Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: Ht0rZgLWkcQpCsHyNvyYDmy/dUGt/qqxAZ4l4YWvtgg=
Subject key identifier: 2C:B1:6E:42:CC:5C:07:25:BC:94:27:33:68:7F:59:44:C8:A7:5B:95
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019A522C367C7A0F0CC2CCA398ABB0DE696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 0219
Signing time: Wed 05 Nov 2025 04:00:20 +0000
Manifest this update: Wed 05 Nov 2025 04:00:20 +0000
Manifest next update: Thu 06 Nov 2025 04:00:20 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: 0JdPoByoU9tBOJEDBalT4BP6COsJvte9g/P2v12xOCI=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:36:7c:7a:0f:0c:c2:cc:a3:98:ab:b0:de:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Nov 5 04:00:20 2025 GMT
Not After : Nov 6 04:00:20 2025 GMT
Subject: CN=2cb16e42cc5c0725bc942733687f5944c8a75b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:78:38:47:79:7d:1c:c4:51:21:44:fc:6e:
42:7c:37:28:7c:25:cf:8e:7d:19:12:4b:13:5a:ee:
3e:75:60:7a:04:f4:b7:1d:01:f6:4c:3a:1f:30:ff:
40:80:73:a2:9f:6c:b0:a3:10:10:a5:0a:fd:20:68:
a9:21:2e:d3:2f:50:38:d2:8a:77:ac:ae:8f:3e:3c:
e9:43:00:6c:65:04:12:58:5d:50:57:bd:b8:27:a6:
9d:79:00:09:24:d0:0c:68:ea:df:37:66:f9:03:31:
eb:b4:9c:94:31:19:da:68:01:43:31:58:2f:38:77:
02:7d:1a:55:1c:5c:e4:a0:e5:66:10:bf:cc:e7:a3:
42:c1:57:69:05:81:47:dd:a2:43:a8:45:77:3f:73:
a0:93:49:d0:4c:fc:d5:b4:b5:89:f6:e8:8a:70:4c:
49:de:7b:65:79:49:71:2c:5c:ba:fc:d5:e5:eb:39:
f2:aa:fd:f6:69:cc:ad:d8:9c:fd:e8:df:6f:a7:04:
ec:17:c6:8f:6b:15:5f:4d:ab:2d:55:e5:ac:42:af:
43:a9:55:20:e0:89:62:d5:e3:e8:9b:4d:e6:5a:ca:
a6:4b:85:bb:98:9d:ba:be:7b:f9:52:4d:b2:63:73:
56:01:00:11:7a:15:f1:1b:0d:f2:50:a4:39:26:d3:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:6E:42:CC:5C:07:25:BC:94:27:33:68:7F:59:44:C8:A7:5B:95
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:e2:58:bd:8a:09:b0:8f:6f:8d:8b:26:ee:78:e3:90:e1:
b4:cf:7c:ac:b6:31:96:fa:ee:f1:8b:9c:58:f6:a6:61:c9:ec:
68:55:3d:33:5b:7a:24:2f:e2:10:e8:46:d1:cd:70:3c:75:3e:
dd:52:b2:8b:69:98:4a:02:b9:ce:06:45:a0:6e:ea:09:ae:33:
16:b2:c2:f8:60:77:6b:5c:1c:2d:a5:20:87:fd:f6:4e:19:a8:
6f:1b:45:c4:56:eb:7f:9f:85:22:f6:8f:ad:ea:4a:cb:c7:5d:
68:e7:1e:81:ce:7e:18:a4:ce:90:39:35:9f:55:2d:c2:0b:92:
b6:a1:4e:6f:c0:7d:ff:4e:53:0f:bd:3e:64:0f:b8:fd:6d:4d:
a3:6b:8b:b5:50:cf:28:b3:ea:6a:06:f6:4a:d2:44:a6:d6:d6:
87:b6:2c:e7:5e:f3:3a:80:0c:59:8f:59:30:48:ee:ec:1e:d2:
9c:24:04:ed:15:49:26:8f:62:3c:a6:ec:1f:92:b5:20:c9:89:
52:c5:df:69:27:d3:fa:d4:05:30:b2:e4:4c:94:8e:81:52:7c:
f8:cf:f5:cd:61:e8:b3:27:ce:ad:6e:f7:c0:08:01:42:ec:54:
07:31:2a:52:8f:e2:ef:ef:b2:bb:15:66:f8:d9:47:86:f8:b7:
00:b6:9f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLDZ8eg8MwsyjmKuw3mlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDM0ZmQwNDhiNTk3YjNlNWY3ZGE4OWRmZTY0NjU3Njk3
ZThlZTMwHhcNMjUxMTA1MDQwMDIwWhcNMjUxMTA2MDQwMDIwWjAzMTEwLwYDVQQD
EygyY2IxNmU0MmNjNWMwNzI1YmM5NDI3MzM2ODdmNTk0NGM4YTc1Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L14OEd5fRzEUSFE/G5CfDcofCXP
jn0ZEksTWu4+dWB6BPS3HQH2TDofMP9AgHOin2ywoxAQpQr9IGipIS7TL1A40op3
rK6PPjzpQwBsZQQSWF1QV724J6adeQAJJNAMaOrfN2b5AzHrtJyUMRnaaAFDMVgv
OHcCfRpVHFzkoOVmEL/M56NCwVdpBYFH3aJDqEV3P3Ogk0nQTPzVtLWJ9uiKcExJ
3ntleUlxLFy6/NXl6znyqv32acyt2Jz96N9vpwTsF8aPaxVfTastVeWsQq9DqVUg
4Ili1ePom03mWsqmS4W7mJ26vnv5Uk2yY3NWAQARehXxGw3yUKQ5JtOKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyxbkLMXAclvJQnM2h/WUTIp1uVMB8GA1UdIwQY
MBaAFEXTT9BItZez5ffaid/mRldpfo7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2It
ODQzOTQ4Y2JmYjgxLzEvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2ItODQzOTQ4Y2JmYjgx
LzEvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFPiWL2K
CbCPb42LJu5445DhtM98rLYxlvru8YucWPamYcnsaFU9M1t6JC/iEOhG0c1wPHU+
3VKyi2mYSgK5zgZFoG7qCa4zFrLC+GB3a1wcLaUgh/32ThmobxtFxFbrf5+FIvaP
repKy8ddaOcegc5+GKTOkDk1n1UtwguStqFOb8B9/05TD70+ZA+4/W1No2uLtVDP
KLPqagb2StJEptbWh7Ys517zOoAMWY9ZMEju7B7SnCQE7RVJJo9iPKbsH5K1IMmJ
UsXfaSfT+tQFMLLkTJSOgVJ8+M/1zWHosyfOrW73wAgBQuxUBzEqUo/i7++yuxVm
+NlHhvi3ALafNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:00 2025 by rpki-client