Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: WLQSSurURxkLTx8Kxg4jcw5JFaqf/ox6+qHTMUrLGDM=
Subject key identifier: A0:7B:39:6F:E8:D9:AB:0B:86:E9:93:8F:3C:8A:F8:35:CE:D7:BE:39
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 019A71B8FA2A07EC11C9A41670292C60FF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 1689
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 2NIjgppmhuxRYrz3DLITLBRmQ5Y.roa (hash: pfK3DW+mhfPMlrHb+zKcoWL6SLQiJQcLNvXFegBqlig=)
2: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: WGxFT+M0L6zYejd9s0+ej/TbNfVtgcM+2oYFdxdLk3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fa:2a:07:ec:11:c9:a4:16:70:29:2c:60:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=a07b396fe8d9ab0b86e9938f3c8af835ced7be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:a2:df:f5:45:e0:a0:11:15:c3:1e:99:20:
3c:8d:18:54:fe:4a:43:bd:39:ad:61:6e:2a:fe:b5:
6b:95:6c:6a:03:3b:31:d5:89:6b:34:26:6b:bd:8d:
7c:b8:4e:23:7c:60:a3:a6:6b:b1:33:32:72:fa:13:
cf:5f:36:2f:83:03:da:67:14:b9:6c:3c:86:a3:f0:
d4:bd:01:86:8b:2d:79:16:dc:81:f3:ea:71:47:c8:
e9:48:6e:6e:a5:78:be:1a:08:84:37:4c:7e:0f:a1:
3c:c2:aa:f1:50:f5:98:0e:66:14:aa:24:1d:e5:63:
8c:27:76:bc:cd:3e:54:60:d5:42:1e:e1:f8:2c:13:
cf:7a:c9:df:97:08:b5:6b:6a:3d:33:e0:51:45:77:
e9:63:8c:0b:4e:a1:aa:c8:73:37:05:45:e7:ed:3e:
b8:03:3a:b1:91:11:a9:90:f3:6a:ea:2a:a0:de:0d:
9a:50:ef:a2:46:1e:d0:60:39:ee:c1:9d:63:08:6b:
ae:c7:6e:36:ca:40:a8:c9:08:61:02:0f:c9:e9:17:
ab:d6:57:b2:a4:4d:81:8d:07:2b:45:7b:c4:2a:e5:
96:df:11:0b:3a:f3:0f:de:a1:38:f3:f3:b7:15:75:
62:bc:2b:b6:5c:e8:d9:88:d4:29:ff:c1:1b:cd:b1:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:39:6F:E8:D9:AB:0B:86:E9:93:8F:3C:8A:F8:35:CE:D7:BE:39
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:5b:90:7e:02:89:ee:7c:dd:9a:47:1c:2f:7b:b7:4f:1c:
c9:25:15:72:a6:f3:7c:f7:94:53:b7:1d:0f:74:39:da:33:76:
ec:f0:b7:68:87:d8:31:d7:c5:29:f5:f3:92:48:a6:8d:32:47:
6d:4a:54:f9:a1:48:90:b9:77:14:7e:3a:d1:65:6b:cc:ce:50:
ab:e4:c3:99:ab:44:3a:00:de:e3:83:4b:37:e5:37:fe:5b:7f:
12:49:5f:a6:33:69:3e:31:bf:cd:b0:56:b6:ed:40:e6:ec:b2:
80:66:62:3c:84:fa:27:5a:91:4d:af:da:06:f0:7c:58:92:91:
80:75:25:2a:8f:36:f1:00:35:85:bb:90:fb:94:2e:a2:3f:f5:
7c:87:5d:42:da:07:33:42:4a:d8:f6:ce:ad:0f:bf:bb:0a:69:
60:c2:eb:08:66:6c:fc:c9:47:9f:b9:4c:cc:73:66:09:ff:d3:
a6:e3:7e:b3:e9:03:52:8f:8a:7e:d1:f8:d3:ff:05:3c:1f:61:
f2:54:84:b5:fd:49:ec:1d:df:72:6b:02:ad:b8:66:48:1f:d0:
a6:9d:1f:f4:f0:87:ca:59:0b:d7:64:bf:17:7e:31:4b:ad:cd:
1f:60:c5:fe:75:27:cb:ef:c7:d2:c4:d0:fa:23:56:cd:95:ce:
41:37:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:22 2025 by rpki-client