Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: WQ9KBkr62I56uYMC9wfY8KB96VTaIl3evyn0Nwly424=
Subject key identifier: 92:36:CA:75:D8:7E:BB:12:0C:F5:D4:91:3B:02:D7:C1:9B:CF:61:EC
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0199FC58CBB79FD90025D7988DB5576DE212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 08E7
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: kuax4gt50NxNXDqIjmGLJiZMA7r1aS9ERJQvr1uPmco=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cb:b7:9f:d9:00:25:d7:98:8d:b5:57:6d:e2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=9236ca75d87ebb120cf5d4913b02d7c19bcf61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:40:ab:95:42:11:49:bb:9d:9d:bf:ac:45:
02:89:8f:da:57:fb:30:61:8c:01:8f:ad:06:bf:ea:
f6:cd:13:a8:35:af:5f:2c:5f:47:6f:37:d6:8e:47:
94:bd:6f:63:70:d7:83:18:18:7a:e5:14:ff:93:94:
ad:7a:7a:1f:a3:82:c1:1d:38:28:84:44:da:5f:1f:
2a:cc:e6:47:73:bd:13:07:c1:2b:bf:ef:e8:a3:9e:
a1:7c:b1:5c:70:38:aa:fa:d6:e8:44:80:84:24:70:
ab:72:ee:21:01:24:4f:d9:c3:97:e8:9e:73:2f:c3:
07:53:8e:fe:62:a9:bb:ea:ba:d6:8e:60:2d:52:0e:
b5:49:b5:31:fa:87:6c:83:90:a1:dd:4d:f6:de:2d:
69:af:00:f4:a3:4c:a0:19:96:87:56:8f:61:06:29:
52:b7:c7:ac:12:5e:93:a8:ae:3e:83:ae:4c:78:d1:
07:56:26:83:a3:ce:63:b0:2b:a5:08:1a:2c:9a:19:
28:78:f3:60:87:ea:d2:57:fa:53:bc:96:61:b1:d7:
2b:ba:c9:66:67:23:55:56:0e:cc:64:51:0a:54:ef:
7c:4a:df:f4:63:06:c4:a1:fb:da:8b:d4:df:55:99:
80:21:31:40:24:d6:3c:81:ce:80:a8:b6:42:62:da:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:CA:75:D8:7E:BB:12:0C:F5:D4:91:3B:02:D7:C1:9B:CF:61:EC
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:22:6b:b5:3b:04:b0:9b:68:d7:e1:92:fe:31:3b:55:bd:0b:
ae:0f:0b:55:fc:c8:8f:38:a0:49:c3:e7:ed:3e:df:f1:bf:1f:
aa:26:f6:f5:15:d6:03:51:47:73:9d:91:6f:20:ff:ad:72:5a:
6f:97:ff:79:f6:c6:93:69:1b:43:9a:65:8d:c5:b6:d1:c9:62:
22:d8:7b:f9:3e:92:fd:0e:cf:19:25:21:72:79:cb:21:16:88:
f5:88:bc:a0:5a:91:bc:89:9e:f9:07:d4:49:ab:9b:b2:90:f6:
57:ab:a5:ea:96:c5:83:a3:14:85:17:ad:19:13:f5:e6:d7:c8:
4f:b4:3c:27:bc:55:55:c7:84:86:b4:6a:2f:a6:f0:e0:20:1a:
a2:4f:b5:ce:06:1e:f5:b6:30:e3:29:5e:db:80:9a:a6:ba:c2:
30:02:7b:e4:84:d4:27:94:61:b1:9d:2e:a6:b7:0d:e8:5f:f5:
7a:42:ea:13:75:d0:fb:88:54:c4:3f:41:f3:21:d6:f3:78:ec:
47:58:a6:14:a6:48:0c:96:2f:0b:3b:98:0c:7f:7b:45:7c:8a:
e5:91:ef:45:1e:8f:ff:d3:56:a5:c2:6a:46:b9:17:37:ee:02:
6b:ea:8c:e0:fe:c9:62:4f:d2:a8:8c:98:bc:7c:69:1c:3e:2b:
3e:f3:a6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMu3n9kAJdeYjbVXbeISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl
ZThhZTYwHhcNMjUxMDE5MTIwMTQxWhcNMjUxMDIwMTIwMTQxWjAzMTEwLwYDVQQD
Eyg5MjM2Y2E3NWQ4N2ViYjEyMGNmNWQ0OTEzYjAyZDdjMTliY2Y2MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1Aq5VCEUm7nZ2/rEUCiY/aV/sw
YYwBj60Gv+r2zROoNa9fLF9HbzfWjkeUvW9jcNeDGBh65RT/k5Stenofo4LBHTgo
hETaXx8qzOZHc70TB8Erv+/oo56hfLFccDiq+tboRICEJHCrcu4hASRP2cOX6J5z
L8MHU47+Yqm76rrWjmAtUg61SbUx+odsg5Ch3U323i1prwD0o0ygGZaHVo9hBilS
t8esEl6TqK4+g65MeNEHViaDo85jsCulCBosmhkoePNgh+rSV/pTvJZhsdcruslm
ZyNVVg7MZFEKVO98St/0YwbEofvai9TfVZmAITFAJNY8gc6AqLZCYtpv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI2ynXYfrsSDPXUkTsC18Gbz2HsMB8GA1UdIwQY
MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut
M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1
LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCJrtTsE
sJto1+GS/jE7Vb0Lrg8LVfzIjzigScPn7T7f8b8fqib29RXWA1FHc52RbyD/rXJa
b5f/efbGk2kbQ5pljcW20cliIth7+T6S/Q7PGSUhcnnLIRaI9Yi8oFqRvIme+QfU
SaubspD2V6ul6pbFg6MUhRetGRP15tfIT7Q8J7xVVceEhrRqL6bw4CAaok+1zgYe
9bYw4yle24CaprrCMAJ75ITUJ5RhsZ0uprcN6F/1ekLqE3XQ+4hUxD9B8yHW83js
R1imFKZIDJYvCzuYDH97RXyK5ZHvRR6P/9NWpcJqRrkXN+4Ca+qM4P7JYk/SqIyY
vHxpHD4rPvOmLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:26 2025 by rpki-client