Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 8fPwMRqKsEMTUZiOLnhLzZC2Zux+r1e/5DjkD7qILZw=
Subject key identifier: FB:1A:63:39:2D:44:44:E6:47:C9:85:63:41:77:15:EB:2C:45:C8:ED
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019A4EF5222050B06A06B329F7D313120BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0DB8
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: jIIq+xZseM+Ym55IWQ9iva+dvGet3nHaIqy8Z+AUYqQ=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:22:20:50:b0:6a:06:b3:29:f7:d3:13:12:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=fb1a63392d4444e647c98563417715eb2c45c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:d5:5c:2a:4d:9b:31:ee:5c:09:6b:c9:ea:
5d:29:48:c5:61:48:30:5f:ec:93:99:12:aa:b0:d4:
4f:4b:51:c8:20:05:19:39:86:0f:bb:24:fb:2f:d3:
e5:53:91:d9:36:7b:46:61:0b:7c:37:ae:c1:a8:28:
71:de:9e:39:9f:96:64:34:89:b6:83:cf:08:7b:4b:
87:c6:bc:66:76:00:29:ae:ed:dd:db:0d:cb:34:65:
39:65:57:b7:50:8a:bf:61:d7:e9:ab:20:d0:6e:f7:
e4:b9:0a:2b:cc:da:22:b4:c2:4a:d2:4f:e7:72:06:
76:f9:e5:f5:be:e8:32:09:56:f2:38:99:77:84:95:
80:96:94:b1:aa:0f:bc:99:4e:10:c8:1b:48:4e:0a:
95:d9:12:38:ba:a0:6a:b8:fe:b8:d0:fa:35:39:09:
5f:e7:a1:02:b4:f3:96:4b:2e:70:03:7d:ab:d5:1c:
13:69:bb:b6:0c:d8:cf:71:37:10:29:e7:ca:29:1d:
90:18:1e:07:9e:af:2f:f2:c6:c4:e7:79:35:8a:fb:
cc:58:ad:a7:95:5e:cb:f6:b7:02:f1:75:de:ff:62:
24:be:f6:be:38:b9:0c:b3:7c:ac:72:b6:e4:10:1b:
e2:dd:ac:4a:b7:f4:43:5d:11:a5:44:9f:51:b0:f3:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:63:39:2D:44:44:E6:47:C9:85:63:41:77:15:EB:2C:45:C8:ED
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:e4:58:b5:3f:f5:1c:62:c1:fb:81:6a:2e:29:f3:92:ea:
76:a4:a1:a9:71:c8:26:df:a0:33:0b:4b:a6:ba:38:65:d2:b9:
9d:9b:f5:ee:bc:e1:78:91:a4:f9:94:14:ce:23:68:1f:61:03:
db:bc:33:c0:a0:bd:cf:42:4c:05:04:da:ae:1e:79:81:6b:fb:
93:31:41:f9:a1:b9:e2:dd:12:8e:41:9c:f4:ac:ab:f5:bd:56:
1d:58:09:6f:72:11:33:76:3a:8c:75:09:08:65:3a:97:b9:62:
ad:13:d6:72:86:9d:8e:b0:bc:62:ef:a2:ed:ee:cc:74:73:9c:
4e:c0:03:88:f0:3f:59:60:74:c6:3a:43:87:9b:be:4e:17:ef:
f7:3e:72:98:c9:d1:25:8f:e5:ec:bf:ea:58:72:54:5d:49:04:
18:df:a2:bf:b5:f8:ab:ca:04:b2:5c:d4:4a:9a:2f:99:03:00:
c8:31:50:78:59:10:ab:3a:c4:62:d7:27:1f:15:a3:71:87:2b:
86:6a:87:1d:e0:56:1f:27:ee:d4:38:bc:c3:13:b0:6f:e3:7b:
c3:95:21:7c:f3:88:c0:fb:f9:d7:27:bf:f9:9c:d9:9a:5c:0e:
0a:d1:29:69:2c:0d:48:3e:d9:47:dc:7f:34:bb:2f:1b:dd:3f:
8c:9e:d7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9SIgULBqBrMp99MTEgujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjUxMTA0MTMwMTE5WhcNMjUxMTA1MTMwMTE5WjAzMTEwLwYDVQQD
EyhmYjFhNjMzOTJkNDQ0NGU2NDdjOTg1NjM0MTc3MTVlYjJjNDVjOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRHVXCpNmzHuXAlryepdKUjFYUgw
X+yTmRKqsNRPS1HIIAUZOYYPuyT7L9PlU5HZNntGYQt8N67BqChx3p45n5ZkNIm2
g88Ie0uHxrxmdgApru3d2w3LNGU5ZVe3UIq/YdfpqyDQbvfkuQorzNoitMJK0k/n
cgZ2+eX1vugyCVbyOJl3hJWAlpSxqg+8mU4QyBtITgqV2RI4uqBquP640Po1OQlf
56ECtPOWSy5wA32r1RwTabu2DNjPcTcQKefKKR2QGB4Hnq8v8sbE53k1ivvMWK2n
lV7L9rcC8XXe/2Ikvva+OLkMs3yscrbkEBvi3axKt/RDXRGlRJ9RsPPHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsaYzktRETmR8mFY0F3FessRcjtMB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvnkWLU/
9RxiwfuBai4p85LqdqShqXHIJt+gMwtLpro4ZdK5nZv17rzheJGk+ZQUziNoH2ED
27wzwKC9z0JMBQTarh55gWv7kzFB+aG54t0SjkGc9Kyr9b1WHVgJb3IRM3Y6jHUJ
CGU6l7lirRPWcoadjrC8Yu+i7e7MdHOcTsADiPA/WWB0xjpDh5u+Thfv9z5ymMnR
JY/l7L/qWHJUXUkEGN+iv7X4q8oEslzUSpovmQMAyDFQeFkQqzrEYtcnHxWjcYcr
hmqHHeBWHyfu1Di8wxOwb+N7w5UhfPOIwPv51ye/+ZzZmlwOCtEpaSwNSD7ZR9x/
NLsvG90/jJ7XVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:15 2025 by rpki-client