Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: /awaUNrSyi4EPYJ9VFQv5Qn7ktsEso4wpc8cxc68mL0=
Subject key identifier: 2E:00:30:40:41:D6:09:DC:B3:91:C6:DC:94:50:EE:AD:AF:1C:DE:EB
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019A4DE1CE06D2DE6E8A32DAD0CBBE47B571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 15C2
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: a2K06f3UULsgW6e1FLEHXtcgY4roaPbwC3EZahytYRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ce:06:d2:de:6e:8a:32:da:d0:cb:be:47:b5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=2e00304041d609dcb391c6dc9450eeadaf1cdeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:0e:84:e5:1c:df:e3:ab:f1:96:7d:e5:b1:
be:03:9a:81:6e:db:23:d0:fc:90:f8:cf:5e:ca:98:
d8:5b:d8:a7:95:43:05:28:ec:69:55:5e:e2:96:83:
60:45:46:9b:a9:c8:f5:f7:0d:b4:a0:07:15:f8:09:
96:89:79:21:35:cb:3f:ad:c2:a2:17:de:1d:f1:d3:
51:5a:dd:59:34:95:0d:97:04:ac:06:e5:63:14:cc:
ea:6b:bb:d4:ad:c2:2a:c2:a8:b3:7e:0b:c9:77:ca:
07:3d:4f:24:04:b8:6d:89:dc:e3:e9:b5:2b:66:aa:
3a:2c:5e:4a:b6:a9:0b:7b:af:81:73:2b:52:ed:d4:
8b:f1:d5:b8:26:2f:d6:75:cb:0e:c2:73:01:e8:6c:
9e:2c:76:98:ad:4f:2e:c2:4d:5b:35:c1:85:70:3b:
e5:38:ac:12:ee:73:97:b4:b8:ff:b9:e2:c7:f2:11:
2d:e6:e7:d0:3f:fe:31:ce:d9:0f:9b:f9:89:bc:04:
b4:7c:ef:ea:03:29:72:f5:32:86:5f:89:49:10:19:
e8:5f:20:b7:9e:1b:23:bb:07:06:30:41:39:bb:51:
30:e9:92:b1:6e:6e:73:4b:2a:7f:86:cf:09:83:b4:
3b:77:d8:bd:3c:f2:c5:ae:d9:d7:a9:06:08:33:54:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:30:40:41:D6:09:DC:B3:91:C6:DC:94:50:EE:AD:AF:1C:DE:EB
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:75:ac:7b:d4:80:df:9a:a1:40:52:ec:9d:b9:9d:ac:ab:38:
d1:20:0b:a3:2c:7e:29:ee:5b:dd:29:5a:5b:17:e5:0b:6e:e9:
6c:b6:d1:aa:96:14:62:ae:05:c9:83:5a:46:5f:87:e6:24:19:
7b:4a:67:36:83:c4:eb:63:f1:50:f6:d0:eb:f0:14:1b:31:36:
ad:85:32:9a:2b:e6:d5:1b:b7:df:c6:8d:1e:63:50:c6:25:23:
0c:77:90:f8:71:be:9e:fd:3d:74:3e:1e:d9:7f:7c:d2:5f:b1:
6d:49:22:ee:18:79:0b:ed:74:ac:d1:26:93:19:ae:6f:9d:74:
28:39:17:d6:03:b3:a7:90:49:b7:e3:30:64:2f:68:20:5d:27:
64:7a:b4:dd:76:38:30:f5:91:3f:1e:53:0c:17:27:c0:7a:36:
68:ae:55:73:e4:cd:16:3f:aa:09:59:3e:57:af:15:b0:4f:f0:
fb:73:c0:d5:dd:f2:50:12:40:42:e4:26:5f:48:38:aa:e0:5e:
6b:c5:4b:81:3e:75:14:d1:1f:04:3d:e9:a7:72:e7:71:55:d1:
41:2d:de:f5:e0:46:03:ab:93:b0:73:0d:b4:6d:ab:44:1b:d6:
dd:e5:95:29:81:0c:bc:64:c7:96:56:e6:92:88:b1:10:0f:cc:
b6:79:96:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4c4G0t5uijLa0Mu+R7VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjUxMTA0MDgwMDM1WhcNMjUxMTA1MDgwMDM1WjAzMTEwLwYDVQQD
EygyZTAwMzA0MDQxZDYwOWRjYjM5MWM2ZGM5NDUwZWVhZGFmMWNkZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ8OhOUc3+Or8ZZ95bG+A5qBbtsj
0PyQ+M9eypjYW9inlUMFKOxpVV7iloNgRUabqcj19w20oAcV+AmWiXkhNcs/rcKi
F94d8dNRWt1ZNJUNlwSsBuVjFMzqa7vUrcIqwqizfgvJd8oHPU8kBLhtidzj6bUr
Zqo6LF5KtqkLe6+BcytS7dSL8dW4Ji/WdcsOwnMB6GyeLHaYrU8uwk1bNcGFcDvl
OKwS7nOXtLj/ueLH8hEt5ufQP/4xztkPm/mJvAS0fO/qAyly9TKGX4lJEBnoXyC3
nhsjuwcGMEE5u1Ew6ZKxbm5zSyp/hs8Jg7Q7d9i9PPLFrtnXqQYIM1RP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4AMEBB1gncs5HG3JRQ7q2vHN7rMB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3Wse9SA
35qhQFLsnbmdrKs40SALoyx+Ke5b3SlaWxflC27pbLbRqpYUYq4FyYNaRl+H5iQZ
e0pnNoPE62PxUPbQ6/AUGzE2rYUymivm1Ru338aNHmNQxiUjDHeQ+HG+nv09dD4e
2X980l+xbUki7hh5C+10rNEmkxmub510KDkX1gOzp5BJt+MwZC9oIF0nZHq03XY4
MPWRPx5TDBcnwHo2aK5Vc+TNFj+qCVk+V68VsE/w+3PA1d3yUBJAQuQmX0g4quBe
a8VLgT51FNEfBD3pp3LncVXRQS3e9eBGA6uTsHMNtG2rRBvW3eWVKYEMvGTHllbm
koixEA/MtnmWgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:14 2025 by rpki-client