Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: QySMZ0hOqX6qi5tr0TCPBgpbqKqeRnFwwmcYnaif14s=
Subject key identifier: 04:63:8B:39:CF:14:6F:96:33:C8:22:74:6A:BE:45:7F:20:73:89:56
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0199FB458D03507D8553D3EF9D37C5880DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0E37
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: 1-IgxnHsFK8oFte8N10P7PK5e7cM.roa (hash: ePOdDmBwQlth5xBvng3CM+ctUv7VLk8att4hDe8d3XM=)
2: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: qGt/Owm0TQA6vMFq0hRMBAyhhciK0pZfNA3q+UZARas=)
4: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
5: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
6: Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa (hash: o0itDHyiOKdFZunGmNw6h8Z1wOF08DEK5D3hH/0u17w=)
7: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (hash: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=)
8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8d:03:50:7d:85:53:d3:ef:9d:37:c5:88:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=04638b39cf146f9633c822746abe457f20738956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:ad:dc:88:10:89:dd:78:2d:28:fa:4a:0c:
4f:27:84:c7:6f:68:57:34:8b:62:23:28:66:08:71:
bc:24:3e:f7:bf:c2:29:4b:77:f0:e0:50:00:ef:97:
ec:46:9e:cb:19:cd:12:c3:6a:a0:d4:73:0b:04:de:
96:2f:a8:50:0e:74:9c:be:05:a5:f8:26:d4:a9:90:
a4:c5:e2:2f:ad:c3:18:22:9e:75:53:db:ac:e4:36:
1e:86:2b:09:93:97:1f:5d:69:cd:46:73:c7:6c:9c:
63:0d:07:89:7f:34:03:c0:e5:fd:cd:bf:e0:3c:4a:
8b:64:44:19:ae:e6:67:18:6e:15:b0:7a:28:b9:e0:
f8:d9:33:8a:1d:8b:50:41:5d:ec:6d:7f:15:ce:65:
6f:26:9f:98:dc:60:d9:b4:6d:83:e0:42:2b:5e:3d:
cd:49:c1:7b:ba:99:b6:79:32:e6:e5:89:8b:32:17:
51:64:e0:14:34:d8:57:e3:ad:32:52:78:20:1a:00:
b6:f0:9e:06:a1:16:87:b4:0f:0e:af:63:58:6e:d5:
09:33:44:fb:17:5f:e7:97:1e:1d:10:ab:a8:71:46:
94:be:38:18:6a:10:6d:bc:4b:13:7e:b0:bf:f1:27:
8e:06:04:83:fc:ab:93:c9:bd:45:62:61:03:81:aa:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:8B:39:CF:14:6F:96:33:C8:22:74:6A:BE:45:7F:20:73:89:56
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:a8:36:a3:04:00:47:68:34:27:bc:2d:46:01:18:d5:c7:
d9:01:98:58:47:da:1a:5e:df:91:22:6e:76:44:07:6c:b2:b0:
12:ac:d1:77:77:77:04:9e:86:28:04:69:ed:ef:f9:aa:e8:51:
ba:50:0d:ae:34:1f:10:ef:a4:e7:df:a5:3e:86:61:4b:f4:e8:
bd:03:60:c7:02:92:46:ca:e8:01:55:61:29:ac:97:e4:93:e6:
90:be:68:04:dd:33:af:94:e2:60:91:81:f6:d9:e9:a8:0b:84:
2d:b4:ac:61:4d:56:a7:49:ce:ac:c9:df:68:9e:dc:27:82:10:
4d:b2:82:b3:9e:d2:62:6b:2e:25:5a:24:f2:a9:69:79:95:bd:
64:70:76:ba:6f:51:fb:5e:b3:e2:45:37:91:e3:a0:64:7b:4d:
ac:7c:ea:03:53:7c:43:f9:cc:6c:38:cb:66:b5:54:9f:86:64:
3c:03:1e:e0:c8:88:17:84:0c:b1:24:19:8a:53:f8:98:1a:b4:
fe:62:50:ee:63:96:62:c0:09:2b:29:88:2d:5b:ca:af:ff:eb:
57:8b:5c:e6:7d:46:bb:db:5d:77:50:b2:f7:05:eb:12:0a:41:
b1:19:ca:af:17:94:a9:5a:34:cf:04:27:e9:9f:2b:36:af:92:
5d:4f:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:02 2025 by rpki-client