Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: 4z1Bh3K7cY1DdkUYmr2R+uJlobgVOa7vWF+rPhN90OY=
Subject key identifier: 6B:BE:5A:00:01:6D:1F:52:7B:9A:25:D1:94:C0:6D:53:85:46:87:29
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 0199FC8FA770A8700C0DA12624F04E055F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 156C
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: +tliJGetf7/uQ7PD4p9FDljWGCpi2kr+Sn8xnD9dtlE=)
2: Y5hh8AgGKAUf_2S15Xwk_892p60.roa (hash: baZuJeVmztFazA/spLlePhpdINyXpI1DJgHdXLAL5/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a7:70:a8:70:0c:0d:a1:26:24:f0:4e:05:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=6bbe5a00016d1f527b9a25d194c06d5385468729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:9f:95:76:49:06:b0:79:21:c7:bd:b6:2c:
c5:10:4e:16:b8:0a:4a:8d:59:d5:62:8a:31:e7:3f:
dc:cb:14:70:6e:45:61:43:2b:4a:52:fd:e1:b5:82:
48:bf:aa:fd:84:6b:44:83:de:fe:a6:b3:b0:cc:a5:
08:95:94:40:b3:57:eb:75:de:45:7d:76:b5:85:ec:
a1:f9:3c:9d:d1:54:15:00:ca:b2:d0:24:65:96:78:
b2:1b:af:0f:35:a3:c6:aa:dd:92:36:62:d6:a7:f5:
0e:ca:e8:e7:cb:3a:ec:d1:a7:6d:27:85:a2:e0:54:
6f:f0:2e:f9:cf:cf:95:db:6e:0a:af:76:3a:14:59:
65:88:c7:03:a6:80:22:36:dd:5e:83:8e:c8:2a:80:
d3:1e:41:53:8a:78:89:a0:83:e5:08:5b:de:b1:50:
60:53:c5:99:6a:d3:4c:6a:5b:c1:6d:ea:83:2a:3a:
a5:bd:d3:6b:2a:58:63:1a:31:77:3c:43:7f:74:0c:
f1:7f:00:cc:42:fb:ac:86:1d:fd:71:8e:9e:54:e6:
ff:9a:31:d7:b6:94:17:d4:08:bb:47:79:40:d2:04:
cc:75:87:a4:b9:b6:31:ee:07:dd:dd:0a:05:ae:c6:
5a:9d:19:ba:33:4a:45:9d:4e:97:fa:24:70:1d:f3:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:5A:00:01:6D:1F:52:7B:9A:25:D1:94:C0:6D:53:85:46:87:29
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:f7:b8:a9:c7:20:29:6a:26:77:ad:8c:6f:a5:4e:cd:46:
6b:0f:32:86:73:b7:6e:7e:3a:1c:d5:56:75:29:d5:d9:ca:6d:
68:14:c8:4b:f5:2d:94:12:3d:0e:01:46:55:f5:d5:14:6c:7d:
c7:9b:81:b8:da:45:af:91:42:f0:42:96:ae:4b:69:66:1e:a0:
42:c3:d5:cf:c2:d0:4f:e6:31:17:21:34:3b:c7:d6:69:25:7d:
dc:d0:1f:38:46:ac:d6:36:be:0e:9e:a9:2b:b1:c4:04:16:14:
ac:db:6f:f5:3d:5c:2e:bc:16:a2:6a:41:9d:b3:a1:ce:1b:60:
f1:34:8a:a9:57:d7:29:38:ba:ca:96:80:27:d8:e4:1e:25:2b:
72:8a:29:10:3d:1e:62:a3:95:59:7f:6b:1e:5c:3e:7b:5e:a3:
f9:98:9b:ed:e5:e7:74:c5:c0:af:a1:ff:c9:50:13:a0:ee:43:
38:e2:77:cd:de:8f:f0:cc:30:e4:41:a4:03:b5:fc:52:10:b4:
d2:41:99:06:20:21:3d:27:35:09:78:d9:bf:f5:41:e2:65:3d:
c9:11:99:2c:04:89:a1:89:95:ba:4b:95:f5:83:43:1e:db:12:
c3:79:7b:6f:95:68:77:32:78:e1:72:fa:52:f0:17:9c:6a:48:
98:6c:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:28 2025 by rpki-client