Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: vQ0E1/cBlsuePCRcFoMIQkWKpLqhpy7pLueaOr9wS1M=
Subject key identifier: 9F:85:00:04:7D:EC:18:F0:EA:E5:DA:97:90:74:8E:D2:8E:31:CC:7F
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 0199FBEB719C386B1AB2EA1756AE01D194B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0EDF
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: 6lDe1z3SaXW1HlxcZLrwyGg/D/RA11OAnBQzGRC8IGo=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:71:9c:38:6b:1a:b2:ea:17:56:ae:01:d1:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=9f8500047dec18f0eae5da9790748ed28e31cc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:f0:c0:42:6d:4b:9c:22:e6:a5:a6:c3:4a:
03:81:ee:bf:e1:fe:c9:db:68:45:30:e0:5c:21:66:
cd:cf:02:07:92:0d:dc:9b:b9:af:04:ca:d1:cf:b9:
34:fc:03:86:d4:74:8c:12:d4:38:e4:81:df:2e:2d:
45:ac:14:a4:ef:dd:22:62:65:e6:d6:b0:23:06:13:
02:4c:ff:74:84:07:80:14:f5:d8:c0:a5:64:b7:a8:
03:50:f6:27:51:94:76:b3:32:de:98:60:f0:93:80:
fa:a5:50:e9:86:f0:8b:0d:cd:e0:71:30:08:ef:0f:
d4:9e:05:cb:b4:1c:ee:ea:ec:4c:42:54:4e:c4:07:
18:75:a7:90:31:c1:f3:90:64:6b:ea:6c:ce:0a:d1:
9f:23:f3:63:b4:c1:48:29:11:6e:00:bd:82:80:f9:
b9:a5:aa:ed:dd:38:ab:71:cf:67:8c:76:15:f4:7d:
a3:cd:b3:21:10:95:39:6b:48:f3:7c:0b:85:c1:ae:
6b:1e:f9:62:d0:c5:05:f3:e3:c6:a5:7d:41:4a:8d:
34:b2:46:ce:9e:29:7f:5a:cf:9d:61:2d:f6:90:74:
74:f0:6a:c5:94:4c:48:f5:25:69:04:23:62:d6:c9:
26:50:30:88:cc:9f:72:11:1a:e7:11:f8:51:79:b1:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:00:04:7D:EC:18:F0:EA:E5:DA:97:90:74:8E:D2:8E:31:CC:7F
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:91:5b:39:01:5f:9a:d0:92:c5:e0:7a:35:c9:e7:ea:3d:
05:4b:e5:e1:57:18:e2:01:3c:53:ea:3e:32:d9:1d:5e:6b:74:
4a:28:7f:60:1a:d7:71:7a:f1:c9:b6:ab:7f:0e:56:d5:53:83:
cd:c9:51:fb:5c:2e:bb:9c:68:81:6c:a0:ed:f4:2f:b4:78:45:
fe:5c:88:67:25:01:aa:29:19:ab:db:e6:fa:0b:80:4a:1a:31:
fc:91:bc:e6:f2:61:3d:94:71:38:89:0b:99:29:77:10:43:fd:
6f:8d:74:9e:76:af:f2:6d:02:00:2e:64:55:33:dd:d0:46:85:
b0:8a:8c:7b:99:5e:1c:97:27:04:7c:ec:6a:3b:5a:45:2a:47:
9a:4d:a6:7a:ea:37:e8:2a:9f:d8:29:fc:e2:2c:45:85:fd:7b:
b5:8f:07:0d:76:d5:55:94:96:5e:04:4d:2d:19:9f:ca:ed:f3:
ad:12:f6:18:f8:36:7d:a8:33:e8:04:ff:f6:76:7e:28:cd:3c:
ec:91:0d:d7:3e:c0:8f:83:f5:86:ed:60:9c:83:7e:93:0b:06:
d2:67:b8:9e:a0:43:80:42:44:84:f4:ef:ab:39:44:6f:f1:c3:
0b:9a:00:32:fa:73:21:eb:59:00:5c:0b:c0:1f:e7:78:e5:c4:
88:59:c3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763GcOGsasuoXVq4B0ZSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjUxMDE5MTAwMjE1WhcNMjUxMDIwMTAwMjE1WjAzMTEwLwYDVQQD
Eyg5Zjg1MDAwNDdkZWMxOGYwZWFlNWRhOTc5MDc0OGVkMjhlMzFjYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J7wwEJtS5wi5qWmw0oDge6/4f7J
22hFMOBcIWbNzwIHkg3cm7mvBMrRz7k0/AOG1HSMEtQ45IHfLi1FrBSk790iYmXm
1rAjBhMCTP90hAeAFPXYwKVkt6gDUPYnUZR2szLemGDwk4D6pVDphvCLDc3gcTAI
7w/UngXLtBzu6uxMQlROxAcYdaeQMcHzkGRr6mzOCtGfI/NjtMFIKRFuAL2CgPm5
part3Tircc9njHYV9H2jzbMhEJU5a0jzfAuFwa5rHvli0MUF8+PGpX1BSo00skbO
nil/Ws+dYS32kHR08GrFlExI9SVpBCNi1skmUDCIzJ9yERrnEfhRebHPKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+FAAR97Bjw6uXal5B0jtKOMcx/MB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHSRWzkB
X5rQksXgejXJ5+o9BUvl4VcY4gE8U+o+MtkdXmt0Sih/YBrXcXrxybarfw5W1VOD
zclR+1wuu5xogWyg7fQvtHhF/lyIZyUBqikZq9vm+guAShox/JG85vJhPZRxOIkL
mSl3EEP9b410nnav8m0CAC5kVTPd0EaFsIqMe5leHJcnBHzsajtaRSpHmk2meuo3
6Cqf2Cn84ixFhf17tY8HDXbVVZSWXgRNLRmfyu3zrRL2GPg2fagz6AT/9nZ+KM08
7JEN1z7Aj4P1hu1gnIN+kwsG0me4nqBDgEJEhPTvqzlEb/HDC5oAMvpzIetZAFwL
wB/neOXEiFnDVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:13 2025 by rpki-client