Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: ee/axreT9hmvpGCiKM+XrzzyNmJPatBLAsqIIRDRyzI=
Subject key identifier: 5A:F6:1A:2E:C6:35:A0:52:61:9B:8D:40:72:54:4B:3B:D7:A1:E4:9D
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0199FC216009FA55A5F58F4CABF31E03A30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: ayvA3HKTYFoEREUGZ6YFWLuGiILLRk9ikOVAfhuuJik=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
4: u5lPRSy8TTjSrS9sU6cP6pvHWTY.roa (hash: nHXVS6U6ny2U+TZRyYNc9upvg7oq5CrJlEbjCC7RIaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:60:09:fa:55:a5:f5:8f:4c:ab:f3:1e:03:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=5af61a2ec635a052619b8d4072544b3bd7a1e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:0d:43:4c:d8:83:d5:91:42:2e:52:e1:60:
96:d6:d1:3d:a5:51:e3:3b:92:d6:f8:00:82:f7:24:
a8:5c:02:0e:eb:40:6c:1b:8d:4c:18:af:8a:bf:68:
67:74:bc:ee:4b:96:31:42:53:a2:f8:8b:2b:7d:79:
ea:93:90:d8:fe:fe:3c:f5:10:3d:48:56:3f:85:fb:
27:31:cd:81:5f:68:18:10:2b:e2:6e:bd:92:b6:68:
51:af:3b:ab:4b:75:5c:64:6a:79:6c:94:d3:48:86:
72:0f:1d:9c:e3:8a:b8:75:7f:59:74:68:b9:df:01:
c0:9d:25:62:19:86:b0:6d:61:97:2f:2b:63:95:23:
49:98:ab:69:c4:6f:81:e2:4d:39:ad:0c:0b:79:b8:
71:56:cc:1b:01:f8:53:0d:d8:4b:35:60:37:d2:80:
43:ff:f0:15:84:f4:84:61:7d:de:48:95:67:9e:72:
d0:7b:9c:93:51:7f:37:ec:86:5d:9a:64:7e:37:b5:
af:35:44:40:a7:43:98:80:2e:45:be:fd:4c:d7:4e:
ef:6f:3b:ec:60:7a:ac:25:6e:2d:09:84:37:03:70:
13:66:97:f9:eb:b0:04:d9:63:a2:1c:3f:80:0c:67:
02:47:5d:43:c1:5f:91:a4:95:11:83:11:76:4b:63:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:1A:2E:C6:35:A0:52:61:9B:8D:40:72:54:4B:3B:D7:A1:E4:9D
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:08:8d:39:2c:6f:f6:ba:ac:5d:75:ae:4e:ea:2b:70:c1:fc:
f6:e0:17:f7:ec:94:f2:05:51:02:62:32:6b:96:eb:01:9b:b3:
6f:c4:02:8f:01:9d:3a:4e:81:05:56:6c:91:d8:a9:3f:77:10:
8a:f3:49:10:f0:32:c5:6a:09:18:1e:31:a3:38:a7:da:6a:9c:
b1:f2:aa:65:87:eb:71:8e:04:ac:0c:68:47:01:88:5a:24:57:
a1:01:4e:be:7c:b0:b4:d4:b1:6b:32:cc:b4:1e:2a:1b:05:1c:
ac:81:8a:ba:bb:82:5e:cf:69:2d:7f:fe:4c:5a:4f:fa:f0:10:
57:37:ca:21:28:5f:90:10:8a:e5:4b:2b:54:82:c0:71:bf:9d:
db:f3:1f:b0:78:c1:e4:0c:c2:b4:bf:02:58:af:18:c6:d0:3e:
3c:31:43:8d:55:c4:cd:98:f0:cd:89:1e:98:08:c9:07:be:84:
7b:cb:41:0f:8a:f5:2e:b8:b8:52:44:12:86:0d:a8:65:ef:34:
6a:b9:d9:fc:78:bb:c7:f2:c4:8b:bc:76:10:ee:f3:51:3b:e0:
85:a9:72:2f:8e:69:13:89:1e:b1:9c:e7:0a:e4:fd:03:37:e5:
19:ca:dd:88:b1:e4:23:dc:06:f8:3a:45:fb:e4:0f:26:33:2f:
3e:03:6c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWAJ+lWl9Y9Mq/MeA6MLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg1YWY2MWEyZWM2MzVhMDUyNjE5YjhkNDA3MjU0NGIzYmQ3YTFlNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCsNQ0zYg9WRQi5S4WCW1tE9pVHj
O5LW+ACC9ySoXAIO60BsG41MGK+Kv2hndLzuS5YxQlOi+IsrfXnqk5DY/v489RA9
SFY/hfsnMc2BX2gYECvibr2StmhRrzurS3VcZGp5bJTTSIZyDx2c44q4dX9ZdGi5
3wHAnSViGYawbWGXLytjlSNJmKtpxG+B4k05rQwLebhxVswbAfhTDdhLNWA30oBD
//AVhPSEYX3eSJVnnnLQe5yTUX837IZdmmR+N7WvNURAp0OYgC5Fvv1M107vbzvs
YHqsJW4tCYQ3A3ATZpf567AE2WOiHD+ADGcCR11DwV+RpJURgxF2S2NyFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr2Gi7GNaBSYZuNQHJUSzvXoeSdMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswiNOSxv
9rqsXXWuTuorcMH89uAX9+yU8gVRAmIya5brAZuzb8QCjwGdOk6BBVZskdipP3cQ
ivNJEPAyxWoJGB4xozin2mqcsfKqZYfrcY4ErAxoRwGIWiRXoQFOvnywtNSxazLM
tB4qGwUcrIGKuruCXs9pLX/+TFpP+vAQVzfKIShfkBCK5UsrVILAcb+d2/MfsHjB
5AzCtL8CWK8YxtA+PDFDjVXEzZjwzYkemAjJB76Ee8tBD4r1Lri4UkQShg2oZe80
arnZ/Hi7x/LEi7x2EO7zUTvghalyL45pE4kesZznCuT9AzflGcrdiLHkI9wG+DpF
++QPJjMvPgNs7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:08 2025 by rpki-client