Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: Pw4W2EHYZGLOKPUky1FoGC2O7dVNwaDHMuE5T4O+QOM=
Subject key identifier: 6B:5D:29:DC:80:3E:79:53:33:87:25:27:C2:4D:58:F6:E2:99:D3:D8
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019A52D13C6D2460B2F4CB7C60AA61EE4D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0DB6
Signing time: Wed 05 Nov 2025 07:00:35 +0000
Manifest this update: Wed 05 Nov 2025 07:00:35 +0000
Manifest next update: Thu 06 Nov 2025 07:00:35 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: lQDXHZJAkNHsk2d3qKuCmlEzhNGAa9j9TCRNZbfrBNM=)
2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:3c:6d:24:60:b2:f4:cb:7c:60:aa:61:ee:4d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Nov 5 07:00:35 2025 GMT
Not After : Nov 6 07:00:35 2025 GMT
Subject: CN=6b5d29dc803e795333872527c24d58f6e299d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:4b:82:6e:3b:54:57:f7:e9:71:19:ca:87:
3b:5a:23:9c:c2:be:0d:a9:c8:f1:7d:69:8d:b0:eb:
10:ff:9b:c0:69:e2:e7:2a:99:a2:70:d0:73:59:7f:
cb:e6:db:40:94:91:80:11:5a:22:53:b8:62:ab:5f:
e1:f1:23:33:8a:e0:26:e6:7b:5b:3f:9d:bf:5e:96:
d0:9e:1f:a1:2c:dc:cc:85:ba:44:41:9e:dc:10:a5:
7d:64:e8:43:78:e7:af:36:80:d2:09:d5:91:8c:53:
5a:6a:5a:d0:2c:c5:68:06:8c:7f:74:67:c5:f2:16:
1e:52:0b:8b:5c:8b:79:e5:cc:7f:03:16:30:54:3f:
21:c6:16:83:12:bf:ae:ed:28:f6:34:7a:34:6d:c6:
18:87:9f:ed:ee:cc:1b:c2:f8:f3:dd:62:3e:35:76:
c2:ba:76:d5:36:8b:cb:59:01:63:41:58:5a:3e:36:
fe:53:35:de:96:e1:b1:71:ea:ae:a8:be:1f:91:56:
f3:3f:d0:ec:2f:31:ad:f8:2d:9e:d5:72:3a:64:95:
1d:68:38:a6:26:f2:06:e2:f9:91:f6:f2:4f:e0:3d:
9b:24:1b:0e:64:8d:86:2a:6d:9c:34:9a:86:06:4e:
bc:54:50:6e:43:c3:ba:5f:66:9f:ad:bd:7a:43:9f:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:29:DC:80:3E:79:53:33:87:25:27:C2:4D:58:F6:E2:99:D3:D8
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:03:4a:ec:53:93:45:22:3f:b4:58:55:12:df:29:8f:88:61:
48:b0:6c:81:b8:e7:d5:5b:de:35:86:4d:06:9b:d2:66:73:07:
85:f1:2e:38:bc:2e:f5:56:0e:81:3a:89:a0:c1:e4:4b:8e:17:
19:fc:28:aa:1b:1d:07:8d:78:e6:66:32:2a:65:b5:1f:1a:06:
d9:c0:5e:1b:92:67:ab:fd:db:02:81:1a:b1:cc:5a:c0:5c:c3:
e1:94:35:f9:b7:93:c4:b0:8b:22:a6:33:10:69:65:e4:11:7b:
ed:62:37:85:d0:77:6a:07:3d:d1:52:ad:2c:d1:0d:5e:0f:65:
d3:0a:4c:d2:95:96:70:9f:e9:f2:7a:1e:c8:cd:31:48:85:0f:
17:82:88:84:95:cd:46:56:90:a9:63:21:30:9c:3f:c2:86:e6:
06:30:0c:82:b5:8c:14:fd:b6:d0:2b:a9:c6:c3:b0:9c:51:b1:
ce:83:8b:4c:cd:a5:fc:5b:09:f1:b5:01:f3:d6:39:b9:a2:30:
36:c6:87:b3:79:84:e6:c5:01:8b:77:a2:0b:2f:48:63:3e:eb:
e7:42:ef:89:1c:93:8b:c4:cb:21:53:62:24:91:ef:30:be:31:
8d:d5:16:9c:24:ce:3f:d5:1b:f9:f1:57:6d:0f:18:23:7b:ce:
e4:ad:24:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0TxtJGCy9Mt8YKph7k1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz
NzZlZjAwHhcNMjUxMTA1MDcwMDM1WhcNMjUxMTA2MDcwMDM1WjAzMTEwLwYDVQQD
Eyg2YjVkMjlkYzgwM2U3OTUzMzM4NzI1MjdjMjRkNThmNmUyOTlkM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMJLgm47VFf36XEZyoc7WiOcwr4N
qcjxfWmNsOsQ/5vAaeLnKpmicNBzWX/L5ttAlJGAEVoiU7hiq1/h8SMziuAm5ntb
P52/XpbQnh+hLNzMhbpEQZ7cEKV9ZOhDeOevNoDSCdWRjFNaalrQLMVoBox/dGfF
8hYeUguLXIt55cx/AxYwVD8hxhaDEr+u7Sj2NHo0bcYYh5/t7swbwvjz3WI+NXbC
unbVNovLWQFjQVhaPjb+UzXeluGxcequqL4fkVbzP9DsLzGt+C2e1XI6ZJUdaDim
JvIG4vmR9vJP4D2bJBsOZI2GKm2cNJqGBk68VFBuQ8O6X2afrb16Q58KGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtdKdyAPnlTM4clJ8JNWPbimdPYMB8GA1UdIwQY
MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct
YzgxM2NlMGY1ZTQ3LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3
LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgNK7FOT
RSI/tFhVEt8pj4hhSLBsgbjn1VveNYZNBpvSZnMHhfEuOLwu9VYOgTqJoMHkS44X
GfwoqhsdB4145mYyKmW1HxoG2cBeG5Jnq/3bAoEascxawFzD4ZQ1+beTxLCLIqYz
EGll5BF77WI3hdB3agc90VKtLNENXg9l0wpM0pWWcJ/p8noeyM0xSIUPF4KIhJXN
RlaQqWMhMJw/wobmBjAMgrWMFP220CupxsOwnFGxzoOLTM2l/FsJ8bUB89Y5uaIw
NsaHs3mE5sUBi3eiCy9IYz7r50LviRyTi8TLIVNiJJHvML4xjdUWnCTOP9Ub+fFX
bQ8YI3vO5K0kbw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:31:59 2025 by rpki-client