Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: G51fCajpin0ojoNW9u6e52X+Om5BsVjodS2txng9OUI=
Subject key identifier: DE:7D:D6:DB:53:A9:FC:95:A1:9E:8E:99:CF:FF:BD:31:5A:07:27:41
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019A00358F4370CDE51B25A2C547F89FD954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:41 +0000
Manifest this update: Mon 20 Oct 2025 06:01:41 +0000
Manifest next update: Tue 21 Oct 2025 06:01:41 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: OxbWv6dyCmNZw2l1h+ee9EA4UhITihsxhGB3ONTkiK0=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:8f:43:70:cd:e5:1b:25:a2:c5:47:f8:9f:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Oct 20 06:01:41 2025 GMT
Not After : Oct 21 06:01:41 2025 GMT
Subject: CN=de7dd6db53a9fc95a19e8e99cfffbd315a072741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:40:87:25:d9:74:d6:a1:cd:d9:d4:1a:c5:
e8:5a:ce:90:8e:fc:6a:53:a5:bc:e4:0e:f6:2c:bc:
5a:9a:f5:3c:b8:09:af:ac:4a:0a:eb:97:4c:fc:e7:
7f:8e:21:04:58:c7:59:51:b2:df:99:8e:23:5c:a0:
f4:62:6a:63:20:55:c8:94:2f:08:62:0e:0c:f8:c0:
4a:e4:8c:1f:f7:79:b2:a7:ca:0b:fa:34:54:11:62:
54:c0:71:81:18:da:15:ba:e8:a8:18:26:f4:ca:3c:
21:95:c1:60:72:5e:6c:c6:65:da:06:7b:11:fb:a3:
41:5c:38:b1:a7:d1:2e:0a:ba:e2:7c:a8:6a:1b:d3:
87:99:06:6b:96:b1:75:8d:25:98:d2:b6:1a:f1:23:
82:5b:ac:ea:53:b9:de:8e:4a:4a:32:f8:3d:da:8c:
10:26:e9:9d:6b:78:29:a9:09:fc:89:98:3c:29:b3:
1d:31:cb:82:3f:3a:d9:ff:d1:61:00:09:56:0f:97:
60:77:e1:ab:02:d8:1b:f4:82:1a:31:07:e5:68:44:
b3:79:b9:43:80:93:59:fb:9c:53:53:58:ab:76:78:
52:52:7f:6b:30:f3:9b:2a:35:85:a7:94:8d:62:e3:
2b:bf:8e:22:85:b9:7d:a2:43:44:e1:4f:57:38:ce:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:D6:DB:53:A9:FC:95:A1:9E:8E:99:CF:FF:BD:31:5A:07:27:41
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b2:79:f0:0b:5b:99:6c:74:2d:13:a6:70:2c:15:f1:9f:a1:
b4:0b:78:2c:50:f1:b9:44:e6:05:17:1d:a4:6a:40:27:f0:49:
27:8d:92:b9:bd:9c:23:05:25:f1:ae:d4:0c:64:5a:f3:1f:0f:
c6:63:53:52:49:92:60:d0:44:7c:32:cd:53:5b:e2:74:bc:93:
fa:69:c5:47:50:dc:a8:44:74:f5:15:7f:e0:19:48:54:14:4e:
66:dd:44:7f:92:3d:69:2c:6c:45:d5:21:fc:98:f2:28:6f:22:
a0:32:0c:6c:f6:c9:5d:df:13:37:92:9d:97:fb:a2:6a:7f:d6:
b2:6e:4f:24:25:67:38:cd:e7:a6:ed:52:e3:2c:31:b4:14:bd:
9b:a6:7f:f6:02:92:ae:18:e0:c2:c4:46:ac:6e:18:0e:6f:32:
cd:43:0b:6d:4a:e6:2e:60:c1:7b:ce:ef:d9:ec:e2:9d:d7:21:
1f:57:d7:58:da:b1:83:ce:ae:05:b6:f4:4b:c3:21:ea:16:cd:
43:c4:99:b2:cf:48:06:6d:4c:6d:1c:4a:f0:d3:37:84:06:7a:
9b:93:bf:7b:82:10:d2:0e:61:e0:79:a6:1e:3e:a0:d9:71:44:
c8:82:f3:e9:7b:09:8a:43:54:31:4e:2b:49:70:a4:53:99:b8:
ad:e8:ff:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANY9DcM3lGyWixUf4n9lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjUxMDIwMDYwMTQxWhcNMjUxMDIxMDYwMTQxWjAzMTEwLwYDVQQD
EyhkZTdkZDZkYjUzYTlmYzk1YTE5ZThlOTljZmZmYmQzMTVhMDcyNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU9AhyXZdNahzdnUGsXoWs6Qjvxq
U6W85A72LLxamvU8uAmvrEoK65dM/Od/jiEEWMdZUbLfmY4jXKD0YmpjIFXIlC8I
Yg4M+MBK5Iwf93myp8oL+jRUEWJUwHGBGNoVuuioGCb0yjwhlcFgcl5sxmXaBnsR
+6NBXDixp9EuCrrifKhqG9OHmQZrlrF1jSWY0rYa8SOCW6zqU7nejkpKMvg92owQ
Jumda3gpqQn8iZg8KbMdMcuCPzrZ/9FhAAlWD5dgd+GrAtgb9IIaMQflaESzeblD
gJNZ+5xTU1irdnhSUn9rMPObKjWFp5SNYuMrv44ihbl9okNE4U9XOM7L9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN591ttTqfyVoZ6Omc//vTFaBydBMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLJ58Atb
mWx0LROmcCwV8Z+htAt4LFDxuUTmBRcdpGpAJ/BJJ42Sub2cIwUl8a7UDGRa8x8P
xmNTUkmSYNBEfDLNU1vidLyT+mnFR1DcqER09RV/4BlIVBROZt1Ef5I9aSxsRdUh
/JjyKG8ioDIMbPbJXd8TN5Kdl/uian/Wsm5PJCVnOM3npu1S4ywxtBS9m6Z/9gKS
rhjgwsRGrG4YDm8yzUMLbUrmLmDBe87v2ezindchH1fXWNqxg86uBbb0S8Mh6hbN
Q8SZss9IBm1MbRxK8NM3hAZ6m5O/e4IQ0g5h4HmmHj6g2XFEyILz6XsJikNUMU4r
SXCkU5m4rej/nw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:58 2025 by rpki-client