Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: RXnDQlNQQziPNnSCKlE0yk7igBS5JZESN6mOMjUU/Tg=
Subject key identifier: 03:3A:60:AA:87:10:BA:3B:25:32:30:B5:EE:DB:26:C7:E5:F6:6D:01
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019A4E8694CE3AAD07ECB8D46F9DE9C34FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: zOflVbcOzVq+RApXbtZSjNgl75enX4AXujmr/zjxSNE=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:94:ce:3a:ad:07:ec:b8:d4:6f:9d:e9:c3:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=033a60aa8710ba3b253230b5eedb26c7e5f66d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:06:03:ab:7e:02:20:ef:7f:2a:cc:40:38:
67:ec:3e:88:a4:d2:9b:db:14:0e:ca:ca:6c:10:99:
d2:96:7d:ff:29:70:6d:e6:8d:15:4e:7a:59:d0:c2:
2d:b8:18:1f:26:5d:fc:fe:82:dc:25:85:8c:cc:56:
78:ed:a7:2a:c4:30:54:7b:eb:ae:49:0f:71:ef:07:
e0:87:21:8f:09:33:86:75:7d:99:c8:fd:dc:f3:b5:
5f:d7:a0:5e:bd:c5:ce:aa:81:3e:32:f4:42:95:01:
ac:de:b3:06:45:38:3c:8d:b5:9d:77:19:ff:bf:8c:
f4:3f:c5:e9:ea:c0:55:00:04:20:47:64:50:7e:4a:
36:cd:82:9b:32:3b:38:a4:4a:9f:c2:a9:28:42:95:
f5:b6:4f:b2:cb:fd:4b:7b:e5:99:ef:e5:69:26:27:
53:b4:cc:92:c5:a6:aa:12:48:da:ac:b2:27:b4:89:
d2:1b:72:9b:bf:44:a8:f8:16:21:66:69:e9:9e:1c:
eb:c1:de:38:26:33:11:cd:6d:6e:17:c5:a2:21:83:
06:80:46:85:d2:20:08:5b:5e:a8:82:c0:f0:d4:c2:
c4:41:93:e6:ec:29:9d:62:ba:37:2e:24:79:73:e0:
f3:1b:3f:e6:b7:dd:1a:56:9f:b0:5b:b2:d1:5e:c3:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:60:AA:87:10:BA:3B:25:32:30:B5:EE:DB:26:C7:E5:F6:6D:01
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:52:b0:06:d5:f9:c5:75:16:51:10:4b:71:f9:30:8e:70:
ef:ef:fe:94:33:ea:b2:69:9a:ce:48:33:51:87:2a:4c:15:c9:
ad:70:7f:b5:7d:bd:fd:41:d7:48:6f:ad:e8:e0:66:d6:e6:a0:
c2:bb:0d:2c:91:a7:5f:96:a7:ca:49:36:63:dd:c4:b0:cb:9b:
e9:24:05:90:1d:d3:e5:33:0b:78:2c:b5:a9:03:eb:69:61:c6:
48:46:e0:19:17:60:7f:9f:52:63:26:20:c4:2a:55:93:e8:e7:
f0:73:ed:67:cc:72:fe:0b:90:53:3b:30:19:73:96:3f:23:3f:
28:8a:09:c1:3d:bc:44:d6:32:66:e1:39:21:56:52:dd:d9:fc:
9c:d3:a6:1b:f9:7c:b2:8f:1b:83:80:d6:57:21:48:43:f2:90:
6b:3c:0f:f6:0b:4d:a8:ec:68:65:f4:a6:c5:f8:03:e8:8e:9c:
35:ab:90:e0:b0:57:1d:f4:a3:fe:03:0c:e0:23:4a:8a:e1:e0:
9b:e1:2a:54:63:3d:19:73:ec:bc:5d:95:81:64:18:34:45:c7:
2a:e9:6f:87:a0:12:cb:b5:97:72:66:27:82:8c:a4:32:a0:49:
9c:62:30:5d:e0:19:36:9b:1d:be:fa:fe:92:68:e5:92:6e:06:
f2:d5:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:41 2025 by rpki-client