Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: avFx5l7tW6UKVDOFZ8TwWh3xe/HDsaZHHnXEi+CgUbc=
Subject key identifier: E5:B1:35:2D:E9:54:21:2E:31:A1:72:8B:2B:6E:08:F7:4A:25:8F:E2
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019A5D5564D8F904C76267E21F89A9FBA2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0CED
Signing time: Fri 07 Nov 2025 08:01:08 +0000
Manifest this update: Fri 07 Nov 2025 08:01:08 +0000
Manifest next update: Sat 08 Nov 2025 08:01:08 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: 3AQTOFq4Og/NPZhGK5F4fix5mqfFurrBnrGfltSjWdw=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:64:d8:f9:04:c7:62:67:e2:1f:89:a9:fb:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Nov 7 08:01:08 2025 GMT
Not After : Nov 8 08:01:08 2025 GMT
Subject: CN=e5b1352de954212e31a1728b2b6e08f74a258fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:f7:a6:76:4a:a1:c5:50:b8:91:81:ff:6c:
7a:46:1e:5d:8d:fc:cc:1e:4d:a8:d5:ff:fc:4b:99:
e3:a1:56:5e:57:92:8c:9e:54:5c:2c:2f:38:90:9e:
91:8a:41:22:0d:93:3f:e8:9a:14:a3:a4:a7:79:84:
ea:1c:fc:63:5d:ea:1f:8c:13:f0:e4:5a:ee:99:3e:
2f:73:ca:b5:27:24:28:0c:e8:4c:14:29:8b:7b:8b:
b1:c4:b7:83:82:b5:64:5c:56:45:18:ba:25:81:63:
ae:bd:ac:f1:d2:4b:23:09:58:8f:30:43:b6:89:e4:
88:67:ce:a3:59:45:6c:d6:5d:e3:81:11:6b:e1:c4:
8b:5b:43:cc:00:65:b8:52:2b:f8:9b:73:21:ee:03:
df:ef:05:b0:50:a5:d9:39:3d:38:5f:1c:aa:f4:aa:
6f:78:7a:5b:22:f1:1d:0b:c3:6a:a6:60:90:2c:1f:
fe:77:bd:32:39:f5:33:29:51:47:fb:fa:1a:73:20:
e3:0d:49:44:47:0d:70:3f:86:1a:9d:49:c2:46:55:
ff:46:95:4a:3e:11:8a:40:b3:8a:ae:86:68:94:c9:
60:85:f7:74:5b:2d:1d:81:54:57:7c:f7:5a:b7:e0:
46:96:31:c8:c5:40:e8:64:8c:42:d4:0c:99:bf:4d:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:35:2D:E9:54:21:2E:31:A1:72:8B:2B:6E:08:F7:4A:25:8F:E2
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:e2:80:58:fc:77:07:72:9f:61:45:27:cf:a6:41:eb:b2:
de:49:be:99:2b:d8:c9:75:43:8c:50:f6:38:f1:6b:48:9e:ef:
06:55:ab:be:76:8f:aa:c3:eb:e4:fc:72:80:c3:a9:7c:85:e3:
6b:41:f9:f1:93:71:bc:ba:a9:b2:9b:ff:db:2f:84:36:22:32:
c2:6a:81:60:7f:94:ce:c2:4f:c8:72:10:7b:12:ab:3f:3b:37:
9a:2f:88:ae:53:b8:bc:81:28:a7:51:1d:7c:14:b8:c3:5d:a6:
be:d7:58:05:af:86:b7:f3:b0:e5:34:c6:78:d4:3a:ba:42:02:
42:19:ec:55:da:19:9f:aa:ce:4b:70:90:8f:12:c0:84:a1:23:
f2:8e:cc:e6:d0:71:fe:eb:d9:4a:3a:47:a1:61:76:0f:4a:12:
f3:da:4d:ad:c0:39:a4:6a:b1:6a:ed:a1:49:ea:3a:8a:c9:ee:
84:72:99:ae:35:0a:f4:3a:6b:05:85:07:c8:1c:e5:e8:10:80:
9c:ae:d4:34:bb:53:77:e9:44:dd:1a:73:6c:ac:ac:81:55:05:
8d:95:0d:8e:34:0c:b4:77:cb:1b:9f:e5:0b:2f:d0:a2:ad:dd:
2f:6c:a9:37:e8:02:05:d8:7d:84:c3:a9:e0:a8:ef:55:f3:c8:
cd:05:ab:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdVWTY+QTHYmfiH4mp+6LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjUxMTA3MDgwMTA4WhcNMjUxMTA4MDgwMTA4WjAzMTEwLwYDVQQD
EyhlNWIxMzUyZGU5NTQyMTJlMzFhMTcyOGIyYjZlMDhmNzRhMjU4ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtP3pnZKocVQuJGB/2x6Rh5djfzM
Hk2o1f/8S5njoVZeV5KMnlRcLC84kJ6RikEiDZM/6JoUo6SneYTqHPxjXeofjBPw
5FrumT4vc8q1JyQoDOhMFCmLe4uxxLeDgrVkXFZFGLolgWOuvazx0ksjCViPMEO2
ieSIZ86jWUVs1l3jgRFr4cSLW0PMAGW4Uiv4m3Mh7gPf7wWwUKXZOT04Xxyq9Kpv
eHpbIvEdC8NqpmCQLB/+d70yOfUzKVFH+/oacyDjDUlERw1wP4YanUnCRlX/RpVK
PhGKQLOKroZolMlghfd0Wy0dgVRXfPdat+BGljHIxUDoZIxC1AyZv0037wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWxNS3pVCEuMaFyiytuCPdKJY/iMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ7igFj8
dwdyn2FFJ8+mQeuy3km+mSvYyXVDjFD2OPFrSJ7vBlWrvnaPqsPr5PxygMOpfIXj
a0H58ZNxvLqpspv/2y+ENiIywmqBYH+UzsJPyHIQexKrPzs3mi+IrlO4vIEop1Ed
fBS4w12mvtdYBa+Gt/Ow5TTGeNQ6ukICQhnsVdoZn6rOS3CQjxLAhKEj8o7M5tBx
/uvZSjpHoWF2D0oS89pNrcA5pGqxau2hSeo6isnuhHKZrjUK9DprBYUHyBzl6BCA
nK7UNLtTd+lE3RpzbKysgVUFjZUNjjQMtHfLG5/lCy/Qoq3dL2ypN+gCBdh9hMOp
4KjvVfPIzQWr/g==
-----END CERTIFICATE-----
Generated at Fri Nov 7 13:00:39 2025 by rpki-client