
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: WJNflvbil965nnAjp1gmdqzykgrvRQ1edUcgmZydjJY=
Subject key identifier: B3:78:D6:A6:74:75:1C:37:E1:CC:09:97:E0:C6:F8:19:66:2A:E8:36
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0199FB0EE9AED0EB7CB4ECF8C409229B46B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 05FD
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: rYx+GNeUAwFZc1ARIuqBpfEFIK8usd6CD0Fq+ZF9/ss=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e9:ae:d0:eb:7c:b4:ec:f8:c4:09:22:9b:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=b378d6a674751c37e1cc0997e0c6f819662ae836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:e4:bd:3e:5e:a2:57:36:62:ad:15:a2:21:
01:0f:68:87:46:e3:c3:08:09:8a:db:87:d9:1c:35:
14:3c:2b:66:41:f7:5e:61:50:7c:d5:f2:1d:b4:f7:
3c:6c:44:1f:9c:42:eb:fa:d7:e2:7a:32:1c:2d:55:
84:2f:45:98:c9:9e:f4:53:79:4a:c9:19:dd:57:7a:
a4:d6:07:61:78:98:f3:f8:91:8e:70:73:44:3a:6d:
2d:4d:91:c6:3b:1d:dc:18:96:3e:28:0d:98:78:1c:
62:a6:e9:a7:1a:b9:6c:7b:f5:67:31:77:99:aa:9c:
27:94:e1:9e:da:cc:36:77:e3:04:b9:e3:98:01:19:
d1:e6:2c:34:c2:44:62:64:30:a5:b5:5a:5c:75:bf:
49:dd:83:24:3f:a7:85:57:20:60:94:9c:06:dd:c7:
15:b6:29:ae:7c:8c:89:94:70:2e:c0:98:a2:75:ed:
a9:d7:53:71:be:ed:23:e4:86:50:b5:a7:e7:a6:37:
12:18:2a:28:8b:7e:3b:94:dc:55:be:3d:8b:64:32:
15:f9:42:21:85:63:88:5c:3a:24:a8:68:92:cf:9b:
8b:8d:27:99:75:d8:48:00:f3:d7:03:98:95:d7:1b:
92:56:b6:f7:19:98:26:75:77:bc:fd:85:c2:55:d2:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:D6:A6:74:75:1C:37:E1:CC:09:97:E0:C6:F8:19:66:2A:E8:36
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:03:df:dc:42:65:9e:db:c0:b1:03:23:09:bd:21:3a:f1:
bd:78:ae:3a:c3:e0:33:19:4b:aa:97:ed:8f:bc:ed:cd:af:6a:
3b:06:15:1d:19:a5:89:48:5c:67:35:8d:ce:75:4b:9d:22:bc:
03:06:61:6d:79:6d:69:13:9f:bd:33:1b:61:43:d8:7b:e0:21:
ba:22:12:fe:03:68:5d:46:08:65:9c:c1:fe:72:01:f6:ec:90:
f2:02:3c:ff:54:44:04:b0:ff:ce:43:53:bc:37:57:1f:af:ea:
c8:fb:2d:54:6a:0a:e7:6d:31:39:8d:d2:9a:42:93:a8:45:43:
3b:6d:95:9d:dd:0a:20:05:92:75:db:ec:ed:b2:5e:e9:b5:88:
5b:e1:30:ef:c0:66:60:c1:13:4e:3c:e4:33:9d:dc:3d:9d:c9:
eb:1a:4d:bd:91:52:ea:d8:42:cf:d7:33:ce:86:e7:cd:1c:7b:
19:19:3c:ad:a4:8c:ea:21:55:17:6d:3c:99:20:06:95:e4:aa:
8c:96:e6:7a:49:2d:64:b9:63:c9:79:eb:1c:9b:17:0c:62:81:
ba:cb:7a:55:a8:63:ad:5e:b4:28:5b:60:82:f0:8f:67:8a:ee:
96:a8:ec:65:b9:e3:d2:09:0d:b7:ac:2f:13:02:89:5b:da:a8:
8b:60:4c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dumu0Ot8tOz4xAkim0azMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUxMDE5MDYwMTIyWhcNMjUxMDIwMDYwMTIyWjAzMTEwLwYDVQQD
EyhiMzc4ZDZhNjc0NzUxYzM3ZTFjYzA5OTdlMGM2ZjgxOTY2MmFlODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WzkvT5eolc2Yq0VoiEBD2iHRuPD
CAmK24fZHDUUPCtmQfdeYVB81fIdtPc8bEQfnELr+tfiejIcLVWEL0WYyZ70U3lK
yRndV3qk1gdheJjz+JGOcHNEOm0tTZHGOx3cGJY+KA2YeBxipumnGrlse/VnMXeZ
qpwnlOGe2sw2d+MEueOYARnR5iw0wkRiZDCltVpcdb9J3YMkP6eFVyBglJwG3ccV
timufIyJlHAuwJiide2p11Nxvu0j5IZQtafnpjcSGCooi347lNxVvj2LZDIV+UIh
hWOIXDokqGiSz5uLjSeZddhIAPPXA5iV1xuSVrb3GZgmdXe8/YXCVdLicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN41qZ0dRw34cwJl+DG+BlmKug2MB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgegD39xC
ZZ7bwLEDIwm9ITrxvXiuOsPgMxlLqpftj7ztza9qOwYVHRmliUhcZzWNznVLnSK8
AwZhbXltaROfvTMbYUPYe+AhuiIS/gNoXUYIZZzB/nIB9uyQ8gI8/1REBLD/zkNT
vDdXH6/qyPstVGoK520xOY3SmkKTqEVDO22Vnd0KIAWSddvs7bJe6bWIW+Ew78Bm
YMETTjzkM53cPZ3J6xpNvZFS6thCz9czzobnzRx7GRk8raSM6iFVF208mSAGleSq
jJbmekktZLljyXnrHJsXDGKBust6VahjrV60KFtggvCPZ4rulqjsZbnj0gkNt6wv
EwKJW9qoi2BM2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:49 2025 by rpki-client