Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: pkWf7Yhm52OZsbdcuhpuVIkm8BuGInQZ1U8duAZnEYc=
Subject key identifier: F9:F2:8F:CE:81:E0:10:76:AE:4F:FC:B5:0F:D9:09:0F:E1:01:EB:01
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 0199FC58469F524839160ADE264983C2C92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: lkGlE5QjvRGaEyXz3GOowrLgPdY2THUnOFf9m4sR+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:46:9f:52:48:39:16:0a:de:26:49:83:c2:c9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=f9f28fce81e01076ae4ffcb50fd9090fe101eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:c9:98:1c:20:25:56:eb:3d:0c:98:16:28:
f8:8a:4d:f2:94:85:c9:6e:cb:6f:fb:5b:a0:b2:1c:
55:36:0b:97:ec:44:e0:ce:86:18:0b:f6:79:93:53:
68:76:66:3a:cc:4a:1a:a3:f5:9c:e1:55:1f:bc:63:
cb:89:26:3d:45:5c:40:3d:f6:5c:8f:41:88:9f:7a:
0c:55:4e:0e:ea:e4:f7:42:71:7b:13:94:de:1a:d1:
d8:9a:98:01:3d:49:9b:63:51:e0:bf:ff:98:31:56:
d5:9e:03:79:91:f4:0b:be:09:1a:c2:90:96:9a:7c:
87:d2:b8:ec:1a:c3:9b:b4:9d:90:e1:9b:81:cc:7c:
9c:b0:a3:95:da:c7:65:68:d6:ea:e6:bf:83:95:41:
56:55:01:0c:34:c6:36:27:e3:cb:2e:4f:d3:a4:2c:
33:e1:91:22:50:b2:c2:c2:87:f3:7e:b7:99:7f:10:
bb:4b:45:fe:6a:4d:48:84:58:16:32:cf:30:93:be:
27:cf:42:ef:8d:e5:d8:23:69:6b:bf:aa:41:67:63:
ec:f4:21:57:24:de:8c:88:f9:57:f5:b6:ec:51:0c:
08:af:b8:92:dd:fb:eb:d2:62:75:f2:47:ae:3f:09:
27:cc:4a:d7:23:20:f7:18:4d:25:ad:05:25:58:98:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:8F:CE:81:E0:10:76:AE:4F:FC:B5:0F:D9:09:0F:E1:01:EB:01
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:23:59:31:ec:58:0e:cc:e8:ed:ee:8d:46:ae:9c:f3:34:
f1:e6:4d:00:ea:79:d8:73:1d:05:f8:46:89:f6:cb:1f:3f:ca:
20:23:c7:a0:1c:f8:67:35:0f:11:d1:a2:e7:9c:58:68:73:af:
20:6a:aa:03:61:00:0d:bd:18:be:94:5c:13:1c:d6:25:a5:5b:
69:44:36:f2:dd:45:fd:20:2c:06:76:d1:32:92:bd:f7:70:ad:
1d:55:18:55:f4:fa:41:45:ab:c3:dc:76:8e:88:e0:76:4b:1d:
78:41:62:43:54:e3:79:3d:c5:10:f1:77:54:f6:f0:73:cd:0b:
d8:7b:f8:a9:2b:7a:b1:81:05:c5:eb:89:71:d7:5f:a0:6e:b0:
c8:7e:de:86:69:f0:9c:77:df:31:d0:f7:35:7c:1f:10:97:85:
dc:e3:d5:a1:71:f7:50:d2:2d:3d:86:2f:7f:89:ea:bb:1d:5b:
d3:88:bc:a7:db:aa:d5:6f:c9:ea:d5:bb:d7:0f:96:ff:92:3b:
b3:7a:49:cb:fb:c9:6c:f7:54:57:bd:e8:19:c7:23:b9:89:54:
ef:bc:91:e2:07:e5:ad:c4:95:50:ea:8d:1d:4d:19:71:2a:5e:
1a:34:49:90:2d:19:da:81:0d:aa:7a:8b:3d:75:7f:07:93:c7:
dd:ac:5c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEafUkg5FgreJkmDwsksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy
NGIwYjUwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
EyhmOWYyOGZjZTgxZTAxMDc2YWU0ZmZjYjUwZmQ5MDkwZmUxMDFlYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bJmBwgJVbrPQyYFij4ik3ylIXJ
bstv+1ugshxVNguX7ETgzoYYC/Z5k1NodmY6zEoao/Wc4VUfvGPLiSY9RVxAPfZc
j0GIn3oMVU4O6uT3QnF7E5TeGtHYmpgBPUmbY1Hgv/+YMVbVngN5kfQLvgkawpCW
mnyH0rjsGsObtJ2Q4ZuBzHycsKOV2sdlaNbq5r+DlUFWVQEMNMY2J+PLLk/TpCwz
4ZEiULLCwofzfreZfxC7S0X+ak1IhFgWMs8wk74nz0LvjeXYI2lrv6pBZ2Ps9CFX
JN6MiPlX9bbsUQwIr7iS3fvr0mJ18keuPwknzErXIyD3GE0lrQUlWJiSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnyj86B4BB2rk/8tQ/ZCQ/hAesBMB8GA1UdIwQY
MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt
ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1
LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC0jWTHs
WA7M6O3ujUaunPM08eZNAOp52HMdBfhGifbLHz/KICPHoBz4ZzUPEdGi55xYaHOv
IGqqA2EADb0YvpRcExzWJaVbaUQ28t1F/SAsBnbRMpK993CtHVUYVfT6QUWrw9x2
jojgdksdeEFiQ1TjeT3FEPF3VPbwc80L2Hv4qSt6sYEFxeuJcddfoG6wyH7ehmnw
nHffMdD3NXwfEJeF3OPVoXH3UNItPYYvf4nqux1b04i8p9uq1W/J6tW71w+W/5I7
s3pJy/vJbPdUV73oGccjuYlU77yR4gflrcSVUOqNHU0ZcSpeGjRJkC0Z2oENqnqL
PXV/B5PH3axc8g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:22 2025 by rpki-client