Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: mDOVy6JbHC4f99dIljx6mif01XK7sGzPcsPE5GIrGLM=
Subject key identifier: E9:B3:64:85:05:75:D7:70:5B:3D:EE:09:09:10:79:25:72:54:79:3E
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 019A4E4FA10C7D5899D7D0E50CE3DFD66A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 10:00:32 +0000
Manifest this update: Tue 04 Nov 2025 10:00:32 +0000
Manifest next update: Wed 05 Nov 2025 10:00:32 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: YBvsoX1Uyqq7DleNbppdoMzvZB7Et/6mXqMm7m4wCHw=)
2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a1:0c:7d:58:99:d7:d0:e5:0c:e3:df:d6:6a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Nov 4 10:00:32 2025 GMT
Not After : Nov 5 10:00:32 2025 GMT
Subject: CN=e9b364850575d7705b3dee09091079257254793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:c0:79:ab:a0:3e:1d:15:a2:3e:2c:43:c4:
bd:20:6a:b0:de:dc:45:62:6e:0f:8a:32:bd:36:6f:
3c:ad:a1:b7:57:a9:3d:81:2c:6c:50:57:f1:82:fc:
fc:cb:f2:bb:d5:3b:ec:cc:f2:9c:4b:8c:c4:eb:c8:
79:61:04:41:61:23:a6:d5:bd:1d:02:0f:28:16:ad:
dd:b2:bb:b1:2e:ff:7d:51:49:d8:21:71:3c:2e:59:
9e:ed:32:5d:20:4e:79:ff:75:81:0b:f4:84:3c:51:
10:98:f9:58:38:64:1d:fa:f8:c3:77:cd:b3:57:8b:
11:d5:11:b2:42:d8:76:16:8f:ba:0c:32:75:d2:77:
74:0b:5f:0b:11:23:43:2d:8f:96:2a:f2:e7:ab:20:
d9:3c:3f:dc:a7:73:5c:8b:ce:1c:7a:ea:d1:e1:fa:
e9:5e:cc:15:2f:1f:7c:9b:33:73:8a:4c:47:53:1d:
20:9b:e2:01:35:f0:f4:92:57:90:8d:28:7f:03:c7:
5b:2d:e9:0b:8a:24:db:f6:c7:6c:9a:0c:c3:fb:40:
cb:1c:c4:92:c2:42:d8:6b:85:1a:36:43:50:aa:e5:
e1:13:41:d9:50:cd:e5:4b:b5:08:cf:04:78:97:64:
97:98:c4:e6:98:e5:da:93:6f:cc:b8:79:61:bb:2e:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:64:85:05:75:D7:70:5B:3D:EE:09:09:10:79:25:72:54:79:3E
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ae:df:8e:0f:64:64:b4:9a:88:34:db:ef:24:68:5d:b0:29:
bf:fb:68:22:df:65:46:60:33:79:b8:4f:c5:6b:59:e4:18:27:
1c:99:ae:d4:71:b8:78:b3:7a:89:cd:4d:48:8d:ee:e6:a3:70:
3a:df:aa:50:de:15:47:6d:6a:46:52:39:75:80:6b:93:16:a8:
e0:2b:30:0b:0a:cb:40:f5:12:3f:14:2c:29:3d:9d:b9:7e:f5:
82:f1:6a:3e:1f:10:48:e1:c9:5f:32:d4:06:97:d5:10:8e:01:
6a:68:cf:fb:7e:63:20:74:86:fa:bb:37:c6:c8:24:7a:24:0c:
96:04:bc:1b:22:15:7e:b2:fc:10:56:3e:6d:85:e1:63:15:75:
43:fc:c3:eb:7d:84:b6:3a:3e:37:e4:5b:f2:48:f1:10:04:52:
f5:7f:6a:86:b3:f7:82:b1:db:50:98:80:9d:97:c1:19:a6:b1:
ce:dd:6a:74:58:46:2c:73:ea:4d:1a:43:50:95:25:76:ed:80:
83:0c:36:12:56:11:44:f6:57:bb:45:b1:fb:f2:ca:60:8f:12:
76:78:9f:aa:22:c1:b9:00:65:97:04:83:26:49:df:04:3c:23:
55:10:4a:78:93:4d:e8:79:aa:77:c0:b7:24:c5:e5:44:07:0d:
77:bb:94:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT6EMfViZ19DlDOPf1movMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1
MjRkZWMwHhcNMjUxMTA0MTAwMDMyWhcNMjUxMTA1MTAwMDMyWjAzMTEwLwYDVQQD
EyhlOWIzNjQ4NTA1NzVkNzcwNWIzZGVlMDkwOTEwNzkyNTcyNTQ3OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0vAeaugPh0Voj4sQ8S9IGqw3txF
Ym4PijK9Nm88raG3V6k9gSxsUFfxgvz8y/K71TvszPKcS4zE68h5YQRBYSOm1b0d
Ag8oFq3dsruxLv99UUnYIXE8Llme7TJdIE55/3WBC/SEPFEQmPlYOGQd+vjDd82z
V4sR1RGyQth2Fo+6DDJ10nd0C18LESNDLY+WKvLnqyDZPD/cp3Nci84ceurR4frp
XswVLx98mzNzikxHUx0gm+IBNfD0kleQjSh/A8dbLekLiiTb9sdsmgzD+0DLHMSS
wkLYa4UaNkNQquXhE0HZUM3lS7UIzwR4l2SXmMTmmOXak2/MuHlhuy4oDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmzZIUFdddwWz3uCQkQeSVyVHk+MB8GA1UdIwQY
MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt
MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi
LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq7fjg9k
ZLSaiDTb7yRoXbApv/toIt9lRmAzebhPxWtZ5BgnHJmu1HG4eLN6ic1NSI3u5qNw
Ot+qUN4VR21qRlI5dYBrkxao4CswCwrLQPUSPxQsKT2duX71gvFqPh8QSOHJXzLU
BpfVEI4BamjP+35jIHSG+rs3xsgkeiQMlgS8GyIVfrL8EFY+bYXhYxV1Q/zD632E
tjo+N+Rb8kjxEARS9X9qhrP3grHbUJiAnZfBGaaxzt1qdFhGLHPqTRpDUJUldu2A
gww2ElYRRPZXu0Wx+/LKYI8SdnifqiLBuQBllwSDJknfBDwjVRBKeJNN6Hmqd8C3
JMXlRAcNd7uUxw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:37 2025 by rpki-client