Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: uLSvmnTTLS3ZAWcNqk78JNnPjkLe2GUwm+s7UlmTaKs=
Subject key identifier: 74:8A:B3:AC:B1:D8:63:66:B2:2B:35:40:49:82:36:11:5C:6D:A2:45
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019A71133FC6A1799DE780E874988E2AED2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: 0LdCYiyoo_rQZDLAQK9EXmWdrLs.roa (hash: ii+DUPaWPj2PKPLgx9rgU4vJhM6MjQajOc4FBEHl1O8=)
2: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: FW1ylPBebMIzgF/7GEKI8CW9EXGKvkq6uydR2B3SIdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3f:c6:a1:79:9d:e7:80:e8:74:98:8e:2a:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=748ab3acb1d86366b22b3540498236115c6da245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:70:f9:e1:41:b0:9b:d5:7c:2b:d7:02:33:
01:9d:72:17:1e:b9:d8:56:de:22:14:40:f3:07:18:
d5:f5:0e:be:84:93:5b:72:8c:3c:93:e9:3e:0e:b1:
5a:ae:5b:41:26:8f:46:89:27:57:bd:20:91:89:42:
4d:d0:52:cc:3f:21:6e:6e:4d:35:f0:41:f5:40:c4:
7e:43:25:43:39:8c:94:66:50:3a:2d:80:b1:fe:da:
14:60:ea:9d:04:15:85:2e:47:dd:2f:6b:33:9e:e9:
2f:74:64:90:64:55:3b:6f:0f:68:82:f8:1e:0c:21:
83:ee:91:a0:38:40:eb:4d:83:05:c6:d3:f7:cb:6e:
4f:dc:3a:96:66:f7:cf:4e:4f:d6:b2:e7:54:e4:f6:
4f:e5:33:df:ba:6d:e4:a3:d3:82:7a:a2:e5:0a:7f:
b3:25:e2:a8:b3:dc:d9:eb:5c:84:14:73:d8:e1:90:
ea:63:b7:16:99:0d:89:98:fb:c1:64:4f:9b:58:28:
01:38:95:67:52:e3:ed:fd:03:44:17:7f:d0:58:b1:
7a:7b:4b:cc:6e:c8:af:bc:53:82:24:93:cd:e2:fb:
9f:5b:5b:5a:46:07:f9:66:a1:6f:af:32:65:44:eb:
46:58:97:b4:e1:66:c8:cd:97:e8:b6:a7:85:a1:73:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:B3:AC:B1:D8:63:66:B2:2B:35:40:49:82:36:11:5C:6D:A2:45
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:14:02:cb:58:d6:e6:0d:f4:ce:de:57:8c:86:a4:86:ba:59:
16:ed:8f:25:06:4f:6f:a8:c2:74:4b:c6:d4:10:90:5c:84:fc:
de:6d:aa:2a:24:b7:88:99:0e:67:94:ca:f7:40:dd:9c:c3:0a:
6b:c9:80:28:eb:62:ad:c0:78:58:03:6c:a4:92:96:64:97:84:
2f:7d:cd:a3:e2:20:9a:c0:db:bc:db:f3:6f:75:3c:d6:2a:28:
d9:ee:9d:38:a0:e9:f7:75:9d:d5:77:14:40:38:ad:c4:40:77:
f6:a7:fa:99:9c:91:a1:84:5f:35:bf:cd:4a:dc:4a:e1:c1:47:
a2:b1:8e:82:69:7c:73:a3:31:96:4c:b3:9e:da:9b:cb:3d:ff:
66:f7:06:e5:25:04:fb:dc:9f:57:46:07:4b:7c:a7:90:a6:99:
d4:dd:b6:c4:b0:47:43:06:a3:35:77:9c:a2:ae:b1:4c:4e:ff:
59:db:4c:af:51:36:98:c7:18:a5:f4:6a:09:65:78:e0:7f:54:
5e:96:b0:ee:95:27:b3:2f:81:8f:6f:2a:cc:c5:b7:63:d7:22:
5b:9a:90:ae:57:ee:3b:7c:1c:cb:1e:64:02:10:ae:2e:44:4e:
36:e5:26:a6:f1:00:00:08:23:1e:3e:d5:62:50:c7:15:05:09:
36:17:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client