Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: sXR9cLgBKWHvI6pjH7/G8of1HnCySmIDHdiVVs1AvJQ=
Subject key identifier: 32:57:20:6F:A7:8C:53:8F:04:DB:4B:BC:6B:AB:CA:AF:CB:56:B3:EF
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019A4C97E2430E3FECEEE13B5B79CC4BB794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0179
Signing time: Tue 04 Nov 2025 02:00:13 +0000
Manifest this update: Tue 04 Nov 2025 02:00:13 +0000
Manifest next update: Wed 05 Nov 2025 02:00:13 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: 0g/0qQgHT81Xbdz5EnF46C7b8bsIOE5x1XMJuEy4I7g=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:e2:43:0e:3f:ec:ee:e1:3b:5b:79:cc:4b:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Nov 4 02:00:13 2025 GMT
Not After : Nov 5 02:00:13 2025 GMT
Subject: CN=3257206fa78c538f04db4bbc6babcaafcb56b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:31:e0:96:d8:49:f4:ce:9f:72:42:b5:29:
b1:38:1c:74:05:5c:5c:6d:98:1f:20:64:ad:d5:5b:
c0:41:be:2f:3e:76:8b:34:00:49:fc:71:0f:fa:1a:
a1:3b:6c:a8:55:a9:32:14:43:36:c4:3f:5c:c1:34:
81:42:7b:32:76:a5:1a:0f:33:67:73:c1:d3:4e:43:
79:e6:1b:67:07:8a:dc:83:46:73:54:39:0d:e6:7c:
d3:a1:e0:1f:b8:b7:79:51:5c:e4:4c:e0:55:a1:30:
af:2d:c6:70:70:ab:50:b0:14:5d:cc:fa:4f:23:dd:
4e:59:ac:50:8a:1b:f0:6c:d6:09:6a:94:7f:48:23:
82:e2:8f:b3:72:2e:95:55:53:6c:8c:4d:3a:0d:1a:
da:e7:86:37:5f:97:e4:e3:8c:27:3b:3e:29:f1:17:
5d:3c:63:93:28:68:60:03:a7:ab:25:7e:56:87:98:
da:68:70:49:4e:0f:22:79:29:69:a0:dd:aa:0a:04:
48:35:35:8f:ad:9f:62:6c:6d:3c:a4:53:56:6d:66:
16:01:51:38:f3:15:a2:89:99:1b:ff:a6:d6:66:e7:
00:24:ec:fd:16:84:c9:fa:fe:36:b4:8b:89:02:aa:
a9:5d:d5:34:9e:1d:b1:b7:0f:b0:67:92:42:ec:98:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:57:20:6F:A7:8C:53:8F:04:DB:4B:BC:6B:AB:CA:AF:CB:56:B3:EF
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:4e:fe:7f:d6:af:ac:d7:b5:ca:15:9e:6c:75:83:63:8c:
b7:fd:52:d8:1a:15:f9:12:c4:6b:38:7f:f1:89:7a:4f:b1:e0:
d0:5f:c6:6a:c9:c2:19:6d:82:84:94:04:d9:ed:5c:c4:07:24:
e3:b5:0b:a0:95:59:f5:7e:da:e6:1b:f7:2a:22:2a:d8:3c:16:
a4:38:3f:0c:b5:f3:d5:02:87:07:66:c5:76:67:09:3c:a8:4d:
be:11:6a:7a:b2:b6:32:0a:e6:db:ba:c7:58:dd:0d:52:90:b8:
9c:76:c1:92:cf:b2:13:8a:b0:d7:88:20:42:d6:5c:56:a1:2c:
34:87:78:3d:48:21:e9:40:07:b2:b6:94:0b:4c:11:ac:9a:ff:
cd:eb:5d:25:2d:f8:92:68:cb:7a:8f:35:d8:fe:30:87:ad:1a:
8a:df:0e:d8:ff:49:d5:58:ee:f9:8a:c4:2d:01:47:fa:15:76:
24:4a:05:12:70:05:0f:c5:86:b4:52:c4:e5:b1:57:cf:fd:33:
2f:0f:29:d9:5d:c0:2c:69:1b:47:aa:b5:48:8e:fc:f2:a1:e5:
4f:64:6c:2c:87:72:0b:c6:e8:d8:39:c3:ac:e6:5a:ec:14:e1:
e4:f1:f4:e3:03:6b:63:d4:58:78:77:03:5f:a9:f5:31:55:56:
79:50:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:03:45 2025 by rpki-client