Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: hi6EX+Ww50KUk9hxjc0HKuHo3rOqobWbD6G8KniIyAo=
Subject key identifier: BA:9A:76:75:AD:9B:9A:92:91:D1:0E:56:0E:0C:1B:44:69:AD:AA:8A
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019A4D740FDD4A64AEA22917C8813C7B53C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0744
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: K+/4fnt4Ws/gRpwA09vAQDYwRi7Go661ZPJ/ZCabL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0f:dd:4a:64:ae:a2:29:17:c8:81:3c:7b:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=ba9a7675ad9b9a9291d10e560e0c1b4469adaa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:cc:83:64:fc:eb:6c:e4:7e:f3:f8:ce:90:
e6:14:6c:ba:d5:a4:75:81:a3:7c:2a:4a:5e:34:93:
ee:ee:ac:99:40:20:32:cd:a2:f0:bd:6c:05:11:9a:
ff:cf:a0:73:41:a1:ff:24:fd:89:7d:24:21:83:ca:
c8:44:70:09:8f:5a:7e:9c:7f:2b:ca:aa:2d:5f:64:
23:bd:95:f2:7e:c1:40:8f:97:74:12:d1:82:fd:67:
46:73:a5:ba:0f:2e:44:73:c2:b0:d9:77:34:66:4b:
ff:d7:42:62:c6:52:b1:18:b3:0a:46:20:6f:2d:cc:
85:08:f8:35:fd:fd:2d:ff:c6:98:f2:77:80:a3:7a:
6d:10:49:51:df:65:c0:9a:34:10:89:0c:84:06:5c:
1c:bd:3c:fe:4a:eb:76:8f:75:e5:cd:46:61:c2:34:
2c:c8:30:b9:f2:ba:d5:9a:e1:11:4b:7e:dc:43:46:
f6:31:81:b8:25:12:90:23:69:b4:35:09:1c:0d:e5:
39:a3:8e:05:a1:ac:40:9d:c9:e6:cd:0d:cd:e1:bc:
65:78:a1:03:69:a6:c0:18:68:16:35:43:7e:d3:34:
17:f6:b4:be:fa:fc:fb:4f:a7:4e:75:4d:cb:1f:77:
c9:f3:1e:bb:70:0d:9b:39:a4:b8:99:91:54:46:af:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:76:75:AD:9B:9A:92:91:D1:0E:56:0E:0C:1B:44:69:AD:AA:8A
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:92:bb:10:96:96:02:b4:c0:cf:b6:ba:75:37:a0:49:44:
c8:86:9d:79:6c:12:72:7a:50:6b:41:1f:f0:5d:15:0c:20:47:
ec:19:67:e3:e2:0d:7e:0a:4f:b9:a5:57:b8:28:5f:6e:06:9a:
5b:b3:f0:c8:d7:d0:a6:3a:3c:1f:e3:ad:27:21:38:8c:7e:6e:
3a:fc:ef:0d:e5:b9:8b:6f:72:39:52:ea:94:bd:8b:e8:db:89:
74:34:94:34:85:be:8f:ce:47:de:3e:2e:d6:9a:7a:c6:17:b0:
b7:ad:f5:f5:e1:d3:77:ac:15:f3:98:fb:72:78:97:6c:02:1b:
c0:ec:8d:1b:68:d4:18:9c:c7:58:a0:d3:d0:83:88:a9:16:a0:
db:3a:da:ef:7e:bb:61:35:88:b7:6f:ec:bf:55:54:bb:c8:71:
33:e3:1d:bb:3b:bb:fb:24:b7:b3:75:12:bd:14:a2:47:37:b4:
b1:61:ee:f5:24:37:93:82:3d:6c:36:c2:8b:33:fa:0b:eb:37:
63:4b:82:7b:10:ad:ed:18:11:87:97:56:de:76:40:b1:d7:8f:
9e:b4:74:98:24:26:22:f3:da:be:e2:a2:43:6c:71:44:24:03:
eb:cb:dd:ee:5b:72:5d:9f:fa:a0:80:1a:b4:66:36:93:a7:a7:
54:cc:28:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdA/dSmSuoikXyIE8e1PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw
ZjYxY2MwHhcNMjUxMTA0MDYwMDQzWhcNMjUxMTA1MDYwMDQzWjAzMTEwLwYDVQQD
EyhiYTlhNzY3NWFkOWI5YTkyOTFkMTBlNTYwZTBjMWI0NDY5YWRhYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TLMg2T862zkfvP4zpDmFGy61aR1
gaN8KkpeNJPu7qyZQCAyzaLwvWwFEZr/z6BzQaH/JP2JfSQhg8rIRHAJj1p+nH8r
yqotX2QjvZXyfsFAj5d0EtGC/WdGc6W6Dy5Ec8Kw2Xc0Zkv/10JixlKxGLMKRiBv
LcyFCPg1/f0t/8aY8neAo3ptEElR32XAmjQQiQyEBlwcvTz+Sut2j3XlzUZhwjQs
yDC58rrVmuERS37cQ0b2MYG4JRKQI2m0NQkcDeU5o44FoaxAncnmzQ3N4bxleKED
aabAGGgWNUN+0zQX9rS++vz7T6dOdU3LH3fJ8x67cA2bOaS4mZFURq8Y9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqadnWtm5qSkdEOVg4MG0RpraqKMB8GA1UdIwQY
MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt
M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw
LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8CSuxCW
lgK0wM+2unU3oElEyIadeWwScnpQa0Ef8F0VDCBH7Bln4+INfgpPuaVXuChfbgaa
W7PwyNfQpjo8H+OtJyE4jH5uOvzvDeW5i29yOVLqlL2L6NuJdDSUNIW+j85H3j4u
1pp6xhewt6319eHTd6wV85j7cniXbAIbwOyNG2jUGJzHWKDT0IOIqRag2zra7367
YTWIt2/sv1VUu8hxM+Mduzu7+yS3s3USvRSiRze0sWHu9SQ3k4I9bDbCizP6C+s3
Y0uCexCt7RgRh5dW3nZAsdePnrR0mCQmIvPavuKiQ2xxRCQD68vd7ltyXZ/6oIAa
tGY2k6enVMwobg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:19 2025 by rpki-client