Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: GcyPVHRbI+6tpktW07P7pIVpmS9/4Bm485bUqQE0clg=
Subject key identifier: 38:29:CC:F4:4A:7A:44:B8:AE:84:45:66:63:4C:73:1D:6A:C5:38:7E
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019A4DE199EE422BE8D23D278EDD3BD450FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: yf+7h5+QhOSLBl7aqaWdyWTPbja44uqllm8hh9f6p0g=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:ee:42:2b:e8:d2:3d:27:8e:dd:3b:d4:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=3829ccf44a7a44b8ae844566634c731d6ac5387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:bf:ce:cd:dc:da:01:ca:da:2d:0e:3d:64:
4d:ed:49:13:9f:4c:15:4e:c8:bc:5a:e7:5a:b8:60:
08:0f:5c:8f:c7:02:8a:4b:92:3d:68:93:b5:8a:32:
3b:69:4e:17:48:49:a5:39:54:49:9f:c2:40:fd:6d:
17:8b:c3:fa:b4:af:2d:92:c3:88:9a:66:fb:d0:b2:
d1:45:4a:12:12:e6:ce:90:09:c8:99:f4:56:d4:c4:
52:bc:42:a9:3c:ca:dc:a1:64:a0:13:60:5e:f0:10:
a9:06:48:a7:3f:c7:c2:15:f2:53:98:a7:1d:4c:3d:
d8:c5:8d:dd:75:a6:23:6e:42:97:ee:3b:5e:17:41:
dc:65:a9:ab:90:42:b3:f7:5c:e1:82:7c:75:1a:f3:
0d:42:bc:b0:e0:35:ba:7b:2a:36:c7:96:83:d9:84:
fd:74:9f:08:85:a9:cf:3d:ee:61:0f:22:f5:b8:4c:
13:d8:60:12:93:72:03:2c:62:3b:49:b6:c5:15:f8:
91:f7:3d:8c:f6:b9:58:05:53:f9:e4:1e:82:68:1f:
b2:a4:ac:dd:de:77:6f:e4:57:4b:6b:38:99:e7:e1:
f5:0e:65:7d:b7:4c:d5:fa:3e:65:45:ed:70:da:d7:
16:e8:d6:b0:11:f2:4c:57:bd:47:14:93:1e:df:fb:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:CC:F4:4A:7A:44:B8:AE:84:45:66:63:4C:73:1D:6A:C5:38:7E
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:13:c6:c0:12:67:54:90:b9:27:13:6a:da:9b:3c:95:92:
ee:86:95:8a:a6:17:f4:a6:4d:bb:d3:55:7b:ef:48:f3:84:70:
4f:9d:de:e9:c3:8d:5e:26:75:4a:5a:3d:15:4b:6c:70:80:33:
1d:76:4f:81:b6:ca:c1:2a:e3:a4:3c:ba:2d:55:d9:52:86:c6:
63:78:55:3f:85:15:fc:f1:5b:13:c2:3f:bd:fb:66:82:16:37:
c7:52:4a:36:86:77:09:0b:cb:60:f7:0b:10:c7:db:64:95:4b:
71:36:a7:1c:b3:38:c9:ab:d8:74:9d:1b:bd:68:35:3a:1b:5a:
90:c2:c8:3b:e8:ad:9f:29:b1:37:2c:7a:ce:d6:dc:6b:63:78:
f9:e9:af:3f:17:0a:6f:fd:89:e4:65:9e:03:9c:01:5c:7f:c0:
7e:ca:99:0d:aa:ce:b5:14:fa:b4:d8:b3:c6:69:72:00:da:a4:
d8:a9:50:12:47:3c:62:c1:7d:ab:b8:ee:f6:ca:08:64:3d:dc:
f4:63:c1:18:f6:32:62:04:0f:d9:ec:93:98:dc:a0:2d:27:d3:
78:f8:84:80:da:2f:b0:05:f4:37:76:d3:35:ae:45:e7:91:b2:
0a:0d:26:92:5a:25:bc:b4:0e:2e:a4:a4:44:43:a3:e8:ab:72:
7c:1f:30:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ZnuQivo0j0njt071FD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUxMTA0MDgwMDIxWhcNMjUxMTA1MDgwMDIxWjAzMTEwLwYDVQQD
EygzODI5Y2NmNDRhN2E0NGI4YWU4NDQ1NjY2MzRjNzMxZDZhYzUzODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8y/zs3c2gHK2i0OPWRN7UkTn0wV
Tsi8WudauGAID1yPxwKKS5I9aJO1ijI7aU4XSEmlOVRJn8JA/W0Xi8P6tK8tksOI
mmb70LLRRUoSEubOkAnImfRW1MRSvEKpPMrcoWSgE2Be8BCpBkinP8fCFfJTmKcd
TD3YxY3ddaYjbkKX7jteF0HcZamrkEKz91zhgnx1GvMNQryw4DW6eyo2x5aD2YT9
dJ8IhanPPe5hDyL1uEwT2GASk3IDLGI7SbbFFfiR9z2M9rlYBVP55B6CaB+ypKzd
3ndv5FdLaziZ5+H1DmV9t0zV+j5lRe1w2tcW6NawEfJMV71HFJMe3/u2gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgpzPRKekS4roRFZmNMcx1qxTh+MB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtoTxsAS
Z1SQuScTatqbPJWS7oaViqYX9KZNu9NVe+9I84RwT53e6cONXiZ1Slo9FUtscIAz
HXZPgbbKwSrjpDy6LVXZUobGY3hVP4UV/PFbE8I/vftmghY3x1JKNoZ3CQvLYPcL
EMfbZJVLcTanHLM4yavYdJ0bvWg1OhtakMLIO+itnymxNyx6ztbca2N4+emvPxcK
b/2J5GWeA5wBXH/AfsqZDarOtRT6tNizxmlyANqk2KlQEkc8YsF9q7ju9soIZD3c
9GPBGPYyYgQP2eyTmNygLSfTePiEgNovsAX0N3bTNa5F55GyCg0mklolvLQOLqSk
REOj6KtyfB8wVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:27 2025 by rpki-client