Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: Dh+bKiT9+oGCkkWifGBUBjdViJhE/RyrwWUB5kUPBPw=
Subject key identifier: 6E:33:BB:8B:C3:0B:D9:35:2A:E6:E0:FF:86:1A:2F:10:1B:76:73:6F
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0199FEEBB9C3807BE75F085FB7C21A5C6D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 16F4
Signing time: Mon 20 Oct 2025 00:01:25 +0000
Manifest this update: Mon 20 Oct 2025 00:01:25 +0000
Manifest next update: Tue 21 Oct 2025 00:01:25 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: X2BiFCDqfpUoC1f78h0EA1QxY9YU2kyJpkJML0V7pyw=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b9:c3:80:7b:e7:5f:08:5f:b7:c2:1a:5c:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Oct 20 00:01:25 2025 GMT
Not After : Oct 21 00:01:25 2025 GMT
Subject: CN=6e33bb8bc30bd9352ae6e0ff861a2f101b76736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:db:f9:53:2c:4c:25:f5:39:9e:5d:e3:c8:
b1:a1:75:9d:d4:f7:75:9a:a9:9b:9b:b6:47:20:7d:
fe:8f:c0:4d:8b:43:46:43:e1:36:47:1c:54:d5:b3:
87:9a:93:3c:e3:3e:e1:b5:ec:91:75:f6:52:0e:26:
34:9f:04:59:c4:6a:e6:8a:8b:45:48:9c:09:fa:35:
2f:e8:f0:6b:0d:ad:72:cc:62:85:bd:e8:df:7c:a0:
2f:84:11:fe:3c:fe:31:1a:01:a6:a4:ef:5c:0b:1e:
8b:17:16:d0:29:db:84:cc:9a:22:cd:3a:df:20:3a:
19:62:0b:7b:1b:06:ee:8a:46:97:b3:af:bb:28:29:
16:37:4e:c4:46:d8:da:f4:be:bc:80:13:c7:e1:29:
d3:00:da:ad:74:98:5a:4f:ec:aa:ba:c7:99:74:44:
f9:48:2c:2b:7a:20:fc:17:a5:a5:f8:b4:44:0d:c2:
9b:88:df:5b:c0:64:8d:c4:a9:f9:a6:37:72:b3:40:
39:9f:94:1a:56:dd:15:e7:8b:07:34:8f:f7:62:40:
3d:8b:b7:e9:bc:31:d2:0d:6d:69:c8:75:19:fb:54:
e1:97:91:96:f5:3a:9c:fe:7a:fd:8a:62:e5:1f:70:
15:90:59:09:a7:f2:ef:21:35:8c:3d:f5:7a:36:b5:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:BB:8B:C3:0B:D9:35:2A:E6:E0:FF:86:1A:2F:10:1B:76:73:6F
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:c7:59:0a:83:d8:48:63:98:27:ad:94:83:45:da:8a:05:
99:d3:c7:70:16:1c:02:eb:b2:42:ef:e3:d5:f8:9e:2b:a1:bf:
28:dc:9d:4e:dd:a3:cd:bf:a0:78:f8:a5:e6:69:32:a3:0c:d8:
71:b4:e7:88:d7:70:a1:8c:b3:2e:97:68:ee:e0:53:ac:29:d9:
4f:90:85:35:9f:e9:55:ec:b0:4e:7f:5d:bf:ac:28:5f:8b:f5:
04:6b:32:77:80:69:c5:c5:76:bc:50:ea:99:ab:bb:f6:87:58:
28:cf:2c:db:b2:bf:23:99:d4:17:1e:2f:8e:87:5c:ac:a3:b3:
2d:b9:fc:18:ee:cc:2f:49:fa:b9:a1:62:3f:ff:eb:8c:c3:49:
18:02:3f:17:c0:d2:f4:2a:0a:57:10:2d:2c:d2:2b:44:68:2d:
a3:10:ab:30:0d:12:a5:7c:6c:74:2f:d6:67:52:14:ce:75:7f:
bb:5c:10:8a:c5:74:d7:5c:95:21:cd:c3:ef:1b:00:ff:ae:0d:
a9:9b:db:08:01:58:32:78:69:ca:a2:56:e3:80:85:56:b6:42:
11:d3:6b:03:8b:3f:4c:d5:7c:cf:81:14:f7:a6:04:0d:03:dc:
3a:67:cf:c6:33:82:49:a2:01:5e:72:00:61:47:4e:ce:b8:a7:
b2:2b:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:53 2025 by rpki-client