Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: NN0OWPw0tyJHds/HgIJF7CRbZMA0GXrC1+ZrNRcS4nA=
Subject key identifier: DB:DF:AE:5C:CF:7F:A0:E2:DA:80:7C:A5:70:1D:C9:49:FC:62:96:70
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 019A4EF46D65B039F696F7CE2218581A508D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 15A4
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: OcW/Z9YnUSTaPAaWfpJy9f8HYuzQsX3WB+sFkFNl2dU=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6d:65:b0:39:f6:96:f7:ce:22:18:58:1a:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=dbdfae5ccf7fa0e2da807ca5701dc949fc629670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:e0:dd:3b:80:d6:e1:cf:69:68:b8:ae:90:
f0:b7:64:bf:ca:fd:c7:d8:a4:60:23:6e:60:67:5d:
74:0a:cc:da:a3:96:8f:c7:27:0c:aa:12:d5:eb:16:
39:f0:c5:d1:c2:e9:54:da:22:c7:e3:54:5b:5e:8a:
0a:b8:b9:01:a6:08:ff:1e:ab:e8:26:0e:77:c6:76:
84:e8:4e:ee:1e:dd:24:83:a7:f4:11:ec:d9:4c:1b:
58:61:8f:93:d0:f0:dc:c0:44:ab:7b:fb:e0:18:ea:
97:0d:40:6b:16:ad:b7:75:10:c8:e4:06:9e:f6:ef:
5a:d5:a7:09:cc:1c:b7:e8:1e:8c:a6:4a:4f:18:f5:
a1:0d:1c:0d:cb:e3:26:99:98:1f:21:29:19:54:48:
2d:32:cd:92:00:72:5e:f2:db:b0:5e:80:a7:72:60:
09:9a:e7:f0:72:b9:88:9f:83:e2:3b:fa:df:91:c6:
9d:68:92:04:7b:61:41:ca:29:69:e6:77:c0:6a:ed:
01:9b:37:22:50:99:63:17:0c:22:a3:b4:47:2b:92:
61:c4:8a:8c:9c:82:ae:83:16:c5:d6:77:e3:ab:f1:
91:7a:0c:ed:07:02:e2:fc:09:a7:cf:a3:ae:6d:2a:
a8:b3:22:64:92:cc:f3:15:8a:44:83:df:84:d6:64:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DF:AE:5C:CF:7F:A0:E2:DA:80:7C:A5:70:1D:C9:49:FC:62:96:70
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:1d:5b:3c:21:d8:d7:ba:84:cd:3d:5c:e3:3a:f6:ee:54:
14:4a:d9:45:12:c8:ff:db:03:ea:a9:0c:df:33:33:47:d9:07:
b8:15:66:1c:78:14:ec:70:28:4e:07:99:46:a1:30:e1:e7:e4:
e5:b5:ae:62:79:74:d8:3c:cf:6a:de:80:20:47:26:d9:5d:15:
0c:af:11:ce:f4:0a:2a:0a:7f:26:99:ba:cc:fa:96:c7:c1:72:
55:2a:2f:fa:cc:1f:c6:d2:3e:a9:3a:2a:26:fe:1f:3f:75:5f:
e9:e0:72:85:eb:e1:c0:dc:8b:37:14:42:3a:8b:10:6e:e1:9f:
04:6b:33:69:88:94:b8:91:67:db:bb:10:80:1f:ed:d9:cf:33:
ab:4e:80:70:b0:3c:80:d2:02:cb:97:03:8c:b7:ab:4b:24:39:
ac:65:86:a7:5d:de:8a:42:21:a3:32:40:13:80:ce:c1:e8:4b:
e8:6b:de:52:ad:5e:5b:79:d6:cf:0f:7f:ec:ed:c4:d1:29:60:
09:e2:e5:e1:9d:44:e2:74:59:bc:02:89:fa:73:33:3f:2e:24:
a3:b7:e4:2a:7c:62:af:86:76:91:92:e6:42:33:1c:00:46:3a:
cd:59:b9:f7:4f:e0:96:21:ee:ab:0a:65:b1:53:07:1b:e1:f2:
c2:2c:49:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9G1lsDn2lvfOIhhYGlCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll
YmVmMTMwHhcNMjUxMTA0MTMwMDMyWhcNMjUxMTA1MTMwMDMyWjAzMTEwLwYDVQQD
EyhkYmRmYWU1Y2NmN2ZhMGUyZGE4MDdjYTU3MDFkYzk0OWZjNjI5NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIbg3TuA1uHPaWi4rpDwt2S/yv3H
2KRgI25gZ110Cszao5aPxycMqhLV6xY58MXRwulU2iLH41RbXooKuLkBpgj/Hqvo
Jg53xnaE6E7uHt0kg6f0EezZTBtYYY+T0PDcwESre/vgGOqXDUBrFq23dRDI5Aae
9u9a1acJzBy36B6MpkpPGPWhDRwNy+MmmZgfISkZVEgtMs2SAHJe8tuwXoCncmAJ
mufwcrmIn4PiO/rfkcadaJIEe2FByilp5nfAau0BmzciUJljFwwio7RHK5JhxIqM
nIKugxbF1nfjq/GRegztBwLi/Amnz6OubSqosyJkkszzFYpEg9+E1mR5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvfrlzPf6Di2oB8pXAdyUn8YpZwMB8GA1UdIwQY
MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut
ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk
LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiIdWzwh
2Ne6hM09XOM69u5UFErZRRLI/9sD6qkM3zMzR9kHuBVmHHgU7HAoTgeZRqEw4efk
5bWuYnl02DzPat6AIEcm2V0VDK8RzvQKKgp/Jpm6zPqWx8FyVSov+swfxtI+qToq
Jv4fP3Vf6eByhevhwNyLNxRCOosQbuGfBGszaYiUuJFn27sQgB/t2c8zq06AcLA8
gNICy5cDjLerSyQ5rGWGp13eikIhozJAE4DOwehL6GveUq1eW3nWzw9/7O3E0Slg
CeLl4Z1E4nRZvAKJ+nMzPy4ko7fkKnxir4Z2kZLmQjMcAEY6zVm590/gliHuqwpl
sVMHG+HywixJNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:12 2025 by rpki-client