Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: 9Goq2r+mxfgvUx4n0vD77lmfsCvQDP1fFDO0tOCavPQ=
Subject key identifier: 8E:44:D1:9D:CD:65:5B:36:C5:FE:35:F4:2F:28:6B:FA:EB:FE:3E:FB
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0199FDD9731890097370F177C9DCD45D1F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: WaXLPdgotDkJxl4qmyty3hhXkYpIJEtMhjaj/HCm1wI=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:73:18:90:09:73:70:f1:77:c9:dc:d4:5d:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=8e44d19dcd655b36c5fe35f42f286bfaebfe3efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:2f:ce:ae:b8:2b:3d:25:64:ae:12:43:9b:
9d:c8:ab:41:ff:82:40:98:bf:be:ca:c9:82:6b:76:
f7:da:45:d9:5f:2c:a3:9d:21:c4:eb:6b:b9:7f:aa:
35:ee:80:80:c9:66:19:90:7f:00:79:5c:9e:25:99:
43:b9:30:87:70:07:d0:ff:9c:92:c5:bc:0e:8b:23:
da:71:e2:1c:13:97:0f:0f:3c:81:d6:54:a1:f5:b9:
47:39:ef:c8:3b:89:29:fd:a7:e7:54:ca:69:b2:30:
bd:c1:94:79:75:ec:44:f8:ef:2e:4e:49:81:2b:b6:
73:35:8c:f7:33:a2:e7:b4:12:9d:34:e0:59:2f:c1:
89:c1:cb:30:3f:ff:89:97:08:6a:e5:ee:d1:55:2f:
35:c1:b5:9d:38:03:9e:22:a6:6e:1e:bf:25:fe:f5:
ea:ff:0e:1b:bb:d9:23:5c:28:d4:3f:5a:fa:c9:74:
30:5a:31:26:76:db:cb:a5:c7:3a:39:ad:2f:2c:6b:
72:2e:cd:14:56:8b:19:3f:2d:4c:9f:66:1e:57:1e:
d1:56:c6:43:75:82:e3:69:ba:e9:a2:14:f0:57:8f:
f0:18:51:b7:72:7d:34:63:b9:df:c1:5a:8d:ca:52:
85:e8:d2:a3:5c:b5:55:ce:f8:53:67:da:7c:9d:c6:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:D1:9D:CD:65:5B:36:C5:FE:35:F4:2F:28:6B:FA:EB:FE:3E:FB
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ff:c4:14:0e:16:e7:30:f9:27:d8:a8:9c:4d:40:5f:a6:b3:
e4:67:75:4b:d7:33:82:b4:d0:3f:62:8a:d8:f6:16:81:15:ae:
de:fc:d5:ca:af:c7:d6:cd:a6:9d:2f:00:dc:97:1e:10:96:ab:
7c:c2:70:0d:c1:9f:25:21:2c:b2:ed:ff:90:05:7f:fb:e9:86:
89:d7:21:7c:f0:18:34:0c:15:2b:7a:cd:5d:13:28:cd:f7:37:
e6:39:80:1b:ac:39:b2:99:46:ec:e7:b7:b4:19:79:39:6a:c8:
d4:fe:c5:bc:42:fe:5a:36:3f:89:bd:80:83:b7:1d:4d:99:12:
2a:9f:84:49:bd:f9:a9:68:90:01:a1:34:52:21:af:a0:d7:41:
26:a3:33:3e:2b:fe:c6:b3:bd:d1:16:4b:1a:69:60:5e:e4:55:
7d:27:a6:0f:1d:7c:41:94:50:81:d9:4d:ab:6d:1a:46:36:0a:
86:5b:a7:01:0f:25:a3:0a:2d:11:6a:76:54:a8:3d:43:0c:e0:
16:fb:f4:92:df:52:29:f2:f9:42:ff:7f:6a:2a:7e:c0:74:02:
8b:77:20:57:2d:4a:17:c6:ee:50:03:d0:51:d1:33:bd:a0:fd:
19:10:c6:3e:b7:d0:15:fc:09:f2:78:b3:4a:ac:50:9c:05:7c:
be:0b:fb:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XMYkAlzcPF3ydzUXR8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjUxMDE5MTkwMTUwWhcNMjUxMDIwMTkwMTUwWjAzMTEwLwYDVQQD
Eyg4ZTQ0ZDE5ZGNkNjU1YjM2YzVmZTM1ZjQyZjI4NmJmYWViZmUzZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfsvzq64Kz0lZK4SQ5udyKtB/4JA
mL++ysmCa3b32kXZXyyjnSHE62u5f6o17oCAyWYZkH8AeVyeJZlDuTCHcAfQ/5yS
xbwOiyPaceIcE5cPDzyB1lSh9blHOe/IO4kp/afnVMppsjC9wZR5dexE+O8uTkmB
K7ZzNYz3M6LntBKdNOBZL8GJwcswP/+Jlwhq5e7RVS81wbWdOAOeIqZuHr8l/vXq
/w4bu9kjXCjUP1r6yXQwWjEmdtvLpcc6Oa0vLGtyLs0UVosZPy1Mn2YeVx7RVsZD
dYLjabrpohTwV4/wGFG3cn00Y7nfwVqNylKF6NKjXLVVzvhTZ9p8ncZ4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5E0Z3NZVs2xf419C8oa/rr/j77MB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz//EFA4W
5zD5J9ionE1AX6az5Gd1S9czgrTQP2KK2PYWgRWu3vzVyq/H1s2mnS8A3JceEJar
fMJwDcGfJSEssu3/kAV/++mGidchfPAYNAwVK3rNXRMozfc35jmAG6w5splG7Oe3
tBl5OWrI1P7FvEL+WjY/ib2Ag7cdTZkSKp+ESb35qWiQAaE0UiGvoNdBJqMzPiv+
xrO90RZLGmlgXuRVfSemDx18QZRQgdlNq20aRjYKhlunAQ8lowotEWp2VKg9Qwzg
Fvv0kt9SKfL5Qv9/aip+wHQCi3cgVy1KF8buUAPQUdEzvaD9GRDGPrfQFfwJ8niz
SqxQnAV8vgv7SQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:25 2025 by rpki-client