
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: ldZytyKP1ogLrSkmDUhBqHCcBo9wthLE5VVOk1LPzB4=
Subject key identifier: 1B:AB:65:89:67:72:99:A9:00:38:D2:C3:82:2A:2E:A8:C9:9F:AF:C9
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 0199FC588EFD22003B3868A3773AC6DF368B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: A3whmNs8zZKHN2Uw8GmULEgoChmCfEI6oZg6YgY5fEk=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8e:fd:22:00:3b:38:68:a3:77:3a:c6:df:36:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=1bab6589677299a90038d2c3822a2ea8c99fafc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:82:2e:96:ca:8e:81:de:d6:1c:57:45:20:
91:5d:4f:8b:24:27:61:0c:9e:a3:eb:53:2d:0f:b0:
18:45:52:a9:c4:8b:5f:98:1f:60:c5:d1:c7:c4:33:
61:60:71:50:05:31:e3:05:a9:79:4b:f7:74:f3:d8:
3b:2a:60:3f:f7:4c:24:b5:66:32:c7:35:38:95:26:
13:31:67:12:76:c0:19:61:22:91:0f:ae:bd:2d:9d:
f1:61:d4:a5:95:9a:46:10:97:2a:8a:fc:a2:41:8f:
09:7b:47:ae:f0:2e:22:3b:7b:0c:a5:b2:46:db:2f:
c2:ee:b8:02:2d:6f:5f:b3:e7:09:35:6a:8d:6f:49:
66:21:b2:94:aa:10:f3:48:76:4b:9d:db:91:89:fd:
0f:e5:cb:0d:f6:49:c7:fe:c9:05:27:d7:6c:10:58:
b4:c9:14:6f:76:ab:6b:06:55:ca:c2:25:e2:f6:5b:
20:e8:b2:71:2a:b1:2f:d7:c4:b2:28:49:63:93:ca:
a7:bb:f2:f2:36:a2:ef:7c:88:4e:dc:f7:46:b0:36:
40:b4:94:9e:dd:bc:50:fb:9a:ea:34:25:8e:15:ec:
90:78:13:6d:e8:d2:cd:31:b8:ee:09:48:0f:6e:4c:
5a:27:75:78:24:00:ba:e2:99:7f:e5:44:d1:c9:2e:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:65:89:67:72:99:A9:00:38:D2:C3:82:2A:2E:A8:C9:9F:AF:C9
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:48:83:30:47:e4:6e:5b:5c:1e:62:5d:f8:b1:9c:96:c0:f2:
f3:10:b0:50:c2:f1:ce:f6:21:3c:85:78:db:f8:dc:4a:ff:98:
fb:bf:d3:37:f4:58:b9:f4:99:ec:f3:37:d3:0c:c2:57:6a:87:
7a:e6:f0:e3:bc:83:38:0f:7d:5c:b3:b8:dc:a6:2b:1c:33:38:
43:f7:a6:07:bb:3e:34:bc:50:d5:6b:62:8e:3f:88:4f:b1:85:
0b:a9:e7:06:50:77:cc:1a:58:eb:c3:71:90:87:d6:11:82:09:
e4:4d:92:f2:29:af:42:08:d9:4c:63:59:2f:81:1a:09:30:80:
d5:67:de:4d:e7:5c:7a:aa:0a:49:2f:93:3f:77:dc:e3:d2:8c:
c7:f6:3f:85:d6:61:cb:c9:15:08:01:c3:6f:86:a3:64:06:5c:
78:35:56:28:00:11:82:08:70:4e:1f:47:5f:6f:1e:7d:6d:90:
f1:8d:4e:16:c2:c9:08:5f:e4:74:e1:b8:16:4f:f0:14:2c:45:
d8:b7:70:36:3d:e5:34:e3:26:68:2e:b9:28:db:52:4d:c0:f0:
1a:47:94:98:c3:8c:09:fb:a5:b1:85:e3:f9:52:6b:48:55:c4:
6c:23:31:a6:54:37:f7:e5:b4:fc:20:4e:30:a0:00:76:af:b6:
9c:63:90:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WI79IgA7OGijdzrG3zaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1
N2YxYTIwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
EygxYmFiNjU4OTY3NzI5OWE5MDAzOGQyYzM4MjJhMmVhOGM5OWZhZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG+CLpbKjoHe1hxXRSCRXU+LJCdh
DJ6j61MtD7AYRVKpxItfmB9gxdHHxDNhYHFQBTHjBal5S/d089g7KmA/90wktWYy
xzU4lSYTMWcSdsAZYSKRD669LZ3xYdSllZpGEJcqivyiQY8Je0eu8C4iO3sMpbJG
2y/C7rgCLW9fs+cJNWqNb0lmIbKUqhDzSHZLnduRif0P5csN9knH/skFJ9dsEFi0
yRRvdqtrBlXKwiXi9lsg6LJxKrEv18SyKEljk8qnu/LyNqLvfIhO3PdGsDZAtJSe
3bxQ+5rqNCWOFeyQeBNt6NLNMbjuCUgPbkxaJ3V4JAC64pl/5UTRyS43gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBurZYlncpmpADjSw4IqLqjJn6/JMB8GA1UdIwQY
MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt
NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi
LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkiDMEfk
bltcHmJd+LGclsDy8xCwUMLxzvYhPIV42/jcSv+Y+7/TN/RYufSZ7PM30wzCV2qH
eubw47yDOA99XLO43KYrHDM4Q/emB7s+NLxQ1Wtijj+IT7GFC6nnBlB3zBpY68Nx
kIfWEYIJ5E2S8imvQgjZTGNZL4EaCTCA1WfeTedceqoKSS+TP3fc49KMx/Y/hdZh
y8kVCAHDb4ajZAZceDVWKAARgghwTh9HX28efW2Q8Y1OFsLJCF/kdOG4Fk/wFCxF
2LdwNj3lNOMmaC65KNtSTcDwGkeUmMOMCfulsYXj+VJrSFXEbCMxplQ39+W0/CBO
MKAAdq+2nGOQWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:09 2025 by rpki-client