
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier: lx4wx9WTbjkgE+lm/V90p74LS/lyL1vT+u1R3s2LfFs=
Subject key identifier: 07:0D:2F:C2:1E:48:28:C3:77:7F:FA:C6:3E:6E:09:B9:E9:B6:C0:D1
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial: 019A71807E51C3A0176A2C72235DDEBD5A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number: 0E57
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: yWkrLYMDNwFTxO96rDXuOoSXQG46litBciAgRuTKmmY=)
2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7e:51:c3:a0:17:6a:2c:72:23:5d:de:bd:5a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=070d2fc21e4828c3777ffac63e6e09b9e9b6c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:88:56:a5:c0:e2:fb:f9:25:e7:1e:83:c5:
8d:f8:fa:50:7d:18:0f:e6:b5:be:83:48:48:31:91:
34:5e:19:b3:0f:76:c8:04:d8:04:c9:16:e9:5b:a2:
b5:73:32:e5:99:ee:4c:1d:48:f9:d0:04:3c:12:7e:
8f:9d:10:78:49:37:4f:11:d5:d1:87:03:2f:d0:2c:
e9:91:37:ac:1b:67:58:f1:49:08:11:a4:77:d8:c6:
ae:61:04:61:2b:83:1d:72:f7:5a:6a:96:77:80:02:
ad:fb:b8:62:12:92:58:cd:7a:50:64:b9:c6:b6:7e:
c8:11:35:91:24:10:6c:2b:0a:bb:4f:e5:6f:80:f7:
68:80:7d:5e:d2:43:79:f3:37:a7:c2:db:21:7d:50:
c3:54:14:4a:06:b8:f1:97:8a:91:ba:ef:b1:7b:9e:
87:80:d1:fd:b7:fc:4c:6c:77:ac:e3:00:f9:55:e1:
81:85:64:d5:9f:d9:e6:d7:95:bb:65:94:cc:5b:32:
30:a8:ba:b9:62:f3:df:80:57:3e:2f:38:25:4f:33:
de:74:64:37:c1:12:e4:f7:16:b3:54:50:69:b0:c6:
4b:84:89:6a:04:60:90:ee:f6:c9:ef:13:fd:c7:85:
c4:1d:53:13:20:97:22:60:f5:52:3c:4b:2a:f2:a5:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:2F:C2:1E:48:28:C3:77:7F:FA:C6:3E:6E:09:B9:E9:B6:C0:D1
X509v3 Authority Key Identifier:
keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:17:98:2a:da:80:4a:2e:53:fc:59:db:35:72:5b:87:5d:
4f:18:7c:30:5f:00:68:45:a0:a7:7b:d9:f1:ec:f5:d8:e8:ed:
bd:3d:26:9e:19:20:f5:09:bf:73:a0:00:82:96:b9:89:0a:4c:
59:17:94:64:c5:ce:80:1e:14:b5:cf:cc:49:91:f2:c7:b3:80:
2c:4d:cc:73:77:3c:d7:2e:84:f3:3b:62:36:df:b2:ac:92:cd:
9e:8c:1e:00:9a:58:bc:7d:81:b5:10:fc:00:2d:74:2e:97:6c:
47:9c:c4:be:18:9d:41:58:12:0b:b2:1f:af:ae:57:29:7a:9f:
95:eb:83:4e:46:36:b3:76:aa:25:0c:16:be:bc:5e:64:0f:d3:
cb:79:a1:ad:63:1b:cc:31:fa:37:40:79:75:83:53:b8:61:d8:
17:85:8b:fd:1c:83:42:d6:1f:d9:3d:02:65:df:93:6d:a2:db:
e4:c5:9d:2c:69:97:0c:e1:1b:05:7f:88:c4:d4:cd:b3:53:9c:
80:cf:2c:b9:76:d0:99:cf:e4:97:a8:65:4d:a9:ba:c3:8d:73:
f2:65:7d:04:0c:52:d3:01:fc:10:d1:7c:28:77:21:6c:ce:ec:
82:fc:77:3c:4b:67:f6:7b:e1:f2:75:24:51:7c:1d:fa:28:d8:
b2:dc:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client