Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: GHgdeq/0UbhDaZ4M7Ied2dfXX8bMnAwuSO9VgCOir5c=
Subject key identifier: E0:4E:82:8E:E2:70:38:2E:70:9B:FE:5D:29:AE:8B:30:7A:84:99:0E
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019A52D2AFB3CDED084C297C7AE8FEC06AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 11EB
Signing time: Wed 05 Nov 2025 07:02:10 +0000
Manifest this update: Wed 05 Nov 2025 07:02:10 +0000
Manifest next update: Thu 06 Nov 2025 07:02:10 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: Zl460kOLpW4u2z194iVybZqmIOTYRqmaoYvyaHQ9Rqs=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:af:b3:cd:ed:08:4c:29:7c:7a:e8:fe:c0:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Nov 5 07:02:10 2025 GMT
Not After : Nov 6 07:02:10 2025 GMT
Subject: CN=e04e828ee270382e709bfe5d29ae8b307a84990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:37:03:75:af:94:dc:ea:56:1f:4a:2a:2b:
8f:5e:d1:86:64:b8:19:cf:87:1c:f1:0f:f7:37:b6:
d5:c1:af:c8:4e:b2:46:b5:fa:08:a1:2f:5a:92:a1:
b4:d9:bf:08:89:21:27:4c:19:54:b9:5a:e3:09:89:
39:e0:e3:97:05:a6:04:3a:85:70:48:f9:83:2f:81:
ad:c4:75:4a:b2:1a:1c:0f:1c:c5:95:e9:6a:54:fc:
86:e5:7c:8e:7f:20:03:cb:53:48:ac:a0:2d:9f:8d:
41:ae:0e:d5:44:1b:ae:e5:b1:30:36:25:1f:ae:db:
89:fa:4b:df:0e:e9:82:d6:89:4b:08:c6:bc:c5:a2:
58:5b:62:86:19:2e:c0:ee:8e:27:39:ed:80:76:29:
f9:31:69:fe:61:7f:41:3b:a3:cb:88:dc:61:b4:a6:
b0:fd:2b:82:71:f9:24:ed:ca:d7:4f:ac:c5:6a:a0:
88:1a:9b:fd:d4:7e:ee:04:a1:ee:d5:d2:43:fa:ad:
16:f5:fc:f0:a2:79:9a:14:ce:71:16:01:5b:4d:89:
36:aa:e9:ee:bc:de:a0:6d:54:36:43:6b:01:06:27:
79:08:18:f5:ca:40:63:96:71:6d:56:d4:dc:3c:65:
03:e8:a9:b0:90:20:68:b6:e8:1f:05:2b:ba:3d:20:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:82:8E:E2:70:38:2E:70:9B:FE:5D:29:AE:8B:30:7A:84:99:0E
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:c5:d2:cc:43:8a:ba:01:11:d3:d0:f0:e9:2b:e2:86:fb:
88:fa:d2:4d:27:87:25:50:b5:7a:f5:34:9f:79:72:fa:af:f5:
b8:8d:b7:2f:b2:a2:35:ed:44:40:44:0b:ad:cb:c8:25:0f:89:
3b:fd:73:89:1c:de:28:08:24:98:ad:84:ff:6a:41:f4:6b:b3:
a0:e6:fb:40:7c:46:36:a1:14:cf:d1:5f:a6:67:76:9c:3a:01:
30:0e:43:47:de:6b:83:cf:41:73:1c:e5:06:16:59:6b:64:26:
59:cf:b2:e8:98:1f:2f:0c:b1:1b:38:7f:07:f4:b1:f3:0b:05:
9b:07:c3:00:b0:a2:e5:c5:e2:a7:94:cf:46:59:c5:a8:05:f4:
16:9b:87:cc:28:9f:aa:20:57:0c:2b:cb:c8:ac:ac:fd:7d:bf:
82:fe:3a:ac:cc:a8:44:15:09:1e:f5:fa:ed:2a:bf:31:07:65:
51:ab:0c:ec:c9:74:5b:ee:48:92:8b:db:09:86:a1:50:2e:ed:
58:55:d4:2f:05:f5:32:fe:d0:80:21:9b:f9:41:ea:e9:50:79:
42:d9:ec:f8:6b:f8:13:44:e2:d8:6e:98:3e:bf:b9:4c:ef:54:
25:b7:cc:8a:94:dd:29:28:06:eb:5d:dc:cf:c2:e3:0a:8e:5e:
8b:71:74:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0q+zze0ITCl8euj+wGrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm
YzFjYjcwHhcNMjUxMTA1MDcwMjEwWhcNMjUxMTA2MDcwMjEwWjAzMTEwLwYDVQQD
EyhlMDRlODI4ZWUyNzAzODJlNzA5YmZlNWQyOWFlOGIzMDdhODQ5OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPQ3A3WvlNzqVh9KKiuPXtGGZLgZ
z4cc8Q/3N7bVwa/ITrJGtfoIoS9akqG02b8IiSEnTBlUuVrjCYk54OOXBaYEOoVw
SPmDL4GtxHVKshocDxzFlelqVPyG5XyOfyADy1NIrKAtn41Brg7VRBuu5bEwNiUf
rtuJ+kvfDumC1olLCMa8xaJYW2KGGS7A7o4nOe2Adin5MWn+YX9BO6PLiNxhtKaw
/SuCcfkk7crXT6zFaqCIGpv91H7uBKHu1dJD+q0W9fzwonmaFM5xFgFbTYk2qunu
vN6gbVQ2Q2sBBid5CBj1ykBjlnFtVtTcPGUD6KmwkCBotugfBSu6PSAPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBOgo7icDgucJv+XSmuizB6hJkOMB8GA1UdIwQY
MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt
OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5
LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM/F0sxD
iroBEdPQ8Okr4ob7iPrSTSeHJVC1evU0n3ly+q/1uI23L7KiNe1EQEQLrcvIJQ+J
O/1ziRzeKAgkmK2E/2pB9GuzoOb7QHxGNqEUz9Ffpmd2nDoBMA5DR95rg89Bcxzl
BhZZa2QmWc+y6JgfLwyxGzh/B/Sx8wsFmwfDALCi5cXip5TPRlnFqAX0FpuHzCif
qiBXDCvLyKys/X2/gv46rMyoRBUJHvX67Sq/MQdlUasM7Ml0W+5IkovbCYahUC7t
WFXULwX1Mv7QgCGb+UHq6VB5Qtns+Gv4E0Ti2G6YPr+5TO9UJbfMipTdKSgG613c
z8LjCo5ei3F0/w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:02 2025 by rpki-client