Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: WMcJxgdj4xBpfbR3e9J5jI6GeyU/uto8+cNjfVphSsM=
Subject key identifier: 49:85:6D:48:44:9C:C5:9E:0F:EE:87:9E:DD:F5:72:8D:D5:DB:A1:70
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019A4D73B9052236D164C78842B0D42FA8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:20 +0000
Manifest this update: Tue 04 Nov 2025 06:00:20 +0000
Manifest next update: Wed 05 Nov 2025 06:00:20 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: btuIUhAE8kEkcLkcZYqs7Iw6z3JIWyS30vtj12EISFo=)
2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b9:05:22:36:d1:64:c7:88:42:b0:d4:2f:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Nov 4 06:00:20 2025 GMT
Not After : Nov 5 06:00:20 2025 GMT
Subject: CN=49856d48449cc59e0fee879eddf5728dd5dba170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:be:85:6c:32:8e:9c:15:fd:7e:7c:71:85:
7e:05:e3:bb:c7:9e:dc:66:8d:f3:ef:27:62:c8:49:
45:31:23:67:1c:ab:5c:de:dc:2b:34:7a:95:41:a7:
9a:dc:b7:ac:4e:ae:cc:bf:13:42:39:0a:88:91:e7:
f6:ca:59:97:ca:cd:3f:ac:a8:0e:79:fd:02:c9:27:
0d:80:38:fb:6d:ea:8a:f4:d1:73:eb:ce:8c:f8:28:
95:10:10:84:d7:d4:d2:3d:af:0d:9c:9d:4c:19:84:
d3:c2:4f:ab:26:99:34:fc:d4:ce:1d:40:89:50:e4:
f0:95:a5:2e:32:15:72:3c:e8:98:fe:72:0c:b3:a9:
a3:92:4e:73:8a:da:29:0d:49:84:3c:47:a7:17:48:
ce:a5:3a:62:62:02:ee:49:72:03:c2:21:c5:3e:9b:
01:aa:e1:26:c8:4e:42:cf:1c:6f:c6:f7:16:58:21:
77:4b:e9:f2:65:e8:b4:a1:c6:5a:e5:0e:4c:4a:1f:
c4:5c:2c:7d:74:b8:44:e5:18:e4:c4:77:e4:ef:69:
35:96:bb:f3:8a:d1:67:9e:b8:a5:66:01:a9:01:b6:
9d:5a:f8:d2:ea:81:e7:0c:65:aa:e2:3b:ef:cd:9d:
15:95:21:b7:7e:c1:2f:0f:fe:09:09:1e:d5:e3:76:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:6D:48:44:9C:C5:9E:0F:EE:87:9E:DD:F5:72:8D:D5:DB:A1:70
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:f2:2e:7c:e1:d7:b6:ca:b8:36:a6:28:34:1a:53:0d:3f:
60:b1:ce:b4:36:c4:56:04:e3:7b:f7:d0:49:d1:53:25:e6:b6:
e6:32:fe:d9:87:cb:b3:4b:5f:bc:ff:a5:be:39:73:0c:36:83:
5f:71:ba:87:99:f0:17:3a:55:ad:3d:67:e4:e7:8e:a1:f9:ba:
40:59:51:64:11:c4:fb:a3:6f:fc:7a:d7:50:50:39:62:7e:75:
e1:e6:6d:d7:05:cd:88:01:04:82:1a:1a:6f:d7:33:44:84:87:
3c:7f:7a:e2:5e:27:a8:69:80:39:5a:20:a0:a6:0e:f8:ea:a5:
89:97:22:30:8a:e7:ef:52:f8:f9:7a:19:fa:cf:c4:80:f7:90:
d0:95:c7:c5:86:12:26:b9:23:5e:95:52:5c:c0:01:73:35:5b:
7f:d2:a4:96:64:4d:d4:24:d4:bd:2f:a4:6b:0c:3d:e4:cb:31:
c3:18:8c:c8:5f:fe:f9:0d:2b:50:45:79:87:c9:df:90:fa:59:
9f:b0:d3:5f:a7:95:0c:30:39:d6:68:6e:19:64:a5:5d:a3:06:
f7:90:18:0d:c3:77:8f:0b:27:0d:2b:48:d0:12:02:67:9b:35:
41:56:4e:f9:41:7b:b3:fa:39:0f:81:4b:7e:d2:b6:a0:6b:23:
c4:98:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:52 2025 by rpki-client