Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: /mJ+vSUgwnhJu3nS9I+q2jabbbHV3G/cKqaHuf7u9xA=
Subject key identifier: 86:BC:E9:68:4D:02:61:03:80:4D:9C:9D:EC:55:57:E6:2F:90:28:B0
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 019A4D069D4A94529C1849063119CB0B9CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 163F
Signing time: Tue 04 Nov 2025 04:01:10 +0000
Manifest this update: Tue 04 Nov 2025 04:01:10 +0000
Manifest next update: Wed 05 Nov 2025 04:01:10 +0000
Files and hashes: 1: 9dm3RFT9BYoMAAVpyE60LHFzSlc.roa (hash: uwrhQ0q4VpiHZaTRgjsMBaRGiUAzHgpiv2VyGMcmfoA=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: CuyMtUk1AV/r260UC3Hlu4OfcldK4COKshxdH1m1Htg=)
3: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (hash: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=)
4: wUsbt-HTaTgAWsY_K2ZwhZempLg.roa (hash: OXuJmL2+egILFuJsJVzo1F0QRoATbyDTCvgbpKqhXMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:9d:4a:94:52:9c:18:49:06:31:19:cb:0b:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Nov 4 04:01:10 2025 GMT
Not After : Nov 5 04:01:10 2025 GMT
Subject: CN=86bce9684d026103804d9c9dec5557e62f9028b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:06:42:e4:70:13:ff:2f:45:ab:0a:be:7e:
b5:5f:b8:05:6f:e5:58:c4:0a:6b:39:78:ba:5c:ac:
e2:c7:d7:b9:28:34:ee:ef:74:34:9e:4c:3c:8d:ad:
39:2d:3c:c4:b0:4e:0f:0e:1b:85:bb:88:bd:06:2f:
c5:8d:c9:00:e7:93:ec:db:44:13:c9:5f:8a:a7:f6:
87:71:6b:53:56:5b:29:fa:c1:f3:fa:df:58:8f:ae:
d3:df:ee:8b:41:39:d4:fc:38:09:51:9c:08:ae:a8:
a5:3a:a8:1b:65:1f:0e:92:25:d7:33:a1:13:1f:51:
b4:9d:ac:43:85:a1:09:41:d4:98:15:10:ba:c7:10:
3c:d0:cc:eb:a6:12:50:e4:01:37:ab:50:4e:44:a4:
d2:9c:73:0f:2a:69:ac:c4:e7:eb:65:df:d8:33:fe:
0c:ad:8b:08:dd:e8:8f:81:14:22:c3:48:27:e6:4d:
32:18:c7:f0:e6:d9:62:0d:79:90:c4:c1:16:61:33:
55:45:96:14:0f:6b:e0:bf:d4:d7:8d:0d:60:ef:06:
b5:61:98:fe:48:84:63:28:7b:44:86:b1:e2:41:37:
38:9b:30:d4:df:a9:a2:93:90:52:be:10:50:6c:3b:
1e:8d:de:6a:16:bb:02:23:81:ad:fa:c1:ef:91:57:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:E9:68:4D:02:61:03:80:4D:9C:9D:EC:55:57:E6:2F:90:28:B0
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d0:e1:52:61:1a:3c:8e:8e:c4:11:59:68:b7:d7:8a:88:26:
61:f0:99:ff:4e:e0:02:9d:75:2b:c4:b9:30:31:87:24:5c:9d:
66:05:cb:f8:bb:b5:e2:e2:b8:83:3f:eb:f9:fd:0b:60:2d:6d:
6f:aa:ee:17:18:32:e8:e4:75:8b:55:81:93:1e:b6:cc:90:4a:
a2:06:df:f0:c4:31:f8:b5:8a:6f:61:4e:e7:59:cf:b4:42:68:
61:76:53:fe:bd:18:0e:11:63:a0:13:81:f9:a2:77:8b:49:3a:
b5:10:bb:6b:d4:33:3b:66:31:3c:1b:b1:46:c8:ab:3d:17:a4:
f8:ba:34:08:8a:c9:a1:c8:28:ba:86:03:b8:c2:c4:80:92:bc:
ea:cb:9f:74:64:6d:7c:5e:56:27:09:d5:67:eb:0a:13:28:e4:
80:09:fd:f4:09:08:c8:96:a1:37:96:5f:c2:d7:ee:45:f7:d8:
5c:fd:a0:0b:e9:37:93:ef:bb:76:31:b6:ca:40:b0:6f:26:57:
b5:d8:20:1e:6f:a7:bc:7f:26:54:1e:98:d2:96:39:77:3b:1f:
a9:c8:d2:a4:20:a4:2e:1f:07:92:b4:d7:56:0a:e1:27:3e:d8:
17:c2:03:55:05:c7:43:d7:aa:e1:fe:9b:0b:b8:f2:7b:72:15:
21:5d:43:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBp1KlFKcGEkGMRnLC5zAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3
MDg0ZjkwHhcNMjUxMTA0MDQwMTEwWhcNMjUxMTA1MDQwMTEwWjAzMTEwLwYDVQQD
Eyg4NmJjZTk2ODRkMDI2MTAzODA0ZDljOWRlYzU1NTdlNjJmOTAyOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdkGQuRwE/8vRasKvn61X7gFb+VY
xAprOXi6XKzix9e5KDTu73Q0nkw8ja05LTzEsE4PDhuFu4i9Bi/FjckA55Ps20QT
yV+Kp/aHcWtTVlsp+sHz+t9Yj67T3+6LQTnU/DgJUZwIrqilOqgbZR8OkiXXM6ET
H1G0naxDhaEJQdSYFRC6xxA80MzrphJQ5AE3q1BORKTSnHMPKmmsxOfrZd/YM/4M
rYsI3eiPgRQiw0gn5k0yGMfw5tliDXmQxMEWYTNVRZYUD2vgv9TXjQ1g7wa1YZj+
SIRjKHtEhrHiQTc4mzDU36mik5BSvhBQbDsejd5qFrsCI4Gt+sHvkVeNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa86WhNAmEDgE2cnexVV+YvkCiwMB8GA1UdIwQY
MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt
ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy
LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9DhUmEa
PI6OxBFZaLfXiogmYfCZ/07gAp11K8S5MDGHJFydZgXL+Lu14uK4gz/r+f0LYC1t
b6ruFxgy6OR1i1WBkx62zJBKogbf8MQx+LWKb2FO51nPtEJoYXZT/r0YDhFjoBOB
+aJ3i0k6tRC7a9QzO2YxPBuxRsirPRek+Lo0CIrJocgouoYDuMLEgJK86sufdGRt
fF5WJwnVZ+sKEyjkgAn99AkIyJahN5ZfwtfuRffYXP2gC+k3k++7djG2ykCwbyZX
tdggHm+nvH8mVB6Y0pY5dzsfqcjSpCCkLh8HkrTXVgrhJz7YF8IDVQXHQ9eq4f6b
C7jye3IVIV1Deg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:17 2025 by rpki-client