Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier: Y93Bnf9vY39xJT1xKAQoyjzoJQeIDrci9EitSLM+fCU=
Subject key identifier: F5:8B:CF:A6:80:09:D8:61:AA:39:3F:29:30:33:C4:39:BD:63:4F:F0
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial: 0199FBB377190866EA30BC7E4D4F94B4BC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number: 0E1A
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: OklhlVV7j+oS66t5qd9gvgsDtoxfHCcbjObt470cKFA=)
2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:77:19:08:66:ea:30:bc:7e:4d:4f:94:b4:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=f58bcfa68009d861aa393f293033c439bd634ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:5a:9f:0e:a3:e4:56:8f:41:fa:2f:e5:5e:
ab:5d:6d:0b:1e:f2:9e:12:79:4d:09:f0:84:73:8f:
db:89:0a:f7:51:17:27:89:0c:25:e5:c2:29:ac:26:
ef:9d:60:58:dc:bd:3a:8b:65:54:93:44:5a:c3:c4:
68:cb:1f:b8:7c:25:0b:de:02:75:71:58:8e:11:94:
dc:16:72:51:7c:1d:02:c7:9e:21:20:7d:69:26:b7:
70:3d:e4:a9:c7:fe:9c:70:7e:85:01:d7:ff:76:03:
51:e2:9c:1e:b9:ff:ca:2d:8a:06:09:cd:b8:7d:f9:
30:d8:65:0e:b8:95:f1:fe:c7:11:14:17:f4:66:14:
db:59:33:bc:e0:90:0c:ec:c1:4e:67:d7:a0:01:e5:
60:b6:5a:dd:27:5b:5d:3e:ae:2d:89:19:cd:fa:ac:
83:df:2a:2b:2b:a0:a7:10:06:76:0e:45:30:09:73:
b7:26:6a:52:d9:48:c1:89:ad:4d:0c:28:d1:8e:60:
fb:ca:f3:e7:4e:24:aa:8c:f1:78:87:b0:f8:3e:fb:
ad:d4:2a:57:e8:05:25:7c:f9:a6:08:e8:c8:0b:7d:
3b:23:50:20:82:3f:60:54:18:0d:f2:13:3d:56:a8:
8d:9c:17:a2:1f:3c:7d:8a:da:81:4c:0a:70:81:09:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:CF:A6:80:09:D8:61:AA:39:3F:29:30:33:C4:39:BD:63:4F:F0
X509v3 Authority Key Identifier:
keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:14:5d:42:01:c1:a9:62:0b:81:66:c4:eb:b7:25:58:e5:
a2:ea:8d:e7:21:e4:04:ba:e5:03:93:33:48:05:bb:0b:26:2d:
0c:84:10:cc:f7:f0:0d:30:3e:bb:d4:35:12:8d:c8:64:88:b8:
97:38:c0:4e:60:b0:e5:ee:5a:48:9b:c4:08:31:74:5c:7f:b3:
d2:33:c8:ba:73:71:68:e9:83:50:db:49:14:db:88:10:14:36:
d9:fd:7e:5d:e6:f3:75:95:95:51:7c:de:c3:9c:72:9e:9c:4f:
2a:64:e1:d9:5e:18:99:85:6a:0b:31:db:a1:d0:9f:67:97:81:
38:05:2e:a7:c5:02:61:0c:f1:95:60:b1:a4:ab:bc:f1:ea:28:
18:76:11:76:5f:61:fa:12:08:19:18:1f:51:92:a7:af:28:d0:
75:72:d5:c6:2c:2e:75:b8:75:74:33:93:ff:37:ca:85:f0:13:
d7:c9:63:86:78:29:b8:02:10:c9:cf:57:c2:98:90:1f:31:3d:
a3:64:1c:ad:7b:b3:7f:04:8a:1c:22:e6:e1:01:0d:85:59:54:
92:04:72:c1:73:46:8a:61:88:df:68:e2:1b:5f:a1:93:92:a8:
0c:12:6d:ad:11:53:4e:b8:96:5d:7a:d5:78:1a:33:20:d5:ad:
4c:7d:85:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3cZCGbqMLx+TU+UtLwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi
ZjFjYjUwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EyhmNThiY2ZhNjgwMDlkODYxYWEzOTNmMjkzMDMzYzQzOWJkNjM0ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRanw6j5FaPQfov5V6rXW0LHvKe
EnlNCfCEc4/biQr3URcniQwl5cIprCbvnWBY3L06i2VUk0Raw8Royx+4fCUL3gJ1
cViOEZTcFnJRfB0Cx54hIH1pJrdwPeSpx/6ccH6FAdf/dgNR4pweuf/KLYoGCc24
ffkw2GUOuJXx/scRFBf0ZhTbWTO84JAM7MFOZ9egAeVgtlrdJ1tdPq4tiRnN+qyD
3yorK6CnEAZ2DkUwCXO3JmpS2UjBia1NDCjRjmD7yvPnTiSqjPF4h7D4Pvut1CpX
6AUlfPmmCOjIC307I1Aggj9gVBgN8hM9VqiNnBeiHzx9itqBTApwgQmeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWLz6aACdhhqjk/KTAzxDm9Y0/wMB8GA1UdIwQY
MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt
YTgwNjE2M2VjMjk0LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0
LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigAUXUIB
waliC4FmxOu3JVjlouqN5yHkBLrlA5MzSAW7CyYtDIQQzPfwDTA+u9Q1Eo3IZIi4
lzjATmCw5e5aSJvECDF0XH+z0jPIunNxaOmDUNtJFNuIEBQ22f1+XebzdZWVUXze
w5xynpxPKmTh2V4YmYVqCzHbodCfZ5eBOAUup8UCYQzxlWCxpKu88eooGHYRdl9h
+hIIGRgfUZKnryjQdXLVxiwudbh1dDOT/zfKhfAT18ljhngpuAIQyc9XwpiQHzE9
o2QcrXuzfwSKHCLm4QENhVlUkgRywXNGimGI32jiG1+hk5KoDBJtrRFTTriWXXrV
eBozINWtTH2FPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:49 2025 by rpki-client