Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: Z4EQguaKr2m8dlSpv/MP+2vbJfWzj4qcyHZ33HyrxPE=
Subject key identifier: 63:E3:65:DB:69:A7:AB:23:00:4A:02:51:CD:62:3A:40:4E:87:1C:E6
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019A4EF418B6BDA38330BBB9373CFA185240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: P0AyDpVWAu0mgQE2jH3QK4/MW49EWDZRG+p3JQlnxgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:b6:bd:a3:83:30:bb:b9:37:3c:fa:18:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=63e365db69a7ab23004a0251cd623a404e871ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:02:ca:84:b7:1a:85:00:6d:27:2d:54:4c:
be:6c:b6:12:a6:34:15:8c:92:54:01:a6:14:b0:f6:
30:62:89:29:f8:4f:6c:4d:1f:c8:73:c3:c3:aa:de:
a4:f5:8b:c8:9f:cc:a1:d0:16:b0:e5:5d:1e:1f:20:
de:55:d1:0b:b4:81:6e:69:2e:3d:ff:1e:04:02:e0:
e5:c2:7e:61:af:c5:10:4a:a0:cc:2b:57:71:44:7d:
0a:8f:0d:4c:70:f5:ac:5a:75:76:14:0c:bf:70:a6:
c2:42:20:b8:c0:eb:14:49:9b:e2:e5:d2:b1:74:6d:
b3:b1:5a:af:84:f9:a0:e6:05:61:ae:36:42:9e:8d:
dc:82:fa:24:ed:03:09:6f:fb:d0:c8:99:a9:24:94:
5c:f8:62:56:05:c4:30:d5:5a:29:18:f1:60:0c:e1:
d7:af:23:1b:d9:bc:80:c6:59:c8:7d:b7:2a:04:55:
3e:37:75:b7:70:fe:d9:27:d6:09:e3:27:e7:dd:a5:
98:7c:a6:7e:de:14:dc:d4:9c:bf:45:d5:ea:d7:16:
60:67:50:8a:a7:7f:3c:1c:5c:92:79:d8:da:6c:78:
11:33:35:53:71:6a:a7:d8:06:29:db:42:f5:f7:e6:
41:df:de:0a:8e:28:28:33:1f:57:cd:d9:63:67:cf:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:65:DB:69:A7:AB:23:00:4A:02:51:CD:62:3A:40:4E:87:1C:E6
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:26:80:a1:9c:ab:ed:3a:91:cf:6f:f1:9f:d9:f1:ff:53:
aa:29:8e:06:e7:65:51:54:b3:9d:02:a9:c5:83:fa:f8:a0:c8:
fb:f2:80:3d:83:5e:81:77:12:22:8a:b0:db:77:31:1d:56:50:
aa:5a:d5:af:60:c9:3d:f2:9a:35:37:54:8d:2c:2a:d0:20:cc:
5c:fc:3c:05:b7:c1:9e:99:28:89:25:68:65:11:f5:d8:c4:ff:
77:98:06:5c:50:64:67:e6:fa:12:11:ad:1f:4f:03:df:64:86:
fe:c8:36:81:dc:e9:d3:0d:0f:3b:b7:bb:0f:65:9a:20:12:7d:
4c:f7:2e:1d:d5:81:84:d5:75:5e:89:32:8e:e3:cb:67:d0:41:
2b:ce:23:cf:e3:80:72:51:5f:09:89:da:af:48:30:3e:4a:6b:
78:45:17:da:50:04:7c:7f:26:44:ff:8c:45:63:82:e6:37:68:
5c:21:91:c9:89:47:0c:3d:fa:78:b6:7a:1e:81:5f:ba:ca:d5:
0f:f4:f6:43:68:3e:d7:1b:b4:6f:71:5f:bd:56:bf:ca:56:cf:
63:cd:ee:3f:4a:ee:1f:02:cc:fd:00:0f:e1:88:52:2d:97:4e:
29:8e:5e:03:36:99:6c:4a:82:57:66:f4:19:d8:d9:10:f0:41:
4c:44:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:42 2025 by rpki-client