Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: /qlf1lR57qqFrZDxyY8Ltx6SRhxZdJ/q3vuxOH5Se5I=
Subject key identifier: A1:B0:02:30:B8:E3:E1:82:BD:35:05:AA:EB:F6:24:34:F9:8A:D5:C8
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019A4DAA911D8BBEC4CA1D8F1A90E007F7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1425
Signing time: Tue 04 Nov 2025 07:00:14 +0000
Manifest this update: Tue 04 Nov 2025 07:00:14 +0000
Manifest next update: Wed 05 Nov 2025 07:00:14 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: fYMDIKNvAucvJwQWYbChbMgX5jVnNJUehV8JgwNI/80=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:91:1d:8b:be:c4:ca:1d:8f:1a:90:e0:07:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Nov 4 07:00:14 2025 GMT
Not After : Nov 5 07:00:14 2025 GMT
Subject: CN=a1b00230b8e3e182bd3505aaebf62434f98ad5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:15:a1:41:de:0a:20:e8:3d:09:ae:f7:7d:
39:13:dc:e7:78:8e:95:d7:0c:ca:56:76:00:b3:16:
c7:7e:83:f1:8b:1c:94:57:f0:0d:f7:eb:6c:69:a1:
b3:59:05:1d:e4:1f:14:17:55:4e:5e:24:fd:bc:2d:
ef:0b:2e:79:57:b9:05:00:b2:58:90:66:a4:da:d2:
5d:58:84:c4:31:74:97:2e:60:54:c9:06:6e:2d:7f:
d8:2b:f9:1d:59:4d:5c:36:9d:ab:87:ac:43:4f:7a:
95:6d:2f:f1:55:42:f2:9e:bd:49:e4:66:bf:50:62:
b2:36:55:54:dd:90:2d:29:e4:ef:9a:16:df:d7:b1:
ce:f4:8b:cf:60:9b:78:44:a6:75:aa:fe:98:aa:b0:
7b:a3:87:00:45:ea:81:eb:05:dc:0b:d9:a6:7a:fb:
44:f4:32:e4:53:d5:bd:7d:c1:3d:93:78:fe:af:a8:
8d:8d:12:d1:fc:ae:dd:ca:ad:e0:a6:14:bd:86:d7:
91:4e:d5:e0:f4:c8:d3:97:84:17:ca:6c:f5:12:ed:
0c:1f:34:98:be:9f:19:2b:04:d6:db:2b:5f:fd:fb:
48:cd:5f:91:91:57:7c:46:85:5a:ba:45:a7:7a:a8:
72:57:a4:ee:e0:41:50:4d:29:5d:23:5c:c8:cf:3c:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:02:30:B8:E3:E1:82:BD:35:05:AA:EB:F6:24:34:F9:8A:D5:C8
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:40:50:88:5d:69:b3:76:65:56:ff:de:c2:bf:c5:21:e4:
43:26:03:95:15:7e:a3:8e:60:73:12:23:a9:be:32:0a:3d:28:
5c:f0:5b:6d:1b:2c:bc:0a:59:b1:d5:93:44:03:ac:e7:cc:43:
57:d7:28:24:1b:d3:21:fd:aa:96:5f:b3:78:5e:4e:82:9d:80:
46:df:aa:fa:68:c7:7b:35:c3:92:b0:63:1a:bb:f4:8b:b0:4e:
0d:20:df:e1:78:d0:d7:05:0d:44:b0:ed:4f:06:2c:a4:8c:1b:
df:93:2a:42:a4:23:8e:cb:be:04:f0:61:f3:dd:1e:cc:0f:89:
8c:17:33:6a:f4:f8:47:0c:8a:35:ff:12:5d:a4:df:66:b3:26:
c6:f4:a3:e6:3c:38:a0:69:df:db:a7:c3:11:47:5d:13:fa:07:
88:f4:98:8f:ec:0c:3c:ed:7f:3a:84:b3:d0:de:d9:c9:1a:c7:
d1:5d:31:9a:d4:04:ad:48:ac:89:4b:c9:57:75:85:c2:76:18:
e5:88:5a:20:ad:f2:8e:b3:99:6e:47:6c:89:fc:fc:1b:35:c3:
d8:71:de:b9:61:a3:50:f0:9c:38:a6:21:bb:eb:4e:38:4d:78:
cf:85:b6:79:73:c4:f5:1a:3e:3d:be:51:a2:8d:0d:99:87:2f:
a6:30:ca:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqpEdi77Eyh2PGpDgB/enMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz
Mzc5NDMwHhcNMjUxMTA0MDcwMDE0WhcNMjUxMTA1MDcwMDE0WjAzMTEwLwYDVQQD
EyhhMWIwMDIzMGI4ZTNlMTgyYmQzNTA1YWFlYmY2MjQzNGY5OGFkNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4csVoUHeCiDoPQmu9305E9zneI6V
1wzKVnYAsxbHfoPxixyUV/AN9+tsaaGzWQUd5B8UF1VOXiT9vC3vCy55V7kFALJY
kGak2tJdWITEMXSXLmBUyQZuLX/YK/kdWU1cNp2rh6xDT3qVbS/xVULynr1J5Ga/
UGKyNlVU3ZAtKeTvmhbf17HO9IvPYJt4RKZ1qv6YqrB7o4cAReqB6wXcC9mmevtE
9DLkU9W9fcE9k3j+r6iNjRLR/K7dyq3gphS9hteRTtXg9MjTl4QXymz1Eu0MHzSY
vp8ZKwTW2ytf/ftIzV+RkVd8RoVaukWneqhyV6Tu4EFQTSldI1zIzzwNBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGwAjC44+GCvTUFquv2JDT5itXIMB8GA1UdIwQY
MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt
NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5
LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9VAUIhd
abN2ZVb/3sK/xSHkQyYDlRV+o45gcxIjqb4yCj0oXPBbbRssvApZsdWTRAOs58xD
V9coJBvTIf2qll+zeF5Ogp2ARt+q+mjHezXDkrBjGrv0i7BODSDf4XjQ1wUNRLDt
TwYspIwb35MqQqQjjsu+BPBh890ezA+JjBczavT4RwyKNf8SXaTfZrMmxvSj5jw4
oGnf26fDEUddE/oHiPSYj+wMPO1/OoSz0N7ZyRrH0V0xmtQErUisiUvJV3WFwnYY
5YhaIK3yjrOZbkdsifz8GzXD2HHeuWGjUPCcOKYhu+tOOE14z4W2eXPE9Ro+Pb5R
oo0NmYcvpjDKkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:08 2025 by rpki-client