Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: WvIvIjmO6V/L4hbBODyOLuksA4/Un0UV2hkcBqA2AMg=
Subject key identifier: 24:66:B3:04:32:C7:CB:F9:2C:D6:E1:26:78:26:F6:3C:7E:9C:C2:2D
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019A72CA36B305B13A6354159D393E0ECB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 145A
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: BzSGdKXS_5WRE8i4u-1soKeFtzM.roa (hash: vrT1E18BTpX1mS9gu66zvt/nerXMjovuRA/4FT5P190=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: RylSoR+OM6E4uPoS7KAlze86VKlhgtxt8I/la4/FB1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:36:b3:05:b1:3a:63:54:15:9d:39:3e:0e:cb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=2466b30432c7cbf92cd6e1267826f63c7e9cc22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:b3:86:63:80:95:9b:b1:2b:88:4d:32:50:
66:6c:f6:5a:d3:67:d7:55:8e:bc:b8:8d:8b:37:f2:
cd:62:68:13:7a:d0:07:d3:eb:e3:1a:bd:ce:fa:ee:
5d:f0:ac:13:b0:28:11:4e:43:e0:78:0f:ae:be:8d:
23:bb:e6:22:c7:a4:e2:67:b1:94:6a:0d:76:4d:6b:
3c:91:2b:f1:d2:8e:88:b9:53:f0:04:a3:95:e6:85:
47:29:4d:8c:b5:79:67:d5:4a:9f:a3:3a:08:15:1d:
4c:9c:bd:fe:d3:be:ad:6c:a2:27:d3:d6:86:12:8c:
e7:53:22:f6:df:1c:5e:01:47:f9:e3:5f:bc:90:2e:
fb:87:e0:4c:99:41:35:a0:f8:26:c3:b2:f9:2f:74:
ab:84:44:1b:73:77:34:6b:b0:4b:14:e0:56:f9:6f:
73:6e:34:6a:43:b8:f0:69:8c:06:37:a6:2d:1e:03:
d5:0b:5d:01:e0:95:21:a5:ef:84:e3:14:77:45:04:
77:88:72:63:d8:6c:90:db:11:ad:81:10:56:47:90:
2f:c6:f8:c5:41:61:06:df:c5:d9:53:11:89:cb:d2:
ff:cd:e7:47:4c:30:1d:c7:4d:af:ee:ff:ab:5c:91:
4b:08:3b:57:61:cc:24:42:3c:7b:d9:35:fd:5c:30:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:B3:04:32:C7:CB:F9:2C:D6:E1:26:78:26:F6:3C:7E:9C:C2:2D
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:45:a8:91:86:c6:3e:56:8f:c6:3c:40:c3:4e:dd:f9:56:
c9:aa:3f:1f:64:f6:bc:30:62:05:22:0e:ce:d5:90:8d:e8:5d:
96:3e:2c:a9:31:9a:40:5e:01:28:f9:4e:3c:6f:67:5c:a1:5a:
f9:0e:ee:37:88:83:48:27:08:04:7b:21:9c:99:6d:75:77:23:
3d:cb:9c:3b:46:65:66:04:b2:ff:28:bc:93:a3:fa:ad:eb:28:
79:45:13:9b:fb:c3:e3:62:6c:3d:76:47:6a:48:b6:ee:6e:d0:
1e:d2:0b:4f:41:06:66:6d:4c:86:96:37:f1:0d:a6:d0:5f:ec:
f7:ab:ca:7b:78:a0:67:b7:00:3e:fd:e9:3f:5f:7d:e8:f5:16:
ca:02:7b:8c:47:a9:2c:cc:bb:ef:ac:a6:0c:53:8c:d4:42:5d:
37:08:d8:f6:91:6d:83:8e:76:16:13:6c:ab:82:5f:e3:ac:bd:
21:2f:92:8e:48:3f:5b:63:79:86:34:9e:4f:eb:bf:69:22:57:
ca:b7:93:3f:4e:8f:b7:21:cd:80:45:f4:b4:c2:05:da:65:d5:
9e:76:c8:83:74:24:55:6b:64:c1:0e:b6:51:a0:23:84:68:4f:
22:31:16:78:67:f5:ac:c5:62:77:05:5b:e3:32:7e:86:d7:af:
a6:36:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:32 2025 by rpki-client