Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: H0IRpdNGDAqI33Sag/nNIt9jV2VT7PdpRlK0lnJy6pE=
Subject key identifier: 19:AA:5F:EB:8A:A3:F4:6A:05:C4:FE:63:C0:3C:DD:3D:FD:2A:9C:C1
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019A4FD01D8856B49FF1BEB6107724C9B442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: WNdMe8/q145yBBn5L5+/a2Rul0nN/SMlFUoC9heoiIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:88:56:b4:9f:f1:be:b6:10:77:24:c9:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=19aa5feb8aa3f46a05c4fe63c03cdd3dfd2a9cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:ee:28:19:68:3d:40:d0:ba:2b:db:33:83:
78:a5:7e:d9:ef:7b:82:12:ab:60:9b:bf:42:fe:9c:
d7:fe:4f:15:6d:bc:b1:36:1f:6f:3a:e5:e3:65:0d:
4a:ad:b4:32:d7:62:40:c5:53:bc:d9:b7:85:8c:94:
d1:8c:f3:13:0e:21:41:36:16:78:e5:a7:48:ae:d9:
9f:92:3f:5a:15:3f:0a:c1:11:70:ea:d7:78:75:b1:
a9:5a:e7:5b:23:24:af:d2:94:6b:b1:94:08:01:4f:
c8:90:98:38:5d:8e:2d:d6:18:1a:d8:8b:9a:81:fc:
93:a8:b2:f4:f7:52:c5:0b:5c:32:1a:3a:9a:48:23:
48:37:be:e4:b6:72:a7:38:33:36:87:bb:4e:80:f6:
87:e4:39:0c:d3:ce:66:e9:c5:62:1b:f3:7d:d8:dc:
3e:59:43:c1:37:d8:c4:59:9d:1a:0d:a0:57:c3:12:
7a:d2:8b:4b:12:f6:db:0d:12:51:16:e0:66:6b:07:
12:82:a4:cc:c0:1b:7e:56:92:a5:2a:55:2f:db:58:
5b:98:07:46:f0:8e:e0:da:48:3a:5e:23:8b:98:61:
a7:a6:46:93:49:86:42:e4:24:a3:ee:36:cd:2a:f0:
21:54:2e:15:36:dc:52:d5:c3:39:36:6a:2e:c6:6b:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:5F:EB:8A:A3:F4:6A:05:C4:FE:63:C0:3C:DD:3D:FD:2A:9C:C1
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:79:0c:2d:83:da:3f:dc:a2:77:85:98:43:9a:25:e0:27:
3b:8b:74:86:4d:5e:75:bd:b0:51:fb:8e:62:79:0a:73:b9:dc:
7e:81:c5:96:f4:e8:7f:1c:2e:cb:99:21:0c:ce:6e:85:43:65:
9f:ad:3b:14:5e:c5:94:18:de:05:18:8f:91:72:f9:63:a6:8d:
c0:00:6e:51:d0:85:aa:e6:e8:22:2f:82:9b:1c:82:c4:b8:e3:
3e:ea:1f:08:02:38:ba:a0:fc:24:de:70:5b:18:d2:4c:e2:02:
38:de:27:49:a6:9a:21:69:13:4b:bd:cd:84:28:57:98:fb:77:
51:ee:4b:21:7e:b8:f0:00:66:56:92:c6:c4:2c:f2:88:28:a5:
a4:c4:dd:ad:5f:79:72:8b:e5:f2:03:a1:4d:e6:82:a6:3a:e0:
44:98:9f:f6:f0:09:36:31:61:38:9a:e9:01:1d:44:d5:a5:ee:
ed:3e:b9:49:ca:d0:10:d4:8c:95:9d:06:0a:34:6b:d0:eb:69:
a6:7f:f6:96:04:b0:9a:1e:16:eb:74:eb:f6:98:22:e2:44:15:
52:29:a7:57:27:a4:86:4c:2b:3c:a7:7b:fa:dc:c8:3c:bc:19:
5d:15:b2:12:05:a5:c9:77:5f:fd:85:0a:21:3a:87:4b:8a:05:
6b:80:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:17 2025 by rpki-client