Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: 1OEHlIC4ZERQucmeoTCGNes2wHBWFrRc23hvQOCbEpw=
Subject key identifier: 3A:B5:42:3E:05:45:54:1B:BB:95:1D:64:6A:23:31:68:6F:1D:B9:FD
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0199FBEB02AD7B064FA6FD5939936A42A8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 049C
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: psoedMGRP0IU6VU92fn/MD0S/sGa8xp2dtyszJ5k/rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:02:ad:7b:06:4f:a6:fd:59:39:93:6a:42:a8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=3ab5423e0545541bbb951d646a2331686f1db9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:74:cf:02:b9:a5:31:7b:ff:d0:50:35:7c:
95:b1:e8:0b:cf:51:4b:ef:78:e4:5c:ea:f4:41:32:
dc:f0:ae:60:2e:5c:bb:c0:94:a5:77:28:46:69:f6:
e3:1c:e0:14:10:4d:1f:3f:c3:17:42:ab:68:6e:8f:
69:78:88:3a:fc:01:c1:52:ea:f7:fd:4d:53:95:b9:
87:0e:a9:25:9e:0d:24:2f:8f:4d:9b:07:19:02:bb:
87:77:89:6b:10:a0:40:b9:3f:11:a9:b4:c8:77:86:
1b:b1:44:6a:7c:36:f8:0d:27:da:74:dd:e6:2b:f8:
ce:9c:83:d9:c8:87:d8:7e:3f:00:96:46:5d:34:79:
74:e0:90:95:53:29:22:d0:e2:98:6b:da:d6:e4:1e:
0a:a0:8f:f0:9a:64:c2:b6:c8:34:89:bd:c1:45:8a:
76:54:7b:05:cf:e6:e3:16:a7:66:f6:b0:07:bc:2c:
ee:36:73:af:1f:4b:17:84:d1:9a:cb:58:4e:50:26:
37:35:5b:cb:3d:a9:69:81:af:00:f0:97:62:c7:05:
b5:88:0c:c2:03:75:95:b7:3f:6f:a0:30:97:71:c4:
2a:6c:91:8d:54:31:57:b4:d4:df:fc:f3:2d:1a:4d:
3c:37:dd:f5:e9:4d:73:03:af:f5:84:52:2b:fe:57:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:42:3E:05:45:54:1B:BB:95:1D:64:6A:23:31:68:6F:1D:B9:FD
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:74:9a:b9:cd:d2:27:d1:47:8b:25:ba:e5:3c:6f:29:d7:
37:4b:aa:61:46:6e:e3:a8:fe:61:b1:2e:ba:94:32:48:84:37:
44:df:6a:99:d4:9a:35:8c:4b:c6:8f:d4:ef:04:94:34:ea:66:
dc:e8:59:86:5f:7f:4f:3e:76:6b:57:f7:68:6c:93:52:45:71:
73:8f:4d:55:19:28:51:14:12:a6:e1:76:26:1b:ff:d0:1d:34:
ce:32:31:55:2a:dc:1f:19:f3:7f:06:4e:c1:2d:59:90:4c:57:
ea:c0:67:b6:97:5c:72:63:fd:c7:c4:3c:8a:d1:82:5e:db:15:
b6:03:1d:eb:17:75:17:5c:d7:31:e8:0b:0d:22:bf:a6:83:c6:
f9:d5:3b:d6:c3:65:85:a7:74:4e:31:71:5d:fa:4d:f8:ed:fd:
06:0a:6c:14:6e:db:5a:a1:54:b9:e1:11:b2:ab:23:73:c0:0f:
ed:67:de:30:43:d1:18:bf:46:f4:ee:dc:8c:1f:01:85:20:83:
bf:79:32:87:06:44:37:18:8c:35:d9:d3:bf:62:2e:10:79:f3:
d0:51:78:2a:21:0e:44:22:8f:79:e3:f4:3f:9c:23:8b:1b:2f:
94:b2:70:6c:9a:18:40:04:95:fa:f3:c5:07:b9:13:38:89:e1:
58:c1:4f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76wKtewZPpv1ZOZNqQqjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzI1YzNhOWM1Y2Q4NjY2Zjg2YjA3YTgwOGYxMzJlMDkx
MTE5OWUwHhcNMjUxMDE5MTAwMTQ2WhcNMjUxMDIwMTAwMTQ2WjAzMTEwLwYDVQQD
EygzYWI1NDIzZTA1NDU1NDFiYmI5NTFkNjQ2YTIzMzE2ODZmMWRiOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2B0zwK5pTF7/9BQNXyVsegLz1FL
73jkXOr0QTLc8K5gLly7wJSldyhGafbjHOAUEE0fP8MXQqtobo9peIg6/AHBUur3
/U1TlbmHDqklng0kL49NmwcZAruHd4lrEKBAuT8RqbTId4YbsURqfDb4DSfadN3m
K/jOnIPZyIfYfj8AlkZdNHl04JCVUyki0OKYa9rW5B4KoI/wmmTCtsg0ib3BRYp2
VHsFz+bjFqdm9rAHvCzuNnOvH0sXhNGay1hOUCY3NVvLPalpga8A8JdixwW1iAzC
A3WVtz9voDCXccQqbJGNVDFXtNTf/PMtGk08N9316U1zA6/1hFIr/lepKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq1Qj4FRVQbu5UdZGojMWhvHbn9MB8GA1UdIwQY
MBaAFNpyXDqcXNhmb4aweoCPEy4JERmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUt
M2ZkMTgwMzQxY2JiLzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUtM2ZkMTgwMzQxY2Ji
LzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyx0mrnN
0ifRR4sluuU8bynXN0uqYUZu46j+YbEuupQySIQ3RN9qmdSaNYxLxo/U7wSUNOpm
3OhZhl9/Tz52a1f3aGyTUkVxc49NVRkoURQSpuF2Jhv/0B00zjIxVSrcHxnzfwZO
wS1ZkExX6sBntpdccmP9x8Q8itGCXtsVtgMd6xd1F1zXMegLDSK/poPG+dU71sNl
had0TjFxXfpN+O39BgpsFG7bWqFUueERsqsjc8AP7WfeMEPRGL9G9O7cjB8BhSCD
v3kyhwZENxiMNdnTv2IuEHnz0FF4KiEORCKPeeP0P5wjixsvlLJwbJoYQASV+vPF
B7kTOInhWMFPEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:37 2025 by rpki-client