Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: IahJ8dIMjI2eBC/0hidQKlpWh8kLBIlKXv4eWMg8dIA=
Subject key identifier: 1C:5E:79:38:AA:68:F1:27:1E:E0:6A:DD:37:C7:3D:03:F6:6B:62:B1
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 0199FD340B12C486E7F8B8B1F7420DE2855C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: OmpDCg3OiySNVhtXEi9Ct2Keg9bFvByWTv5EauxUksU=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0b:12:c4:86:e7:f8:b8:b1:f7:42:0d:e2:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=1c5e7938aa68f1271ee06add37c73d03f66b62b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:b1:65:99:9c:e3:5e:0f:66:8e:bd:e2:90:
3d:23:da:7a:aa:7a:32:27:36:b1:aa:2d:1a:1d:45:
a2:41:a5:e7:47:de:30:8f:4d:cb:7c:ee:ae:54:3e:
b4:b8:80:ea:1c:b9:45:b2:36:18:3e:71:50:6c:4a:
b9:a2:1a:bc:3d:4f:a3:83:39:1e:7d:30:fd:0e:91:
11:fc:c0:3c:98:a6:96:a4:85:dc:76:3e:ad:b4:b2:
3a:93:cd:1b:20:01:51:91:46:4f:57:9e:44:99:33:
21:7a:9c:3f:ec:79:e6:14:c9:b9:1c:a1:7e:96:fd:
21:ac:7e:8b:9c:5b:0f:65:0c:3c:8a:4d:4b:7b:51:
25:c6:de:3b:21:46:d1:e9:ff:87:fd:0f:a2:35:b4:
bd:58:15:4b:41:f6:69:0b:7b:7d:8d:03:78:c7:3b:
23:4b:05:20:48:f6:f6:a0:bd:b6:37:4b:40:b8:7c:
aa:27:8e:70:5d:9b:2c:40:6f:5c:5c:92:bc:bf:b3:
3f:27:33:fa:dd:bd:30:8e:c5:8f:2a:bd:ad:4a:ec:
80:c5:f7:c8:33:2b:b7:c9:32:6a:d6:72:48:1d:09:
fe:00:81:53:02:3b:60:70:af:7a:d9:b9:eb:76:81:
a3:ce:a8:7e:f2:f5:89:52:5c:20:b0:21:69:f5:9c:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:79:38:AA:68:F1:27:1E:E0:6A:DD:37:C7:3D:03:F6:6B:62:B1
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:50:c5:33:d4:49:cc:7e:e5:fe:2f:14:5c:1d:72:80:57:00:
ef:20:2f:4c:a2:55:2f:f3:67:63:0e:e9:f0:7a:77:2c:3b:75:
17:0f:c9:08:ba:06:4b:08:8c:6f:49:f4:0b:b1:4c:d9:59:2d:
8c:a2:3b:a9:44:19:71:c8:20:7b:c3:9b:7a:a9:1c:d9:e8:a7:
af:19:6f:7e:fa:c5:4c:a5:92:ca:23:74:8b:72:57:ea:12:e3:
14:61:2e:77:1a:c4:9f:2e:9b:f8:8b:8e:d4:11:3e:7f:e3:04:
bb:2a:e6:63:51:98:af:a3:05:a0:f9:8b:3d:11:4b:67:f4:bb:
8c:c6:2b:9e:dc:31:97:9e:3c:14:07:eb:53:c5:a8:e2:25:4b:
4a:58:1d:d0:3d:ca:50:d9:a7:03:b0:8f:30:76:b2:b6:47:d3:
1d:9c:7c:62:91:e9:d6:ed:4b:7b:df:3d:ad:4f:8c:54:65:12:
51:cc:65:90:a5:a8:2c:92:0c:9d:12:2d:ed:68:99:5d:55:b3:
04:04:23:fc:e7:f2:2a:8a:75:19:ae:ae:92:89:4f:98:90:2c:
a2:f5:96:c0:c7:9f:29:79:d2:84:ca:2e:68:a0:d5:d2:cc:d3:
f9:51:63:e8:0c:77:b7:bc:74:78:34:51:0e:1b:ba:90:33:1f:
6e:ea:54:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAsSxIbn+Lix90IN4oVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky
ZDc5M2QwHhcNMjUxMDE5MTYwMTEwWhcNMjUxMDIwMTYwMTEwWjAzMTEwLwYDVQQD
EygxYzVlNzkzOGFhNjhmMTI3MWVlMDZhZGQzN2M3M2QwM2Y2NmI2MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhSxZZmc414PZo694pA9I9p6qnoy
Jzaxqi0aHUWiQaXnR94wj03LfO6uVD60uIDqHLlFsjYYPnFQbEq5ohq8PU+jgzke
fTD9DpER/MA8mKaWpIXcdj6ttLI6k80bIAFRkUZPV55EmTMhepw/7HnmFMm5HKF+
lv0hrH6LnFsPZQw8ik1Le1Elxt47IUbR6f+H/Q+iNbS9WBVLQfZpC3t9jQN4xzsj
SwUgSPb2oL22N0tAuHyqJ45wXZssQG9cXJK8v7M/JzP63b0wjsWPKr2tSuyAxffI
Myu3yTJq1nJIHQn+AIFTAjtgcK962bnrdoGjzqh+8vWJUlwgsCFp9ZyjiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxeeTiqaPEnHuBq3TfHPQP2a2KxMB8GA1UdIwQY
MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt
NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4
LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglDFM9RJ
zH7l/i8UXB1ygFcA7yAvTKJVL/NnYw7p8Hp3LDt1Fw/JCLoGSwiMb0n0C7FM2Vkt
jKI7qUQZccgge8Obeqkc2einrxlvfvrFTKWSyiN0i3JX6hLjFGEudxrEny6b+IuO
1BE+f+MEuyrmY1GYr6MFoPmLPRFLZ/S7jMYrntwxl548FAfrU8Wo4iVLSlgd0D3K
UNmnA7CPMHaytkfTHZx8YpHp1u1Le989rU+MVGUSUcxlkKWoLJIMnRIt7WiZXVWz
BAQj/OfyKop1Ga6ukolPmJAsovWWwMefKXnShMouaKDV0szT+VFj6Ax3t7x0eDRR
Dhu6kDMfbupUYg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:08 2025 by rpki-client