Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: oeR0zi9ZcbhNoGx8Q1/6Pd1WAXseJ1dIQqgpUnlye+k=
Subject key identifier: 62:53:C7:45:A5:0C:C8:B6:62:61:76:03:CB:47:08:43:B1:11:43:27
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019A714A189A01407FD159C66EFAED2203ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: J6bPebpZ35WS2r+dbmOrIF4FrV/ellqbuAAJlkF1HDQ=)
2: rE87pRMGrIGW2-QCo2IWgU4T1zg.roa (hash: YOlXp2sGo61mpLlpdmbznU7uW49evw4d47+WkKfymmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:18:9a:01:40:7f:d1:59:c6:6e:fa:ed:22:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=6253c745a50cc8b662617603cb470843b1114327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:38:83:af:94:48:d6:a2:04:91:a8:f8:3f:
5a:dd:e1:4c:d2:e1:60:29:6a:fc:1b:0d:a5:8f:e7:
f8:57:55:03:f1:4b:c6:df:52:ce:c8:67:bb:5a:58:
03:c4:40:87:e5:31:47:39:f5:63:ad:74:41:e0:78:
64:35:11:e2:26:59:18:2a:df:83:a7:ab:2a:05:b2:
d7:37:bd:ff:b1:d9:19:f0:b2:c0:c7:26:cd:8c:8a:
7b:fc:64:f5:62:ed:7f:5b:f3:26:90:15:b0:aa:8c:
8a:41:27:dc:61:ae:64:98:5f:fd:b0:d2:56:41:02:
d8:4c:c9:56:96:11:45:c6:ff:5e:b0:5e:03:f6:30:
61:6e:3d:2f:2c:aa:4a:a0:60:78:61:58:bc:0f:ac:
1c:e0:02:3f:1b:3d:b3:33:71:de:75:86:c6:97:ea:
2c:ab:73:b5:33:00:ad:bd:a4:68:f0:f4:ca:8c:90:
16:0d:33:a6:17:5f:bc:db:27:21:cd:e9:95:74:16:
14:aa:ed:15:2e:fe:7e:9f:22:f6:2e:31:a7:36:c1:
49:e3:07:d4:bc:55:f0:a8:4f:25:f5:c0:a8:47:90:
36:84:d6:8a:ef:61:bc:55:6b:80:a6:ed:7e:8b:21:
8a:bc:f7:21:89:ee:5b:f0:62:24:c7:b1:c7:64:50:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:C7:45:A5:0C:C8:B6:62:61:76:03:CB:47:08:43:B1:11:43:27
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:41:87:b0:72:3c:77:3c:0d:48:55:5f:a8:79:3e:15:b8:
28:1d:81:c4:bf:2d:a7:fe:45:44:c2:f7:32:ce:83:f1:96:b6:
4d:37:d9:11:98:3a:be:67:7a:88:00:b5:b5:bf:68:0e:a0:1b:
f7:d6:c7:0d:db:f5:8c:fd:af:68:0b:a6:e9:a0:7d:7e:f5:0e:
af:8a:d4:4b:9b:3b:9f:aa:b9:94:91:f7:6a:98:32:66:83:17:
db:37:ef:39:41:fd:73:30:68:5d:16:09:31:ab:99:9a:3a:07:
22:24:6b:34:ca:35:f6:0a:2d:aa:ca:5e:39:3a:d7:d6:ae:44:
07:70:91:18:6c:1d:df:3f:2f:4e:5a:46:30:e4:d4:02:bd:54:
9c:6c:91:cd:68:f6:e5:20:4c:84:cc:19:a9:a9:97:df:43:25:
d7:9b:5b:93:19:90:02:a0:04:74:d1:99:51:dd:39:23:1b:e8:
6a:3f:0a:77:cf:ed:2b:8e:d0:34:7c:65:f1:be:a9:39:1b:2f:
4f:28:90:85:40:70:8f:f2:71:67:9b:9c:83:62:30:33:fe:fd:
58:0e:6c:36:2c:58:fc:48:83:d7:92:4c:19:58:3b:e4:11:fc:
d8:40:b2:95:15:84:ad:50:03:cb:7c:13:b7:a5:d9:fc:29:f8:
18:14:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client