Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: YqfhECK9fGEGmxukEGMctCOzjl3435bApqUzsaYB6Dk=
Subject key identifier: 74:1A:3F:07:FD:18:3F:2C:BE:47:E7:57:F4:12:07:03:5F:E1:4F:B3
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019A4F2B90DB8793876176D0A6E1DE505354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 045E
Signing time: Tue 04 Nov 2025 14:00:46 +0000
Manifest this update: Tue 04 Nov 2025 14:00:46 +0000
Manifest next update: Wed 05 Nov 2025 14:00:46 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: lFwb8/KzfaWLC0+CvIXe7IjRz5tv0gre4jpzOE+popI=)
2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=)
3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:90:db:87:93:87:61:76:d0:a6:e1:de:50:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Nov 4 14:00:46 2025 GMT
Not After : Nov 5 14:00:46 2025 GMT
Subject: CN=741a3f07fd183f2cbe47e757f41207035fe14fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:ef:a0:49:64:2c:d8:48:84:0f:d1:41:a2:
b9:df:20:fa:5b:ef:7a:2b:6c:26:08:b1:bf:56:fb:
22:cf:68:3f:8e:5b:f6:83:bc:f0:d0:6c:93:e9:8d:
18:05:4c:a6:41:0c:79:7e:32:ac:6d:16:ae:e7:47:
af:41:12:24:19:03:74:c6:04:f9:f3:3c:ea:8d:6e:
a7:eb:7f:15:e4:7b:ac:0e:00:32:cf:e1:4f:07:20:
2c:74:bf:01:e7:73:a0:0a:33:0f:da:36:d0:da:e8:
11:65:a1:62:85:c6:50:7d:a9:c8:5f:64:b5:bf:14:
5a:90:69:ee:eb:3d:9a:75:58:f0:4b:47:8f:6c:fc:
a1:99:ff:7f:f4:f7:f2:cc:44:9c:7d:29:f5:0a:b8:
9c:dd:cc:2f:57:52:13:f4:e5:c9:58:b4:a2:4b:75:
92:8c:f3:94:b5:e3:d9:6b:7b:81:44:e4:07:35:d4:
fc:dc:84:ef:79:fd:61:d2:b4:be:41:3d:47:5f:49:
74:d5:d9:ca:a7:92:b8:04:7f:fa:28:af:f3:d1:a6:
b6:74:0b:58:a4:c6:a6:93:31:82:97:42:44:90:33:
32:c9:61:13:9d:da:8a:7e:52:b8:91:71:6a:39:cf:
18:ce:16:39:55:10:26:77:14:cf:fb:61:85:3e:26:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1A:3F:07:FD:18:3F:2C:BE:47:E7:57:F4:12:07:03:5F:E1:4F:B3
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:2f:f0:e5:d6:ec:1b:d6:2d:0f:bc:39:3d:c4:38:95:db:
b8:56:ce:e8:0d:ed:19:5c:cd:31:0e:4b:1c:da:6e:28:af:90:
24:a9:c1:26:29:79:f1:d9:50:02:a5:93:e6:c4:cb:ee:42:99:
7a:c4:4e:28:c2:44:c2:75:b6:da:f6:46:e5:30:9e:20:00:63:
bb:68:15:75:59:07:ab:96:41:b5:b6:ea:e1:c7:d9:06:d9:bf:
f8:93:c1:91:34:fc:b5:8d:29:e6:d9:d3:62:95:07:42:d8:5d:
11:54:69:e5:d1:3a:0b:56:d3:1e:d0:39:1d:38:fa:31:9a:fe:
7c:89:26:e4:83:0b:46:71:bc:e9:3c:45:ab:c8:27:d3:9d:8f:
37:21:d6:c6:41:d8:cc:b0:e6:20:93:72:b7:09:80:ba:a4:13:
a5:63:93:06:f9:c9:fc:0d:b7:0a:0f:69:7a:54:b6:af:96:92:
20:74:c8:17:97:73:a8:06:33:47:67:32:7b:42:15:dd:05:8c:
04:ea:d4:43:15:a7:53:ff:16:3a:55:0c:25:f5:ce:d6:56:d7:
68:02:ef:26:c6:54:b4:b9:50:37:bf:a0:a4:84:86:02:e2:86:
ac:a1:43:c3:5a:01:9e:da:7b:78:2a:27:eb:bd:c2:9e:14:45:
52:87:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:15:31 2025 by rpki-client