Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: YaQrUcg6S++3XFLHhnuDLHzzATwdFaK9Lt8FD89QBiA=
Subject key identifier: E8:A8:5F:AD:65:2A:31:3A:B3:AF:6E:57:F1:C9:98:58:5A:4D:83:23
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 019A4F2B2CC4C9A9285B7B0AA98BA9F75828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:20 +0000
Manifest this update: Tue 04 Nov 2025 14:00:20 +0000
Manifest next update: Wed 05 Nov 2025 14:00:20 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: wxd74fuMT0bpyE/xG7VHM6kgm4pF956g9WAunSNr8cQ=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2c:c4:c9:a9:28:5b:7b:0a:a9:8b:a9:f7:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Nov 4 14:00:20 2025 GMT
Not After : Nov 5 14:00:20 2025 GMT
Subject: CN=e8a85fad652a313ab3af6e57f1c998585a4d8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:d2:cb:27:a2:d3:41:c9:b4:86:4a:3a:db:
9b:3b:fe:2e:7c:25:b8:84:5e:51:28:2c:6e:31:b6:
78:34:2e:52:8e:8f:dc:ec:85:2d:30:69:a5:5d:b3:
58:54:d9:d1:73:70:a3:da:a0:d6:65:e9:21:2d:41:
5e:c8:61:20:cb:e8:ed:b7:84:45:9a:40:0c:fd:46:
ba:72:97:5b:b3:96:82:66:7c:e1:b8:4f:44:4a:09:
91:e6:12:70:4a:31:e5:99:13:7a:85:a2:03:6b:c7:
95:af:12:63:5a:48:dc:75:36:5c:40:90:b4:17:38:
fe:da:d2:05:0d:2f:e1:af:63:49:e8:90:fc:4a:29:
6b:5b:73:98:6a:56:72:3d:4a:87:80:d9:ec:6f:99:
d8:1d:37:a3:f4:ff:9b:98:fe:47:ae:cd:ad:5c:9d:
db:8c:8c:a8:fd:b9:f9:74:14:fd:bb:1a:3a:28:ff:
06:45:ab:00:05:6e:26:2b:14:17:eb:ef:37:9d:ee:
c8:18:9a:c8:17:7a:c2:ca:03:c6:86:50:b8:e4:2c:
57:63:a9:43:5c:54:50:ec:1c:6a:f7:d5:fd:db:c5:
8a:5e:ad:6a:44:1b:51:05:22:8b:1f:7e:f8:ad:04:
5b:11:39:bf:d5:78:d8:dc:80:00:65:ed:f3:a8:47:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:5F:AD:65:2A:31:3A:B3:AF:6E:57:F1:C9:98:58:5A:4D:83:23
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b6:39:78:ca:f5:64:cc:1f:e1:d5:1a:d4:7e:59:0d:7f:f0:
5a:e3:1a:a8:e0:c8:49:c6:9a:0d:3f:bb:ac:76:0b:10:9d:3f:
21:e2:2c:f9:e4:14:54:fb:41:c0:e1:2d:21:f4:26:76:55:df:
2f:48:fa:ad:9c:cc:75:7b:94:9b:ae:d8:43:e5:0a:2e:44:51:
68:16:12:ce:3c:e8:2a:31:1c:69:3f:60:49:65:20:bb:45:e2:
dc:1a:af:80:5d:28:16:d4:5d:d9:96:4b:37:e4:2f:29:c1:46:
1a:f6:e9:e9:04:55:aa:7d:1d:e9:47:78:d7:ca:13:11:4f:66:
92:da:2d:44:8d:d9:0d:89:73:0e:eb:bc:12:8e:83:a6:be:cb:
c5:cf:03:78:0a:60:f1:06:d3:7e:b4:00:dc:35:43:03:96:69:
1d:1f:eb:41:7a:eb:db:b2:8f:0f:13:c4:6a:6b:40:0a:52:e1:
f8:85:c0:aa:27:c8:50:6d:c1:07:9c:35:18:f1:90:4c:31:09:
25:02:71:7d:1b:19:21:c2:00:84:a8:19:e5:87:f8:4a:02:e4:
7d:b7:4d:c5:ac:8f:78:a2:86:57:ac:26:fd:13:0c:e3:1d:b7:
85:11:64:ab:75:18:d4:bb:49:b0:1e:c1:df:38:9a:07:ea:76:
0f:f0:c1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKyzEyakoW3sKqYup91goMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWVhOTU4N2U1ZWE0ZTk2M2FkN2FlN2YxMjU3NjFjMGUy
OTI1NjMwHhcNMjUxMTA0MTQwMDIwWhcNMjUxMTA1MTQwMDIwWjAzMTEwLwYDVQQD
EyhlOGE4NWZhZDY1MmEzMTNhYjNhZjZlNTdmMWM5OTg1ODVhNGQ4MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDSyyei00HJtIZKOtubO/4ufCW4
hF5RKCxuMbZ4NC5Sjo/c7IUtMGmlXbNYVNnRc3Cj2qDWZekhLUFeyGEgy+jtt4RF
mkAM/Ua6cpdbs5aCZnzhuE9ESgmR5hJwSjHlmRN6haIDa8eVrxJjWkjcdTZcQJC0
Fzj+2tIFDS/hr2NJ6JD8SilrW3OYalZyPUqHgNnsb5nYHTej9P+bmP5Hrs2tXJ3b
jIyo/bn5dBT9uxo6KP8GRasABW4mKxQX6+83ne7IGJrIF3rCygPGhlC45CxXY6lD
XFRQ7Bxq99X928WKXq1qRBtRBSKLH374rQRbETm/1XjY3IAAZe3zqEewqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOioX61lKjE6s69uV/HJmFhaTYMjMB8GA1UdIwQY
MBaAFNmeqVh+XqTpY6165/EldhwOKSVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUt
MDdkZjAxNmM0MWI4LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUtMDdkZjAxNmM0MWI4
LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrY5eMr1
ZMwf4dUa1H5ZDX/wWuMaqODIScaaDT+7rHYLEJ0/IeIs+eQUVPtBwOEtIfQmdlXf
L0j6rZzMdXuUm67YQ+UKLkRRaBYSzjzoKjEcaT9gSWUgu0Xi3BqvgF0oFtRd2ZZL
N+QvKcFGGvbp6QRVqn0d6Ud418oTEU9mktotRI3ZDYlzDuu8Eo6Dpr7Lxc8DeApg
8QbTfrQA3DVDA5ZpHR/rQXrr27KPDxPEamtAClLh+IXAqifIUG3BB5w1GPGQTDEJ
JQJxfRsZIcIAhKgZ5Yf4SgLkfbdNxayPeKKGV6wm/RMM4x23hRFkq3UY1LtJsB7B
3ziaB+p2D/DBdA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:22 2025 by rpki-client