Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier: oW3AEqppmMziQKBg02/JgSVDzbmGZxc0+z1/IrssuEI=
Subject key identifier: DA:FD:DE:FE:78:F4:46:76:50:BD:1F:C0:50:46:63:2C:D8:D7:49:13
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial: 019A4EBD5882C8C0A5B6EFDD6DB7F456C036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number: 0E45
Signing time: Tue 04 Nov 2025 12:00:23 +0000
Manifest this update: Tue 04 Nov 2025 12:00:23 +0000
Manifest next update: Wed 05 Nov 2025 12:00:23 +0000
Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: Wf7M87tixSDylPr2Sns+r5BLFyDgI9DYmV0AdHySfKo=)
2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:58:82:c8:c0:a5:b6:ef:dd:6d:b7:f4:56:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Validity
Not Before: Nov 4 12:00:23 2025 GMT
Not After : Nov 5 12:00:23 2025 GMT
Subject: CN=dafddefe78f4467650bd1fc05046632cd8d74913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:79:80:f8:e7:3a:12:17:57:be:e1:64:68:
ac:29:94:95:54:83:df:99:33:75:42:4b:b4:94:bd:
8c:8c:3e:52:b9:36:11:5b:1a:02:b5:3c:3f:ef:6e:
e1:1d:3e:60:50:4d:1d:24:5e:bc:9c:33:35:02:53:
88:6d:ae:7e:e3:ef:84:d2:d9:b6:a9:9c:75:70:7e:
08:50:8e:ca:ca:57:26:8f:5d:94:71:c7:a7:f7:1e:
5e:82:6c:dc:83:7c:30:a4:57:f6:1f:d6:7d:c8:fa:
1c:11:0e:1e:48:41:20:6c:16:93:58:06:41:3c:e0:
ab:7a:14:fa:a8:7a:85:e7:df:6b:ae:ed:6a:6a:71:
dc:26:8b:ce:6a:1f:0e:0e:33:24:9d:4e:a0:43:b9:
d2:4c:fe:29:22:0d:96:4f:d0:c3:fb:f3:8d:1e:77:
03:68:6b:fb:5c:95:34:a1:11:f2:4f:59:45:bd:22:
35:25:20:fe:d0:a2:1c:7a:74:b9:00:d4:f1:29:d5:
86:c8:65:7f:e9:fb:58:5d:73:55:65:bd:d4:ae:a2:
4c:3a:45:d5:1d:80:38:55:21:76:47:23:d3:de:f1:
97:f0:e3:af:2b:fb:9c:c0:b5:21:a1:89:6f:d1:53:
8f:65:19:2f:77:37:ae:1c:36:e5:06:05:37:72:d5:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:DE:FE:78:F4:46:76:50:BD:1F:C0:50:46:63:2C:D8:D7:49:13
X509v3 Authority Key Identifier:
keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bc:00:a4:52:24:01:72:83:4c:2e:f8:4d:8a:2b:76:7d:ac:
04:75:0b:c8:bb:11:7d:66:b3:b1:61:c0:b5:7c:e3:c8:b4:9f:
c3:97:d5:0b:5c:c7:dc:b1:b3:b4:8e:63:3c:93:9a:81:3a:37:
0b:1b:38:59:f0:ad:7b:9d:0e:e7:ef:d0:16:f7:ed:ce:1a:d7:
96:87:7c:22:19:9a:bb:4e:64:e2:56:48:b3:b8:63:1f:90:ee:
52:d4:d4:14:c0:5f:0f:c5:ba:06:0c:eb:70:34:d9:86:a7:90:
0f:d1:b6:da:2f:94:74:90:44:92:2e:b8:bc:63:08:21:f6:ac:
22:01:2e:93:ea:86:bd:e0:b3:e1:28:c3:a5:40:75:3d:88:48:
1c:04:8d:2b:47:c1:d4:0d:02:fb:da:d0:16:88:16:bc:f5:f4:
77:72:fa:59:b9:6e:f8:7e:78:2d:31:5b:cf:52:bc:2d:a0:66:
1e:4c:f9:44:5f:c1:92:d9:5d:f1:df:56:17:5a:55:31:6f:08:
bd:45:9d:38:58:68:77:16:40:b0:ac:f6:6e:29:c6:8a:70:e1:
97:b8:81:2f:b8:0b:64:ea:4f:38:cd:f6:55:c8:3a:d8:88:3e:
79:13:84:4c:dd:04:cb:a3:8d:c2:ce:06:67:a0:01:1d:63:f1:
61:3d:2a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvViCyMCltu/dbbf0VsA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi
ZjFjYjUwHhcNMjUxMTA0MTIwMDIzWhcNMjUxMTA1MTIwMDIzWjAzMTEwLwYDVQQD
EyhkYWZkZGVmZTc4ZjQ0Njc2NTBiZDFmYzA1MDQ2NjMyY2Q4ZDc0OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1d5gPjnOhIXV77hZGisKZSVVIPf
mTN1Qku0lL2MjD5SuTYRWxoCtTw/727hHT5gUE0dJF68nDM1AlOIba5+4++E0tm2
qZx1cH4IUI7Kylcmj12Uccen9x5egmzcg3wwpFf2H9Z9yPocEQ4eSEEgbBaTWAZB
POCrehT6qHqF599rru1qanHcJovOah8ODjMknU6gQ7nSTP4pIg2WT9DD+/ONHncD
aGv7XJU0oRHyT1lFvSI1JSD+0KIcenS5ANTxKdWGyGV/6ftYXXNVZb3UrqJMOkXV
HYA4VSF2RyPT3vGX8OOvK/ucwLUhoYlv0VOPZRkvdzeuHDblBgU3ctWehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr93v549EZ2UL0fwFBGYyzY10kTMB8GA1UdIwQY
MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt
YTgwNjE2M2VjMjk0LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0
LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObwApFIk
AXKDTC74TYordn2sBHULyLsRfWazsWHAtXzjyLSfw5fVC1zH3LGztI5jPJOagTo3
Cxs4WfCte50O5+/QFvftzhrXlod8Ihmau05k4lZIs7hjH5DuUtTUFMBfD8W6Bgzr
cDTZhqeQD9G22i+UdJBEki64vGMIIfasIgEuk+qGveCz4SjDpUB1PYhIHASNK0fB
1A0C+9rQFogWvPX0d3L6Wblu+H54LTFbz1K8LaBmHkz5RF/Bktld8d9WF1pVMW8I
vUWdOFhodxZAsKz2binGinDhl7iBL7gLZOpPOM32Vcg62Ig+eROETN0Ey6ONws4G
Z6ABHWPxYT0q3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:57 2025 by rpki-client