Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: p10cOc/NK+pBe+JX1rPA7lxiQhEfzMya56sjKKsSofM=
Subject key identifier: 63:D1:EB:58:4A:CF:C9:04:2F:F2:70:C9:D1:81:44:83:8F:34:20:9C
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 019A71B8A6EAF1BEE914E7AB0FF79044AB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 1232
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: caLpPH6h7WWXTmZ62Ai6kiuNZaATB+6dewUPmU9rJkA=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a6:ea:f1:be:e9:14:e7:ab:0f:f7:90:44:ab:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=63d1eb584acfc9042ff270c9d18144838f34209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:76:ed:40:4f:01:40:29:e7:82:fd:bf:02:
f8:68:f3:e9:8b:1f:58:ca:c6:fc:00:91:e0:c0:0b:
a3:27:a9:67:38:cc:84:1d:5d:4a:f1:51:68:95:5b:
cc:71:73:f5:66:f3:fb:7b:f8:81:43:fe:18:93:dc:
3d:22:80:6c:55:4c:6d:6a:9b:05:44:db:a1:04:4a:
f9:7f:e2:96:42:65:4a:64:25:c4:9f:75:24:a6:e9:
fc:43:64:69:70:b0:9c:f9:53:14:2d:09:76:26:6c:
01:46:ee:e6:b7:db:d1:e6:19:ee:b5:66:5e:a3:9b:
e9:d8:28:67:f5:17:b9:6f:7c:81:37:f9:24:26:f8:
94:06:6b:68:da:94:6f:1e:a0:4b:9c:37:a0:b3:49:
41:fe:b6:14:1f:df:b6:8b:d4:dc:b2:5f:fd:d6:89:
5a:b1:0a:07:7f:c5:9d:1a:64:24:8f:f7:19:6d:d9:
14:00:8a:e7:e8:af:f5:ca:76:99:67:e1:66:a6:f8:
b1:95:a7:0d:31:9b:47:bd:7f:61:24:aa:08:bf:8c:
a6:a9:43:d6:65:af:c6:04:85:6a:a9:d0:70:01:0a:
22:da:09:3e:f0:6b:61:a1:7c:f1:6d:a8:37:0f:6b:
b0:0c:d3:88:69:4f:df:69:96:ce:16:7b:94:28:1d:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:EB:58:4A:CF:C9:04:2F:F2:70:C9:D1:81:44:83:8F:34:20:9C
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:46:f3:54:b3:36:bd:6c:f8:2e:0c:c9:3c:89:f5:ca:55:7e:
9e:30:06:14:31:f5:8b:06:e8:dc:8c:84:1e:29:f6:4d:e5:87:
ea:60:42:13:cc:04:5e:54:54:02:12:a9:60:84:dd:f4:3d:15:
e1:53:53:e2:65:54:9e:9b:5b:a9:8c:6f:5a:b9:0e:3f:a5:e8:
2f:7c:56:d0:c6:81:9a:21:5a:89:fc:59:ee:52:7e:d5:de:e9:
ac:db:28:9e:b5:4a:38:56:1b:8a:2e:7a:ff:7f:f8:27:20:3b:
02:2e:36:e0:6a:b2:d2:09:cd:59:11:70:de:67:2c:56:ea:4f:
74:1d:c4:b0:8a:e2:1d:21:ca:69:09:a8:a0:fa:49:a0:6f:a8:
4a:2f:f8:9d:3a:a0:20:6a:26:c1:4c:f5:2d:24:19:6e:f6:b6:
f0:80:7f:b4:12:78:aa:75:af:bb:8c:63:cf:93:e4:c7:4b:19:
df:bd:cb:f1:60:65:9f:57:48:20:01:d3:c8:51:03:8a:1e:f8:
f8:0e:80:a2:9f:ae:a1:31:a0:66:61:05:1d:35:84:c2:bc:63:
4a:2a:50:fb:0c:d1:ae:24:35:74:0b:06:0a:75:8a:f4:eb:81:
d6:20:b1:80:90:9a:db:74:1d:27:9f:3f:b5:73:37:c8:14:8e:
08:90:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:46 2025 by rpki-client