Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: FBADabeoQlNbvxsXlq4YhwW6AEpZ772wu0UUGpnPLBM=
Subject key identifier: 2E:DC:55:78:E2:CD:A5:A3:C4:33:9D:4B:58:24:87:B0:D4:FF:12:36
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019A4D73E2ED3FCE45427057A47C6BB58C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1413
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: GE2YhDQF88U+A6/eEIjhZVkgOd58qRlHV2NYU1mDAQg=)
2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e2:ed:3f:ce:45:42:70:57:a4:7c:6b:b5:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=2edc5578e2cda5a3c4339d4b582487b0d4ff1236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:b3:a8:0b:25:31:09:7d:b0:21:1a:56:59:
cc:80:a2:85:c2:4d:c8:a9:0c:f8:a2:69:43:10:29:
74:0c:83:bd:25:10:e5:25:1a:61:04:49:56:5e:4d:
11:5c:36:46:ed:86:72:4d:46:ae:50:75:88:59:8c:
54:32:f8:9a:6e:3c:ee:4b:57:9b:e6:60:c7:e6:86:
05:50:ad:dc:70:3e:c4:ae:59:27:0f:e2:da:1c:8c:
5e:9c:d7:96:b6:08:80:9c:4b:fa:70:92:56:38:fd:
72:e5:a1:2c:af:4a:2e:58:25:c9:e2:f8:26:b2:ed:
9d:7f:50:2a:3f:67:96:87:36:54:00:0b:b1:a3:ab:
32:c5:d7:b1:3e:20:8c:b9:95:5e:32:3d:e6:bf:5b:
4a:ff:43:8a:e9:a5:7f:e5:70:54:bf:e4:13:b7:71:
66:3b:2a:16:1a:1f:8e:be:08:4b:62:27:10:d1:ae:
51:a2:65:1b:d3:fe:8e:e0:d2:f9:59:5a:20:fb:49:
84:45:82:dd:b3:64:3f:9a:7a:3f:0c:66:5b:fc:b3:
88:3e:f5:88:95:c2:8e:74:5f:12:bf:bd:1f:4c:b4:
2d:f7:12:af:ab:b1:4d:d7:d7:bf:26:93:42:a0:dc:
85:66:01:67:ac:85:14:78:ce:30:91:14:a1:9a:43:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:55:78:E2:CD:A5:A3:C4:33:9D:4B:58:24:87:B0:D4:FF:12:36
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e4:91:ed:93:2d:19:be:96:25:0c:47:76:fc:b6:39:00:75:
da:f1:1c:95:ce:4e:3c:d7:e6:83:e6:99:70:13:e1:61:51:8b:
e9:58:eb:19:9c:13:fa:a9:f5:91:36:c8:2f:7f:69:de:bd:1c:
24:a2:39:6b:72:f3:eb:e1:e7:54:47:58:f6:50:87:24:0e:30:
fa:fc:90:1d:c6:c3:c4:6b:5d:d6:ce:34:3f:e8:d9:ca:12:88:
cd:9a:41:76:4b:ca:2a:ec:cd:1e:8b:90:6a:90:cc:76:a9:7d:
0a:3d:f7:74:f2:67:de:65:50:f0:12:51:b3:86:1d:9c:f9:ad:
37:6e:c2:f5:d4:e9:9c:bc:b1:34:a1:ec:b6:4a:f8:a3:58:7b:
8f:b7:36:2c:4d:f7:ca:5f:7d:90:33:8f:83:2e:5b:3c:83:c8:
f9:cc:39:af:73:52:a5:99:65:c6:10:57:6b:f5:c8:76:fb:26:
39:ba:d7:df:14:d8:8c:eb:92:16:b1:30:23:24:c5:45:ff:66:
df:2e:77:c7:06:fa:e6:71:75:4a:9e:47:6c:25:ad:ff:28:3f:
b5:3d:53:a6:03:d0:d8:13:b6:52:b3:0a:0f:1e:75:57:8a:2b:
05:fe:22:ff:81:cf:38:28:d8:f9:6f:65:29:6e:dd:26:24:ee:
92:5c:4b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+LtP85FQnBXpHxrtYxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjUxMTA0MDYwMDMxWhcNMjUxMTA1MDYwMDMxWjAzMTEwLwYDVQQD
EygyZWRjNTU3OGUyY2RhNWEzYzQzMzlkNGI1ODI0ODdiMGQ0ZmYxMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIWzqAslMQl9sCEaVlnMgKKFwk3I
qQz4omlDECl0DIO9JRDlJRphBElWXk0RXDZG7YZyTUauUHWIWYxUMviabjzuS1eb
5mDH5oYFUK3ccD7ErlknD+LaHIxenNeWtgiAnEv6cJJWOP1y5aEsr0ouWCXJ4vgm
su2df1AqP2eWhzZUAAuxo6syxdexPiCMuZVeMj3mv1tK/0OK6aV/5XBUv+QTt3Fm
OyoWGh+OvghLYicQ0a5RomUb0/6O4NL5WVog+0mERYLds2Q/mno/DGZb/LOIPvWI
lcKOdF8Sv70fTLQt9xKvq7FN19e/JpNCoNyFZgFnrIUUeM4wkRShmkO2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7cVXjizaWjxDOdS1gkh7DU/xI2MB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeSR7ZMt
Gb6WJQxHdvy2OQB12vEclc5OPNfmg+aZcBPhYVGL6VjrGZwT+qn1kTbIL39p3r0c
JKI5a3Lz6+HnVEdY9lCHJA4w+vyQHcbDxGtd1s40P+jZyhKIzZpBdkvKKuzNHouQ
apDMdql9Cj33dPJn3mVQ8BJRs4YdnPmtN27C9dTpnLyxNKHstkr4o1h7j7c2LE33
yl99kDOPgy5bPIPI+cw5r3NSpZllxhBXa/XIdvsmObrX3xTYjOuSFrEwIyTFRf9m
3y53xwb65nF1Sp5HbCWt/yg/tT1TpgPQ2BO2UrMKDx51V4orBf4i/4HPOCjY+W9l
KW7dJiTuklxLRg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:16 2025 by rpki-client