Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: qKGy6bXI+Nasaa1qjIT1uOWnjbrVAINy2ggT0d/t1QM=
Subject key identifier: F6:83:3B:BD:5C:EE:C1:C5:73:A2:98:C8:EA:98:EF:39:DB:E3:75:49
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019A22C05CB14CDAF9656A5CAE6653511FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 23:00:23 +0000
Manifest this update: Sun 26 Oct 2025 23:00:23 +0000
Manifest next update: Mon 27 Oct 2025 23:00:23 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: BmJDIhHhCCTfOEz4PyTPl22xP0SL1Ir62ZglFYHe4So=)
2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:5c:b1:4c:da:f9:65:6a:5c:ae:66:53:51:1f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Oct 26 23:00:23 2025 GMT
Not After : Oct 27 23:00:23 2025 GMT
Subject: CN=f6833bbd5ceec1c573a298c8ea98ef39dbe37549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:72:92:24:b3:8c:95:0d:d7:53:4b:de:40:
65:0e:b0:46:c0:b8:1f:b7:59:a9:26:8f:1b:cf:ba:
55:04:fe:83:ba:fb:cf:63:8d:fd:e2:38:97:e9:bb:
63:48:77:3b:fb:92:93:e7:57:3e:8f:62:35:93:86:
f3:1a:77:bd:39:93:80:c6:fd:c8:ca:9d:15:26:3f:
80:eb:da:48:da:a7:a6:32:0f:2e:84:29:c4:0c:6e:
25:4d:61:86:c3:d0:35:b2:29:c0:a6:55:34:ca:fe:
08:cd:d2:88:aa:f7:e9:cd:25:34:1c:65:43:02:67:
31:15:6e:91:f8:b7:a6:af:74:ed:a0:cd:03:ea:b5:
fb:dc:57:2e:d3:c6:2c:28:7c:07:2d:56:dc:1d:77:
57:91:5e:54:24:39:74:16:4c:9c:04:4d:08:48:6a:
a0:9b:45:b3:53:66:89:50:f4:e9:5c:66:32:4c:17:
89:f3:10:bd:6c:30:be:dd:cd:44:3f:c6:f2:c2:9c:
1e:1f:43:15:cc:0f:71:3b:2c:49:13:98:26:fb:5f:
cd:76:c5:58:92:f3:67:70:29:3f:09:20:5f:c3:4a:
77:6e:cc:6e:bb:e5:8d:6c:a8:af:57:49:ac:64:0e:
a2:45:94:45:b6:e1:67:8e:f5:ed:2e:a9:e8:8f:9a:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:3B:BD:5C:EE:C1:C5:73:A2:98:C8:EA:98:EF:39:DB:E3:75:49
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:e8:7c:73:af:6f:9e:37:b8:e2:5d:ba:fc:63:38:5a:45:
1f:37:e3:8f:ee:f4:94:64:4c:6b:ab:8f:14:0c:e9:05:76:7e:
21:ef:e6:97:70:f3:60:69:5f:a0:98:dc:cf:df:04:07:5d:55:
32:fa:12:9d:2a:e5:1f:c6:21:11:56:b5:8d:5c:33:f6:bb:3c:
fe:43:ab:47:1f:94:2d:d6:9c:43:1e:21:70:8a:df:1a:a6:1a:
89:75:4e:96:42:45:6b:d1:62:7b:b9:70:0a:51:17:2f:cb:62:
40:db:25:54:7a:99:09:01:81:56:0f:ad:db:31:ef:ab:64:2e:
96:63:54:e2:dd:f1:22:c0:ea:cf:05:6a:9a:75:4c:dc:a2:06:
21:81:57:39:91:56:19:fb:49:e5:f9:93:1c:2d:36:89:c7:ca:
2a:dd:54:6e:2f:2f:af:cf:1e:91:7d:42:31:27:fa:8a:53:10:
8b:09:af:6c:cc:4c:09:08:3e:70:94:eb:08:45:45:37:f8:98:
f7:1a:03:f6:0a:83:36:27:62:34:15:f0:8a:37:5f:a0:93:69:
d9:8f:82:7f:27:14:05:92:6d:47:35:49:3c:c3:e9:4c:b1:b0:
13:cf:81:3d:f9:03:95:2b:74:e1:01:12:45:40:dd:4b:66:71:
70:b1:ae:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwFyxTNr5ZWpcrmZTUR/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw
YjhlMWQwHhcNMjUxMDI2MjMwMDIzWhcNMjUxMDI3MjMwMDIzWjAzMTEwLwYDVQQD
EyhmNjgzM2JiZDVjZWVjMWM1NzNhMjk4YzhlYTk4ZWYzOWRiZTM3NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoxykiSzjJUN11NL3kBlDrBGwLgf
t1mpJo8bz7pVBP6DuvvPY4394jiX6btjSHc7+5KT51c+j2I1k4bzGne9OZOAxv3I
yp0VJj+A69pI2qemMg8uhCnEDG4lTWGGw9A1sinAplU0yv4IzdKIqvfpzSU0HGVD
AmcxFW6R+Lemr3TtoM0D6rX73Fcu08YsKHwHLVbcHXdXkV5UJDl0FkycBE0ISGqg
m0WzU2aJUPTpXGYyTBeJ8xC9bDC+3c1EP8bywpweH0MVzA9xOyxJE5gm+1/NdsVY
kvNncCk/CSBfw0p3bsxuu+WNbKivV0msZA6iRZRFtuFnjvXtLqnoj5rKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaDO71c7sHFc6KYyOqY7znb43VJMB8GA1UdIwQY
MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt
NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx
LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6DofHOv
b543uOJduvxjOFpFHzfjj+70lGRMa6uPFAzpBXZ+Ie/ml3DzYGlfoJjcz98EB11V
MvoSnSrlH8YhEVa1jVwz9rs8/kOrRx+ULdacQx4hcIrfGqYaiXVOlkJFa9Fie7lw
ClEXL8tiQNslVHqZCQGBVg+t2zHvq2QulmNU4t3xIsDqzwVqmnVM3KIGIYFXOZFW
GftJ5fmTHC02icfKKt1Ubi8vr88ekX1CMSf6ilMQiwmvbMxMCQg+cJTrCEVFN/iY
9xoD9gqDNidiNBXwijdfoJNp2Y+CfycUBZJtRzVJPMPpTLGwE8+BPfkDlSt04QES
RUDdS2ZxcLGuQA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:12 2025 by rpki-client