Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: JK2873WReurR7VMWTqYZM716LkF9uicTzLTBh1IA/3w=
Subject key identifier: BE:20:B7:2E:6C:AD:F9:83:B2:89:57:69:B3:40:A9:4B:4D:82:78:12
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0199FD6AE906911855762B5E0B36F4E3BDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 9JNzawsizxi7Ev4UJEGn9qeFlJud44QoekwvwTnWPrw=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e9:06:91:18:55:76:2b:5e:0b:36:f4:e3:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=be20b72e6cadf983b2895769b340a94b4d827812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:f3:77:1b:fa:a8:15:dc:9b:8c:5b:9d:a9:
b4:3f:39:55:48:05:e3:1a:52:be:fc:57:d9:35:04:
da:26:7d:f3:95:35:5c:f1:ae:49:25:da:32:09:c3:
6f:c3:77:13:ff:48:44:96:6e:3a:ba:35:4d:c5:aa:
5b:f6:16:43:5d:cb:99:c5:bf:be:14:f0:ab:b2:97:
6e:7d:cc:e8:1a:cb:be:bd:7c:fe:b0:43:a4:cd:78:
fb:ea:83:8a:e0:f7:cf:07:16:1a:81:96:aa:be:4b:
8b:97:56:0e:c7:75:c3:60:8c:8c:3b:ba:eb:99:d9:
a5:ea:af:1c:97:ed:07:6d:a1:20:9d:6e:b2:66:9b:
41:4d:6f:a0:6f:14:8d:fc:bc:a6:01:95:84:83:6b:
0f:09:39:2e:74:8e:12:50:6c:95:83:f8:78:0b:bd:
1c:6a:f5:ba:9c:20:11:b7:82:25:15:8b:be:e6:c8:
1e:ec:75:04:cd:94:3e:24:0b:cd:e8:5a:49:2a:bd:
f2:d7:82:0b:f1:51:42:73:48:3b:4d:21:05:20:34:
7a:ad:d3:ed:4a:fb:ed:60:c6:51:96:65:da:00:a1:
bf:0d:70:7e:e5:99:89:9f:06:cc:89:83:71:ca:ab:
58:cb:62:6a:26:11:49:f2:ce:5d:c6:0f:a7:7d:61:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:B7:2E:6C:AD:F9:83:B2:89:57:69:B3:40:A9:4B:4D:82:78:12
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0a:00:df:b2:ee:5a:d9:ca:97:5a:85:a5:26:b0:48:04:ee:
81:9b:be:17:6d:a6:0f:9f:ea:18:0e:1d:28:50:1d:40:9d:98:
3d:fc:13:89:b6:29:e8:32:9d:fd:ea:58:cd:5c:28:a9:13:74:
f1:57:fa:d4:89:8c:1a:53:3a:0d:cd:6a:6a:1b:d7:60:76:a6:
53:a0:aa:64:48:11:d0:72:6f:b6:d7:dd:fb:11:34:06:96:93:
ed:fc:5f:1d:a1:ce:0c:ef:6b:02:4b:df:a7:88:eb:c1:ef:ff:
f6:fe:7a:16:48:bf:5b:01:57:72:5c:4a:52:d6:30:13:b9:08:
62:b5:39:29:55:44:0f:50:99:9e:72:5b:af:f7:84:77:35:8b:
4e:41:1b:79:28:b6:0a:25:2e:cb:11:63:e4:fc:a8:b4:87:7c:
18:8d:97:53:d1:a2:9f:e4:7e:4b:29:bb:2d:df:a1:3a:ba:7f:
f4:a2:0a:fe:5c:e9:79:f8:3e:27:ff:38:57:2a:52:8f:87:13:
f1:36:7b:4c:e5:e4:30:90:41:d3:9c:8a:ab:14:96:69:74:31:
2c:2f:83:55:c1:0e:45:12:21:28:64:f1:a2:e9:5f:20:64:11:
5f:b2:ba:db:31:52:69:d9:5f:be:1c:80:77:6a:33:79:38:5a:
3c:26:67:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9aukGkRhVditeCzb0472hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjUxMDE5MTcwMTA2WhcNMjUxMDIwMTcwMTA2WjAzMTEwLwYDVQQD
EyhiZTIwYjcyZTZjYWRmOTgzYjI4OTU3NjliMzQwYTk0YjRkODI3ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Xzdxv6qBXcm4xbnam0PzlVSAXj
GlK+/FfZNQTaJn3zlTVc8a5JJdoyCcNvw3cT/0hElm46ujVNxapb9hZDXcuZxb++
FPCrspdufczoGsu+vXz+sEOkzXj76oOK4PfPBxYagZaqvkuLl1YOx3XDYIyMO7rr
mdml6q8cl+0HbaEgnW6yZptBTW+gbxSN/LymAZWEg2sPCTkudI4SUGyVg/h4C70c
avW6nCARt4IlFYu+5sge7HUEzZQ+JAvN6FpJKr3y14IL8VFCc0g7TSEFIDR6rdPt
SvvtYMZRlmXaAKG/DXB+5ZmJnwbMiYNxyqtYy2JqJhFJ8s5dxg+nfWFG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4gty5srfmDsolXabNAqUtNgngSMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowoA37Lu
WtnKl1qFpSawSATugZu+F22mD5/qGA4dKFAdQJ2YPfwTibYp6DKd/epYzVwoqRN0
8Vf61ImMGlM6Dc1qahvXYHamU6CqZEgR0HJvttfd+xE0BpaT7fxfHaHODO9rAkvf
p4jrwe//9v56Fki/WwFXclxKUtYwE7kIYrU5KVVED1CZnnJbr/eEdzWLTkEbeSi2
CiUuyxFj5PyotId8GI2XU9Gin+R+Sym7Ld+hOrp/9KIK/lzpefg+J/84VypSj4cT
8TZ7TOXkMJBB05yKqxSWaXQxLC+DVcEORRIhKGTxoulfIGQRX7K62zFSadlfvhyA
d2ozeThaPCZnTA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:49 2025 by rpki-client