Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: Mz3h/hCbc641D2LwHMQs4oND1hbbyCkvVt/3ujmo3Bo=
Subject key identifier: 85:31:13:D9:6C:B2:1E:E8:D2:CF:90:BB:41:C6:1E:2D:CA:B5:15:99
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019A5263800C2769CC63E5CAF24360870B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 05:00:43 +0000
Manifest this update: Wed 05 Nov 2025 05:00:43 +0000
Manifest next update: Thu 06 Nov 2025 05:00:43 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: 58FfKBQDcqZiZfNOCCNKRkUHQInZQdMfOy/ETFEy8lk=)
2: rE87pRMGrIGW2-QCo2IWgU4T1zg.roa (hash: YOlXp2sGo61mpLlpdmbznU7uW49evw4d47+WkKfymmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:80:0c:27:69:cc:63:e5:ca:f2:43:60:87:0b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Nov 5 05:00:43 2025 GMT
Not After : Nov 6 05:00:43 2025 GMT
Subject: CN=853113d96cb21ee8d2cf90bb41c61e2dcab51599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:eb:f0:d0:d9:13:9a:ec:69:c3:53:a0:dd:
62:ba:ec:c6:0e:0a:84:ee:5f:93:c8:f0:bf:94:c4:
f3:17:55:e5:a3:c0:7d:62:12:bf:e5:6b:3e:47:76:
a7:bb:8d:4d:c1:36:f7:1f:55:8a:f8:24:ac:36:5d:
2a:fd:be:23:68:d2:77:30:7f:1f:c3:22:0b:0a:a0:
1a:4d:22:cc:b1:3b:91:b6:b5:52:09:e3:c3:3e:fe:
6e:1c:03:b8:6d:fb:4f:97:d8:03:ea:0b:bb:0f:e5:
df:9b:aa:24:1c:8e:05:17:24:18:b2:a1:8c:1a:19:
58:49:0c:28:91:21:aa:19:ae:73:73:66:d6:52:d3:
e2:c5:eb:d9:d9:fa:dc:c0:b4:b6:c7:8c:90:f2:a8:
5e:86:2b:fa:9d:83:88:c4:8c:bb:66:2c:6f:d6:ce:
34:4d:3b:64:0a:da:74:17:e8:fd:3d:b4:88:4c:3a:
fe:8a:99:fb:d5:40:40:ba:33:cc:d1:c7:71:20:7f:
0d:6a:8d:99:dc:66:cd:85:d8:f5:00:8a:27:1f:e9:
0d:d7:ab:8d:cf:5a:23:9d:a5:c4:5f:2e:36:07:35:
f6:e9:16:49:b0:0f:7f:90:bc:6a:f5:1a:c9:41:f2:
0f:8a:4b:cf:d7:33:81:54:94:04:d2:63:a1:d5:04:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:13:D9:6C:B2:1E:E8:D2:CF:90:BB:41:C6:1E:2D:CA:B5:15:99
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ba:8f:8f:d1:ee:c2:26:2e:ba:86:11:31:0c:e3:52:93:00:
3c:f6:6b:89:c6:96:57:b8:d3:3a:d6:44:bd:2b:d0:dd:68:a6:
e4:3a:3f:63:4c:f0:7e:b6:61:93:bf:86:c4:51:a0:76:97:6a:
10:0f:ba:56:b4:78:20:15:b4:99:ab:2a:8e:b7:8d:f0:07:3e:
96:f3:68:f6:3a:fe:c9:87:80:85:e9:3c:59:fc:9e:a7:77:4c:
e5:a3:13:46:b7:3f:bd:bd:b5:8a:67:81:4a:c6:04:ca:68:75:
22:e8:b1:46:c5:53:2a:98:4b:9b:1b:1c:d8:1e:02:95:7a:92:
7e:ee:72:10:ab:b8:3c:da:25:b0:2e:10:c9:4e:bf:1f:c6:7a:
e1:02:7e:ac:86:12:6b:a7:63:ed:cb:79:6e:b1:20:10:45:16:
33:aa:8e:d9:ae:8b:f1:e2:39:0e:41:4d:45:06:34:da:58:7d:
91:36:9d:f4:f3:b4:45:0d:0e:52:e3:4e:cc:3c:44:93:5c:40:
c7:f4:36:a4:df:b5:c6:46:db:07:e7:f2:3e:3d:93:d3:4b:91:
30:66:88:0c:27:ae:e8:cc:a2:4c:3a:75:56:1a:9d:86:f8:24:
20:da:15:34:dd:ca:f5:4e:0a:7f:bd:0c:16:6c:2e:a3:48:95:
ea:4b:e1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY4AMJ2nMY+XK8kNghwsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1
ZDg3NzEwHhcNMjUxMTA1MDUwMDQzWhcNMjUxMTA2MDUwMDQzWjAzMTEwLwYDVQQD
Eyg4NTMxMTNkOTZjYjIxZWU4ZDJjZjkwYmI0MWM2MWUyZGNhYjUxNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYrr8NDZE5rsacNToN1iuuzGDgqE
7l+TyPC/lMTzF1Xlo8B9YhK/5Ws+R3anu41NwTb3H1WK+CSsNl0q/b4jaNJ3MH8f
wyILCqAaTSLMsTuRtrVSCePDPv5uHAO4bftPl9gD6gu7D+Xfm6okHI4FFyQYsqGM
GhlYSQwokSGqGa5zc2bWUtPixevZ2frcwLS2x4yQ8qhehiv6nYOIxIy7Zixv1s40
TTtkCtp0F+j9PbSITDr+ipn71UBAujPM0cdxIH8Nao2Z3GbNhdj1AIonH+kN16uN
z1ojnaXEXy42BzX26RZJsA9/kLxq9RrJQfIPikvP1zOBVJQE0mOh1QS6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUxE9lssh7o0s+Qu0HGHi3KtRWZMB8GA1UdIwQY
MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt
YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz
LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbqPj9Hu
wiYuuoYRMQzjUpMAPPZricaWV7jTOtZEvSvQ3Wim5Do/Y0zwfrZhk7+GxFGgdpdq
EA+6VrR4IBW0masqjreN8Ac+lvNo9jr+yYeAhek8Wfyep3dM5aMTRrc/vb21imeB
SsYEymh1IuixRsVTKphLmxsc2B4ClXqSfu5yEKu4PNolsC4QyU6/H8Z64QJ+rIYS
a6dj7ct5brEgEEUWM6qO2a6L8eI5DkFNRQY02lh9kTad9PO0RQ0OUuNOzDxEk1xA
x/Q2pN+1xkbbB+fyPj2T00uRMGaIDCeu6MyiTDp1VhqdhvgkINoVNN3K9U4Kf70M
Fmwuo0iV6kvhaw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:17 2025 by rpki-client