Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: /MSAhT2FbOs3WasWhfdFJv63Y84YdIOWbHbFYICXTb4=
Subject key identifier: 50:AA:5D:78:D0:C5:47:B1:7E:AC:46:04:E4:83:8B:30:21:A6:40:DD
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 0199FB7CF534ED00BF370DCEE6CE896FC4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: 0174
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: J3AaOEGOsgU5t1NpWclqYoYtW3BK1Pmt9h2z4U1EKRE=)
2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f5:34:ed:00:bf:37:0d:ce:e6:ce:89:6f:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=50aa5d78d0c547b17eac4604e4838b3021a640dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:7c:2c:3b:df:d1:5d:d2:c9:44:17:7a:b6:
a5:1d:d7:b5:5a:10:79:db:e8:81:0f:4b:f4:aa:d1:
fa:c5:8c:fc:43:6e:f2:ae:a5:14:1d:fb:9b:69:06:
1f:3f:40:6a:35:a9:ca:c3:e6:0e:8c:44:42:de:7f:
23:41:5b:8c:cd:c2:43:69:42:b8:82:d5:a5:48:d5:
d2:32:9f:38:a1:05:d3:ae:a6:b5:a2:d0:12:74:4c:
22:29:d1:e1:28:71:6a:bf:11:7b:78:6f:04:e0:f2:
3b:43:75:12:43:98:09:48:37:22:0d:3d:f7:d5:6e:
be:ca:2a:cd:2c:ed:c4:c8:01:85:4f:37:fc:87:3c:
54:ea:58:16:e8:78:61:87:3a:67:2a:1e:d7:50:f2:
21:75:52:6c:5c:22:31:87:79:06:d9:11:dd:98:66:
01:98:f0:b1:83:56:3a:67:b3:aa:9b:af:34:a9:2f:
c2:83:ec:53:6c:cf:a6:5b:35:5b:70:15:77:7f:43:
29:8f:7f:75:6e:5f:2d:f4:2d:8c:de:c3:69:3c:b7:
c5:39:fd:8b:9a:44:41:b2:dd:53:51:d6:66:6f:1c:
0b:78:96:05:86:ae:a4:f3:c9:ee:35:05:fd:bd:e0:
e8:b8:76:17:8b:63:80:a5:9e:de:ab:68:2e:4a:e2:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:5D:78:D0:C5:47:B1:7E:AC:46:04:E4:83:8B:30:21:A6:40:DD
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:b6:35:a0:97:81:bb:31:93:e0:e7:d8:33:0e:bf:02:5b:
d4:65:d9:a9:b4:b0:28:31:6e:d6:30:a0:3f:be:6d:cb:c8:98:
a6:be:50:6f:11:3b:4d:2e:36:1a:24:5d:74:3e:f8:bc:5c:0d:
22:80:d0:54:5f:a2:fd:c4:89:fe:84:73:90:24:7d:5c:0e:79:
44:91:27:a7:d7:ce:2e:0c:8d:17:97:d7:c6:f7:31:10:a8:68:
8e:e9:ef:01:5a:28:31:e4:71:37:3f:44:59:a9:94:b4:62:8b:
e8:d3:82:a7:71:76:83:1b:0f:b1:b8:0a:e2:e9:bb:24:3f:39:
8b:8c:8a:b6:10:ea:71:87:b9:0c:72:98:c9:ef:2d:00:4f:d9:
61:78:de:8a:fb:e2:a2:35:74:b9:ca:f9:2e:69:27:3f:02:8a:
d5:e9:f0:12:bc:fd:71:d3:61:9e:96:3c:39:02:02:23:35:47:
cb:02:07:23:22:0e:14:a9:88:8a:a2:df:05:ba:fe:24:ba:c7:
0c:1d:20:4f:4c:c0:c1:2d:0b:69:d1:ea:84:fc:b3:12:0a:a2:
52:66:a2:3f:81:5f:0f:35:d5:11:a5:16:0a:78:33:8a:46:0d:
09:c3:14:45:73:d6:92:53:a9:5d:3a:c1:a4:e7:c7:33:2c:c9:
31:54:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:10 2025 by rpki-client