Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: 7GNdBdKyEBcBr3Gu4uXKLHEFpLtI/wmh+FDPMg3LTBg=
Subject key identifier: 79:7A:63:83:EC:56:F6:C0:D3:0C:02:FF:81:48:D2:9C:DD:C4:86:65
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019A7113305AEE17D33AEC2FC5A0722B88ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: m5BeOeCSW6+XZ+7nsE955qpk823w0di8O2nSq/RuUO4=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:30:5a:ee:17:d3:3a:ec:2f:c5:a0:72:2b:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=797a6383ec56f6c0d30c02ff8148d29cddc48665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:b9:ca:2b:34:92:bd:b4:70:ec:ae:e5:2b:
a5:d9:e2:2a:d0:29:cc:94:a2:b5:9a:5f:dd:d8:14:
e5:55:21:a3:d8:7d:3c:ef:be:25:f3:ca:cb:cd:28:
18:c9:ba:33:b0:bd:e8:ef:04:e7:46:9a:80:92:23:
b9:8d:c7:0e:fe:d7:d8:72:33:ef:ca:c1:83:fc:4a:
01:4b:8b:57:7d:3a:df:fa:70:b0:77:29:af:9b:01:
3a:86:da:db:d9:87:b3:b1:99:5f:18:32:8f:44:cd:
d5:04:1a:62:2c:96:03:3e:c7:3f:9c:c7:f9:59:b1:
8f:68:b3:f2:a3:9e:04:1d:0c:3d:89:4a:46:89:8e:
87:98:b8:63:71:3c:a6:40:d9:53:e1:4a:6c:33:cd:
fe:6c:11:14:2b:81:94:99:80:66:78:e1:de:15:23:
b9:45:30:38:03:c9:af:a7:36:32:e2:47:3d:8f:d6:
d2:34:2b:93:c0:cd:3d:dd:53:03:9e:ec:4e:e5:1c:
ae:af:34:24:b1:31:b4:1c:de:21:65:c1:a5:9e:5c:
05:0f:13:c2:ce:cd:b8:fb:b3:b9:59:7c:be:a1:33:
47:e4:aa:34:93:16:2f:89:3d:f4:37:9a:b9:e3:5e:
8a:54:c1:46:4d:5e:d2:4a:8b:2a:74:ed:1f:5b:3c:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:63:83:EC:56:F6:C0:D3:0C:02:FF:81:48:D2:9C:DD:C4:86:65
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:28:41:38:c6:a0:bc:af:54:1c:a3:5c:0d:06:4e:97:37:
8c:33:f8:db:8c:73:95:5e:17:f2:47:00:3a:1b:b2:0f:87:4a:
48:bc:86:4e:3d:68:62:57:25:65:8f:1b:a8:a8:fe:6c:e5:df:
f5:18:38:b8:8c:e8:3f:44:79:05:9b:1d:8f:91:c2:9e:cf:e5:
ec:9f:3a:78:f9:88:db:8c:d1:9b:2e:20:26:0a:f0:a0:d3:b7:
ee:e6:d1:00:50:46:8f:b8:17:6a:2c:96:bd:bd:6f:f7:98:f9:
ba:85:84:95:fe:ed:cc:e6:ac:44:4f:fb:d5:25:1a:c3:50:87:
0c:eb:e0:31:36:53:35:11:ab:34:c5:e9:20:58:59:56:0b:a4:
1e:52:fd:26:0a:d1:49:5a:e0:58:72:2b:5e:72:93:18:8f:f0:
71:6e:0f:c0:ae:41:d1:18:d9:e7:c2:53:89:5c:1e:77:34:46:
87:44:77:be:ba:90:bb:e5:1b:14:7e:0e:9b:fb:3c:09:78:66:
b0:31:1c:87:c6:0e:93:29:c9:d8:8e:e0:24:d0:e9:25:d4:9e:
94:2e:5b:54:35:42:7b:7a:1c:a1:23:70:13:ce:68:0b:8d:6a:
99:6a:a0:12:b1:f9:85:30:d4:19:3b:31:78:44:b1:48:a2:ba:
02:45:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client