Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: mmYhvW5tul8HhOGoy3xhkk5juGyfPSF9jXohgip0RIA=
Subject key identifier: 3F:67:EE:9F:70:82:F8:A2:8D:FE:AB:49:47:DF:BE:FC:2B:78:0C:2C
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019A73019EDB4B642647224E72223841727F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 092B
Signing time: Tue 11 Nov 2025 13:01:17 +0000
Manifest this update: Tue 11 Nov 2025 13:01:17 +0000
Manifest next update: Wed 12 Nov 2025 13:01:17 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: 7hRxu2Xdg4Ijf++HdN7JktpvTxuGddqmGzvWnllwxB0=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9e:db:4b:64:26:47:22:4e:72:22:38:41:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Nov 11 13:01:17 2025 GMT
Not After : Nov 12 13:01:17 2025 GMT
Subject: CN=3f67ee9f7082f8a28dfeab4947dfbefc2b780c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:cf:e5:3e:2a:78:1a:98:50:e7:ed:9c:d1:
db:2f:fd:60:58:7e:ed:91:76:12:11:d3:08:a5:28:
d9:bf:43:a1:ab:09:15:d2:39:3b:7c:e0:28:89:93:
ca:54:80:b8:73:7f:89:88:f2:f9:65:66:8d:83:04:
ed:66:00:a4:cf:b9:56:c1:82:a6:02:62:1f:ce:5f:
51:08:96:f3:fb:c2:e9:f5:75:78:ee:82:23:78:eb:
ba:35:d2:2d:b1:3c:56:f5:e9:df:a3:9f:82:32:8a:
88:94:9b:e6:8a:8d:6e:32:de:ea:fd:47:3f:d8:f9:
d3:a7:f6:88:de:61:17:01:d5:d7:dc:24:33:73:c7:
47:fa:bf:e6:72:b2:29:fd:2e:5b:ef:16:d9:50:0e:
02:80:f4:82:fa:d9:95:78:ad:cc:1d:1a:7d:b3:ed:
49:2c:7c:1f:3e:33:7a:d4:da:43:06:fd:41:dd:ef:
eb:5e:af:cd:b5:f0:72:69:3e:29:88:d3:b6:4b:14:
29:b3:02:5d:21:2d:c2:31:51:ab:d7:a9:6b:e3:ca:
46:28:19:66:1c:31:5f:98:4e:34:ef:10:7a:f0:53:
aa:54:f3:91:c2:1c:e6:1a:d5:47:5b:81:7b:8d:4e:
a1:fd:3a:8a:56:a0:98:3b:b6:31:f4:83:64:d3:7c:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:EE:9F:70:82:F8:A2:8D:FE:AB:49:47:DF:BE:FC:2B:78:0C:2C
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c7:a2:c6:ee:c9:ae:83:b3:7c:60:13:73:4e:cc:89:41:2e:
1d:6b:31:71:93:d6:90:86:cb:e3:36:5e:84:f4:01:04:80:18:
3f:ef:5a:25:cc:a8:81:61:10:2f:af:7e:11:a5:68:91:0a:12:
56:d1:a9:d9:e9:38:97:8c:32:e5:1d:c4:41:06:f5:75:68:f7:
67:00:7b:1f:44:58:52:a6:eb:e8:4e:b3:d0:f2:85:bb:95:07:
ad:2e:83:8f:16:8c:6c:9a:e7:81:1d:c5:40:c8:bb:3d:74:d6:
b4:fd:1b:32:eb:32:06:57:70:4f:16:4e:40:0e:8b:d2:3f:cc:
a3:9b:c3:03:0f:3e:4b:7d:53:cb:1e:e6:59:03:0d:c0:a0:c7:
a0:c1:11:1e:e9:ab:3a:c3:c5:af:49:6b:59:26:fc:5f:1a:3b:
c0:97:0c:4f:8d:ce:7f:37:e7:4a:ca:c6:ba:e0:5b:a7:e1:ad:
6d:63:a8:fb:eb:8b:a6:55:b8:0f:a3:9e:70:11:29:24:78:08:
33:ab:ab:82:a5:7f:a8:22:52:91:d6:50:1f:72:a8:b4:0e:08:
71:32:5d:78:81:a0:22:a3:f4:b8:29:2f:87:14:ba:e7:12:86:
f6:5a:59:b9:1d:0d:16:8d:be:f1:e4:ed:32:65:11:f9:2c:ea:
6f:76:23:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAZ7bS2QmRyJOciI4QXJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4
ZmRmY2IwHhcNMjUxMTExMTMwMTE3WhcNMjUxMTEyMTMwMTE3WjAzMTEwLwYDVQQD
EygzZjY3ZWU5ZjcwODJmOGEyOGRmZWFiNDk0N2RmYmVmYzJiNzgwYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvHP5T4qeBqYUOftnNHbL/1gWH7t
kXYSEdMIpSjZv0OhqwkV0jk7fOAoiZPKVIC4c3+JiPL5ZWaNgwTtZgCkz7lWwYKm
AmIfzl9RCJbz+8Lp9XV47oIjeOu6NdItsTxW9enfo5+CMoqIlJvmio1uMt7q/Uc/
2PnTp/aI3mEXAdXX3CQzc8dH+r/mcrIp/S5b7xbZUA4CgPSC+tmVeK3MHRp9s+1J
LHwfPjN61NpDBv1B3e/rXq/NtfByaT4piNO2SxQpswJdIS3CMVGr16lr48pGKBlm
HDFfmE407xB68FOqVPORwhzmGtVHW4F7jU6h/TqKVqCYO7Yx9INk03xeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9n7p9wgviijf6rSUffvvwreAwsMB8GA1UdIwQY
MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt
ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm
LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeceixu7J
roOzfGATc07MiUEuHWsxcZPWkIbL4zZehPQBBIAYP+9aJcyogWEQL69+EaVokQoS
VtGp2ek4l4wy5R3EQQb1dWj3ZwB7H0RYUqbr6E6z0PKFu5UHrS6DjxaMbJrngR3F
QMi7PXTWtP0bMusyBldwTxZOQA6L0j/Mo5vDAw8+S31Tyx7mWQMNwKDHoMERHumr
OsPFr0lrWSb8Xxo7wJcMT43OfzfnSsrGuuBbp+GtbWOo++uLplW4D6OecBEpJHgI
M6urgqV/qCJSkdZQH3KotA4IcTJdeIGgIqP0uCkvhxS65xKG9lpZuR0NFo2+8eTt
MmUR+Szqb3YjJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:59 2025 by rpki-client