4qmHejaQBd7yQ
hBb7OSpazf3lfUgpNSvwWunq+NeZC1x32B+A/eRKp9D901oKJJhJnDOdv2HGNnfx
JzW4QkRVK8+v/I28IlnvHNBZcBYwL144cGHQHiEcEwH2gg8wMd2q2JBi1aS580Vy
reedNVVy6KY/Cg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:19 2025 by rpki-client