Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: AK2GuUjfQYOJXPtAskbF7WtZ08l/dF+xsNQ9mpt/glc=
Subject key identifier: 22:13:43:CA:BB:23:66:B8:80:C8:5B:86:77:F0:DF:AC:9B:EC:67:B1
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019A4E8670217B322A0384AB68ADF3F1314B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 044B
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: xQ5xdv2CZf+IGwvgZ0FpwffLuoJ1eniYETMVOmfiuO0=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:70:21:7b:32:2a:03:84:ab:68:ad:f3:f1:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=221343cabb2366b880c85b8677f0dfac9bec67b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:dc:b7:f5:65:38:e6:f5:d9:11:96:0d:08:
a7:db:76:fa:93:92:75:d0:45:38:94:0c:7e:2d:19:
9d:8e:bc:b2:ea:df:7a:a3:39:e0:eb:aa:c9:1d:70:
cc:ef:9c:e2:27:a3:60:32:31:82:9d:e0:e4:1c:a5:
10:94:16:cf:5a:b3:c1:b5:da:0f:19:04:21:18:cc:
78:81:f9:8d:bb:e0:7e:be:8c:20:88:e6:67:b2:0c:
07:a5:ec:f2:e4:99:75:fd:be:57:d5:74:c8:65:7d:
5b:22:79:1c:1e:de:b2:dc:b2:8e:64:74:65:2c:ce:
2d:45:6c:26:d7:52:dd:42:3c:43:3e:bc:db:23:39:
73:32:e9:8e:dd:1f:59:05:88:ca:16:c4:e6:ed:03:
f4:23:ee:6a:0f:53:90:0d:06:1e:01:94:b7:9e:52:
a5:40:87:a8:f1:0b:40:3e:5d:bb:52:fb:54:0d:96:
df:46:a4:61:ef:75:ea:a8:b7:e3:2b:ce:c1:ce:4b:
20:86:cb:a0:1f:8b:70:d0:5d:c5:69:47:4d:29:6b:
bd:03:5f:b1:71:f8:1c:7e:9e:f7:d9:92:a0:ae:4b:
a2:24:4f:af:b5:f2:78:0e:fb:05:b3:b2:98:f4:38:
72:61:64:e7:45:89:db:69:1e:50:cc:1a:81:ff:2d:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:43:CA:BB:23:66:B8:80:C8:5B:86:77:F0:DF:AC:9B:EC:67:B1
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:b7:05:83:f0:2c:83:bb:30:71:b1:65:9f:89:f2:ea:e1:
05:db:0d:cf:9e:70:83:a9:51:49:b4:f5:0c:aa:44:ed:52:b1:
51:2e:06:87:db:dd:03:52:4f:a7:b5:66:8f:e6:02:49:9a:c6:
46:d0:6a:4a:4b:04:b8:82:f6:63:34:02:2f:98:ad:7d:5e:80:
f9:69:eb:d5:7c:13:a1:77:9c:1e:c3:92:74:38:e6:a0:4e:d5:
4e:06:71:e6:82:e0:74:1d:ec:d6:82:ab:81:8c:8b:59:10:5a:
30:f8:28:e0:02:3b:e2:65:1c:94:9a:fa:a7:80:48:1b:13:65:
b5:b5:59:9a:35:4f:bb:7c:39:6f:5e:3b:32:80:b2:e7:5e:58:
14:eb:15:39:c3:29:34:eb:6f:eb:61:1b:f2:6b:0c:dc:14:fb:
23:3a:6b:30:c3:61:27:b2:20:6f:3b:dd:ce:42:5e:9c:09:da:
47:df:4f:b4:63:06:58:a3:aa:1c:df:bb:5f:9b:ec:a6:c0:76:
bd:62:89:d7:e4:d3:a9:cf:61:01:99:5b:85:4f:08:75:dc:37:
e6:55:66:d6:6c:88:7a:fd:3e:51:c7:78:b6:7d:ec:94:50:8c:
1d:58:24:28:39:db:46:a4:15:aa:95:7f:eb:e3:96:66:ee:dc:
c6:c1:c0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhnAhezIqA4SraK3z8TFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjUxMTA0MTEwMDI0WhcNMjUxMTA1MTEwMDI0WjAzMTEwLwYDVQQD
EygyMjEzNDNjYWJiMjM2NmI4ODBjODViODY3N2YwZGZhYzliZWM2N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxynct/VlOOb12RGWDQin23b6k5J1
0EU4lAx+LRmdjryy6t96ozng66rJHXDM75ziJ6NgMjGCneDkHKUQlBbPWrPBtdoP
GQQhGMx4gfmNu+B+vowgiOZnsgwHpezy5Jl1/b5X1XTIZX1bInkcHt6y3LKOZHRl
LM4tRWwm11LdQjxDPrzbIzlzMumO3R9ZBYjKFsTm7QP0I+5qD1OQDQYeAZS3nlKl
QIeo8QtAPl27UvtUDZbfRqRh73XqqLfjK87BzksghsugH4tw0F3FaUdNKWu9A1+x
cfgcfp732ZKgrkuiJE+vtfJ4DvsFs7KY9DhyYWTnRYnbaR5QzBqB/y2uRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCITQ8q7I2a4gMhbhnfw36yb7GexMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhG3BYPw
LIO7MHGxZZ+J8urhBdsNz55wg6lRSbT1DKpE7VKxUS4Gh9vdA1JPp7Vmj+YCSZrG
RtBqSksEuIL2YzQCL5itfV6A+Wnr1XwToXecHsOSdDjmoE7VTgZx5oLgdB3s1oKr
gYyLWRBaMPgo4AI74mUclJr6p4BIGxNltbVZmjVPu3w5b147MoCy515YFOsVOcMp
NOtv62Eb8msM3BT7IzprMMNhJ7IgbzvdzkJenAnaR99PtGMGWKOqHN+7X5vspsB2
vWKJ1+TTqc9hAZlbhU8Iddw35lVm1myIev0+Ucd4tn3slFCMHVgkKDnbRqQVqpV/
6+OWZu7cxsHAsg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:50 2025 by rpki-client