Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: qaNG8EfpCnoFzpuH4nu3rpvevg4xe0HGXVsvy3Iwvdk=
Subject key identifier: A0:90:81:A7:6C:42:C2:F7:0F:05:DB:1F:41:87:7A:A5:52:25:17:0D
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 019A4F6227545F4384823AD74151930627F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: HbKIyb9V6jkqCAwf4WpGiauhyUDs4jaHtzmhs382/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:27:54:5f:43:84:82:3a:d7:41:51:93:06:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=a09081a76c42c2f70f05db1f41877aa55225170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:29:05:0a:b7:a2:5e:5f:1e:45:14:69:92:
b7:fc:80:17:19:c9:50:18:c2:de:d2:22:15:8f:21:
dc:d4:b7:a8:9c:41:c9:87:52:1b:94:b4:a1:e4:92:
cd:0d:3b:93:8d:a5:d8:be:4e:55:1c:01:19:62:d7:
8a:b3:84:56:02:5b:58:8e:09:bc:8e:39:79:e8:3d:
56:3d:4d:58:3d:00:37:26:e1:9e:f4:bc:c1:17:10:
1d:6d:2d:ca:5d:53:2b:5b:37:11:69:fb:36:a7:8e:
71:24:36:cf:3d:9b:bd:dd:89:8e:8a:02:3c:8b:bb:
f5:86:04:3a:37:c8:df:4f:6d:63:11:04:28:d5:a4:
b0:e9:c9:4e:5e:6b:cd:9a:94:f7:b3:ae:25:56:7c:
b1:eb:7a:89:51:48:8f:9a:ec:0e:89:2a:84:60:c2:
2e:92:6b:ea:23:3c:a2:75:ce:cb:4c:3a:3e:cc:17:
4e:5b:be:de:96:d6:2d:da:15:ab:a3:a4:57:dd:70:
f1:6e:ea:2a:5e:0f:f2:4b:5a:cd:ff:b9:23:31:1e:
51:34:11:e7:1e:62:30:bd:a1:b2:78:ee:35:c5:2f:
14:65:f8:b1:8f:53:10:72:c8:81:24:0f:bf:ed:a2:
e0:f9:95:9d:23:00:e5:c6:5c:8f:6d:ed:2b:bc:be:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:81:A7:6C:42:C2:F7:0F:05:DB:1F:41:87:7A:A5:52:25:17:0D
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:40:f0:be:fc:59:6b:e5:63:84:bd:2d:ea:0b:5c:3a:8b:
04:cb:e5:39:bb:ea:c3:05:35:a4:ce:31:2f:13:d5:dc:cd:51:
4a:3f:8f:f5:c6:89:31:99:98:aa:58:57:6c:20:84:ee:a9:69:
40:ec:d9:9d:99:a8:8f:0e:a0:e5:b8:f0:6b:28:95:7c:67:a7:
c6:47:08:81:8c:32:7a:bf:17:b2:0e:07:ca:7a:19:b9:70:d0:
6c:fe:9b:68:bc:3a:b4:34:94:73:b2:3d:b1:e9:fe:ef:cf:1a:
83:11:ab:02:84:7b:92:23:ad:60:1a:cf:f8:41:12:45:3a:01:
f8:e8:92:c0:18:83:1e:04:fc:b8:6c:d0:f1:5a:dc:f3:be:7b:
8d:73:7a:d7:2a:16:4f:12:ac:d4:3e:b5:1c:36:e2:8c:02:bf:
ee:9e:ee:4d:4c:02:82:68:10:fc:91:b2:01:5d:eb:04:cc:d4:
f8:f3:ab:be:21:a6:44:0e:3b:14:fd:88:9a:7b:2a:ea:59:54:
62:b5:7b:37:9f:38:9c:92:50:c1:1e:89:b7:69:82:19:01:6f:
d5:5b:66:d9:e7:e8:c5:73:cb:ab:25:67:c9:60:00:7b:92:c8:
9f:6b:c8:af:fb:7a:eb:1b:e1:09:83:a5:3c:2a:90:3a:70:b9:
19:bd:64:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYidUX0OEgjrXQVGTBif1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy
NGIwYjUwHhcNMjUxMTA0MTUwMDIzWhcNMjUxMTA1MTUwMDIzWjAzMTEwLwYDVQQD
EyhhMDkwODFhNzZjNDJjMmY3MGYwNWRiMWY0MTg3N2FhNTUyMjUxNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGIpBQq3ol5fHkUUaZK3/IAXGclQ
GMLe0iIVjyHc1LeonEHJh1IblLSh5JLNDTuTjaXYvk5VHAEZYteKs4RWAltYjgm8
jjl56D1WPU1YPQA3JuGe9LzBFxAdbS3KXVMrWzcRafs2p45xJDbPPZu93YmOigI8
i7v1hgQ6N8jfT21jEQQo1aSw6clOXmvNmpT3s64lVnyx63qJUUiPmuwOiSqEYMIu
kmvqIzyidc7LTDo+zBdOW77eltYt2hWro6RX3XDxbuoqXg/yS1rN/7kjMR5RNBHn
HmIwvaGyeO41xS8UZfixj1MQcsiBJA+/7aLg+ZWdIwDlxlyPbe0rvL6QowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCQgadsQsL3DwXbH0GHeqVSJRcNMB8GA1UdIwQY
MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt
ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1
LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmxA8L78
WWvlY4S9LeoLXDqLBMvlObvqwwU1pM4xLxPV3M1RSj+P9caJMZmYqlhXbCCE7qlp
QOzZnZmojw6g5bjwayiVfGenxkcIgYwyer8Xsg4HynoZuXDQbP6baLw6tDSUc7I9
sen+788agxGrAoR7kiOtYBrP+EESRToB+OiSwBiDHgT8uGzQ8Vrc8757jXN61yoW
TxKs1D61HDbijAK/7p7uTUwCgmgQ/JGyAV3rBMzU+POrviGmRA47FP2Imnsq6llU
YrV7N584nJJQwR6Jt2mCGQFv1Vtm2efoxXPLqyVnyWAAe5LIn2vIr/t66xvhCYOl
PCqQOnC5Gb1kyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:08:02 2025 by rpki-client