Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: 2KRS6LA1ipuJXJ+sr66vqDhwCoBuInv+rnL0dawcKTM=
Subject key identifier: A1:71:0F:97:58:7F:C2:01:57:77:C6:0A:2C:4A:24:07:7C:9F:28:53
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0199522EB270912947096D72E52F305F5DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 168A
Signing time: Tue 16 Sep 2025 11:00:15 +0000
Manifest this update: Tue 16 Sep 2025 11:00:15 +0000
Manifest next update: Wed 17 Sep 2025 11:00:15 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: z7QkGj6TJDNlssP6QswYq9GERxWqKtXvMHOdE0SoS20=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:2e:b2:70:91:29:47:09:6d:72:e5:2f:30:5f:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Sep 16 11:00:15 2025 GMT
Not After : Sep 17 11:00:15 2025 GMT
Subject: CN=a1710f97587fc2015777c60a2c4a24077c9f2853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:d8:f7:e5:53:c3:d1:72:97:53:b2:ee:7f:
dd:92:b3:46:45:23:1e:aa:2b:d7:f8:d6:77:e7:c4:
97:7b:52:34:9b:cc:e8:65:f5:d8:e8:71:f5:ee:dc:
9f:2c:93:00:f8:7e:d2:e4:64:43:2b:18:f6:26:73:
34:9a:0b:a4:1e:c7:f8:c8:62:ee:64:4a:72:ef:35:
18:48:ab:83:b9:a8:d4:ff:6e:f4:0f:7e:e5:79:f3:
32:26:40:c1:0b:1d:12:a8:12:f7:fe:a2:33:d9:fd:
2a:eb:c8:3c:1f:dc:4c:41:e5:a7:20:aa:3e:79:c7:
4c:b1:b3:4d:83:54:85:dc:3f:22:b5:e8:9a:20:20:
f8:1d:d3:99:01:02:06:46:5b:91:2b:35:9e:6f:8c:
43:30:b2:03:22:03:d4:90:59:68:d4:b4:bb:7b:20:
92:6e:06:16:83:d2:d3:dc:e7:7b:c4:98:76:3b:c4:
5a:11:5b:c4:ac:e1:95:6d:0a:d7:3b:53:55:63:57:
b7:08:f9:8e:f0:b6:97:be:93:92:2a:53:30:79:1e:
58:6a:83:c9:b5:7b:29:3b:ca:fc:b4:eb:f9:77:db:
89:71:06:7c:a9:1f:3d:ed:dd:6d:57:93:25:db:6d:
f8:97:ba:65:bc:2a:34:49:ef:6e:60:e4:9e:b6:94:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:0F:97:58:7F:C2:01:57:77:C6:0A:2C:4A:24:07:7C:9F:28:53
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4b:18:6d:87:03:70:b2:95:71:ee:16:b0:aa:85:4c:d8:60:
07:31:99:a7:d0:c4:a5:9f:b7:f4:9e:40:a4:1e:ee:84:30:81:
b1:42:07:ec:96:1b:74:1e:42:a8:3b:9d:51:f3:e1:4d:a5:7d:
d3:55:98:0f:ec:a3:2a:8a:a5:50:9e:97:7a:d5:0c:5a:6e:be:
29:85:44:b9:89:95:45:56:10:26:58:11:29:1b:53:75:63:2c:
1b:f0:f4:84:80:66:e5:5a:b4:2d:85:6e:7a:70:95:66:23:19:
bc:91:81:62:f1:23:dc:25:13:cf:d4:d3:b2:3b:ee:54:8c:94:
26:f4:05:cc:c2:5d:e8:72:cb:7c:0f:09:a1:e5:7c:80:89:55:
96:cf:61:eb:a2:d7:8d:d0:34:2d:b6:54:a3:d1:54:e1:aa:30:
a4:94:c5:7b:f1:c7:68:66:a5:90:2b:5b:5f:c8:b7:f9:31:54:
59:eb:29:75:c0:22:8e:08:1b:42:3a:73:0e:c4:e9:e4:5d:4a:
b1:07:f8:42:1c:c7:eb:5b:95:80:a8:34:a6:c8:d6:f6:d6:94:
a4:76:76:28:73:5e:1e:bb:16:53:ed:29:fa:30:c0:3c:85:57:
4d:f0:cd:8e:11:a2:09:c7:bf:41:d6:c7:3d:f1:dd:29:78:55:
a2:7b:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:24:18 2025 by rpki-client