Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: 41JKS05KaZF25v1yqd+oat0t+v2fTrh804gcjyh58PI=
Subject key identifier: F2:CD:DC:23:40:00:90:06:33:6C:DF:27:E7:13:2A:5C:48:6F:C8:F0
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019A4E18BF487F8E663C51ADF94711B663C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0A8F
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: Ny+HAlM4Xib9ZeS9S8qhzVKOtwZ2yKnH08jl3Ih0GhI=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bf:48:7f:8e:66:3c:51:ad:f9:47:11:b6:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=f2cddc2340009006336cdf27e7132a5c486fc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:2d:a6:be:5e:07:68:e3:f3:0c:54:63:73:
f2:40:42:0e:3b:ac:4d:8f:a0:15:18:b7:42:7f:13:
6e:64:7e:2e:2e:a0:3f:ef:ef:84:29:c0:b8:f1:fb:
6f:bc:a1:87:96:83:36:e9:67:6d:cb:e3:73:7b:e8:
ee:84:0e:4e:c6:17:57:8d:06:ef:be:21:9f:c7:89:
1a:9a:45:3d:5b:25:d4:a8:b6:1f:5b:6f:be:7f:c7:
bf:fb:45:a7:65:0d:25:9f:c1:10:c4:4a:60:b2:02:
76:a7:26:ec:e9:85:a8:2a:93:ba:18:7c:5f:30:80:
39:7c:0c:7b:3c:bb:8c:4c:c5:4c:0c:91:65:b7:4f:
eb:a5:aa:c5:02:35:f7:03:4b:ce:e3:f6:ca:ce:52:
1c:5f:9a:42:a3:e0:41:f0:12:83:6d:d1:ce:ea:03:
82:62:8e:42:99:77:aa:e2:33:0d:b7:c0:ec:13:0a:
14:5d:de:6a:81:0a:3b:06:86:b3:b6:7e:29:54:1a:
36:af:d5:b1:60:19:41:c2:63:82:c8:d5:61:7a:ed:
fa:2d:e4:33:76:64:ae:dd:f5:7a:6e:c7:d7:9b:68:
2e:70:20:6d:d9:09:f4:c3:96:a8:04:e9:2e:c0:b1:
fa:9b:d8:b9:ac:e3:ee:0d:26:6e:e5:cb:26:d2:33:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:DC:23:40:00:90:06:33:6C:DF:27:E7:13:2A:5C:48:6F:C8:F0
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:93:2e:a4:5b:fa:d6:5e:38:45:bf:ea:08:cf:05:88:c2:b0:
77:c7:d4:1d:ae:49:1e:76:c7:ff:df:6b:bf:57:3e:7b:bb:e0:
a5:b1:aa:47:81:94:f4:3c:e8:79:85:47:f9:85:45:bd:ac:91:
04:a1:25:7f:af:93:9e:e0:19:b9:b3:70:70:de:0e:20:30:e8:
6c:8d:e0:37:d6:11:c6:b1:48:66:40:14:18:36:1d:5b:e0:ae:
58:21:b4:37:7d:c5:e3:9b:75:69:2a:57:bd:42:f7:6e:59:45:
52:e0:ba:cb:9a:fa:73:32:9e:21:6b:91:0f:e8:dd:df:0d:8c:
c9:8a:aa:f7:94:1a:97:a5:0d:f1:b5:a3:db:a0:28:37:c6:4f:
db:2e:e2:f1:99:38:5a:8d:07:e5:22:ed:f7:11:7c:91:27:64:
f9:2c:63:04:c1:42:c6:78:0e:57:d0:63:ee:04:f1:93:72:b2:
1c:ea:2b:91:1c:15:b1:9b:d9:5e:ec:d0:00:01:b2:57:b7:db:
ec:f3:f6:78:0c:f2:89:b1:c2:39:fa:e5:dc:3d:e8:c0:5e:87:
3e:ff:06:42:8a:45:52:90:48:58:4a:d2:93:07:45:f7:ac:d0:
89:97:09:cb:7f:b2:6a:10:4b:79:09:20:73:54:86:05:05:c2:
7a:3b:9f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGL9If45mPFGt+UcRtmPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjUxMTA0MDkwMDM1WhcNMjUxMTA1MDkwMDM1WjAzMTEwLwYDVQQD
EyhmMmNkZGMyMzQwMDA5MDA2MzM2Y2RmMjdlNzEzMmE1YzQ4NmZjOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkItpr5eB2jj8wxUY3PyQEIOO6xN
j6AVGLdCfxNuZH4uLqA/7++EKcC48ftvvKGHloM26Wdty+Nze+juhA5OxhdXjQbv
viGfx4kamkU9WyXUqLYfW2++f8e/+0WnZQ0ln8EQxEpgsgJ2pybs6YWoKpO6GHxf
MIA5fAx7PLuMTMVMDJFlt0/rparFAjX3A0vO4/bKzlIcX5pCo+BB8BKDbdHO6gOC
Yo5CmXeq4jMNt8DsEwoUXd5qgQo7Boaztn4pVBo2r9WxYBlBwmOCyNVheu36LeQz
dmSu3fV6bsfXm2gucCBt2Qn0w5aoBOkuwLH6m9i5rOPuDSZu5csm0jPW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLN3CNAAJAGM2zfJ+cTKlxIb8jwMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZMupFv6
1l44Rb/qCM8FiMKwd8fUHa5JHnbH/99rv1c+e7vgpbGqR4GU9DzoeYVH+YVFvayR
BKElf6+TnuAZubNwcN4OIDDobI3gN9YRxrFIZkAUGDYdW+CuWCG0N33F45t1aSpX
vUL3bllFUuC6y5r6czKeIWuRD+jd3w2MyYqq95Qal6UN8bWj26AoN8ZP2y7i8Zk4
Wo0H5SLt9xF8kSdk+SxjBMFCxngOV9Bj7gTxk3KyHOorkRwVsZvZXuzQAAGyV7fb
7PP2eAzyibHCOfrl3D3owF6HPv8GQopFUpBIWErSkwdF96zQiZcJy3+yahBLeQkg
c1SGBQXCejufcg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:06 2025 by rpki-client