Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: PLGXj7ekZKt0TRqMyWD0ldesRssjezy6q6C1y2RLcoI=
Subject key identifier: 55:DA:AF:4A:96:08:47:38:2E:13:DD:F8:49:B9:65:DC:B1:4C:C6:5C
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019936131B894AB648B064E345CBC8E5F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 168C
Signing time: Thu 11 Sep 2025 00:00:45 +0000
Manifest this update: Thu 11 Sep 2025 00:00:45 +0000
Manifest next update: Fri 12 Sep 2025 00:00:45 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: TbBBr1lYUT23CRkFZmhkgOIOUAktjA274PUaVHwPO4Q=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:1b:89:4a:b6:48:b0:64:e3:45:cb:c8:e5:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Sep 11 00:00:45 2025 GMT
Not After : Sep 12 00:00:45 2025 GMT
Subject: CN=55daaf4a960847382e13ddf849b965dcb14cc65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:ca:b7:53:48:8b:e6:53:9f:e6:16:24:1f:
e4:68:7f:23:c6:6b:e3:7c:03:56:0f:88:93:4e:8e:
aa:9e:0b:3d:5e:f7:35:d7:74:3a:95:8d:7b:84:ad:
06:97:92:a8:19:b7:c2:41:cc:49:11:b8:eb:49:ef:
14:c0:d6:33:00:58:10:7b:71:86:2c:a9:ce:01:a3:
21:7a:b2:bd:2a:3c:98:3a:7a:c5:21:66:28:06:7d:
66:01:a4:15:55:4a:ff:53:28:1b:e5:0a:54:84:10:
c5:72:0d:ec:a2:86:39:08:1f:b4:60:0e:0f:d8:97:
42:52:fa:6b:07:59:a9:65:79:42:27:70:d6:14:2e:
77:22:e1:0a:de:cb:23:4e:9b:31:f2:7a:f6:8a:ee:
83:e7:d5:49:41:62:7b:61:7d:b8:06:8d:4f:d1:b2:
dd:b8:b0:0e:50:4f:b9:90:68:5c:a0:34:5c:11:94:
3d:89:ad:be:33:39:b4:99:26:91:4e:e1:ef:f3:83:
0b:36:a0:18:a5:d7:97:f9:80:02:2f:a3:37:b2:61:
4f:cb:08:3e:8a:0d:6b:d3:51:9a:6f:0a:32:2c:c3:
ca:a8:c8:24:27:43:32:63:3f:0d:5c:80:b4:62:6c:
ad:72:ea:64:ef:69:a5:19:81:5d:14:76:fa:5b:2c:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:AF:4A:96:08:47:38:2E:13:DD:F8:49:B9:65:DC:B1:4C:C6:5C
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:09:6d:6a:f9:cb:6a:77:ea:df:57:60:1c:49:42:30:1a:aa:
00:68:8c:d1:68:6c:b1:fe:6c:33:25:95:2b:8e:fa:ed:54:d7:
2c:f8:46:7d:b9:6a:21:01:b1:c4:15:d7:eb:e5:20:a3:59:61:
07:2e:97:39:6a:2f:81:9d:f4:66:af:9c:4b:60:4b:a6:17:56:
82:13:67:a7:ae:3b:58:8a:03:a8:fb:de:56:8a:08:39:f4:b2:
18:13:4a:f4:da:2d:02:e9:f7:51:af:0b:4a:12:9e:c4:33:a0:
d6:fc:44:f0:a5:f4:2e:19:ac:5f:29:12:87:3c:9e:dc:50:f2:
75:b0:24:db:fe:bc:be:67:6f:66:7d:8e:03:88:4d:7a:5d:ee:
0c:4d:26:ea:8f:b9:b6:01:76:42:10:1e:d2:9c:ce:8c:02:68:
66:83:7a:8e:fd:45:6b:07:b4:1c:9a:c7:42:53:33:8d:fb:3b:
eb:f5:92:2a:ee:9e:66:af:4e:54:7d:00:3b:af:d9:4a:dc:1f:
0d:09:7d:11:33:0a:1b:54:af:ea:2c:89:1e:05:94:16:43:20:
43:91:5c:97:87:bf:49:ee:9f:71:dc:98:cb:a2:a3:9d:cd:72:
8c:05:98:70:7a:24:a3:a8:b9:29:1c:63:16:ea:62:8c:cc:70:
62:6d:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:28:06 2025 by rpki-client