Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: hODSb06SUJlOtIXHNANbo/OpTyFLJ0oAB3VBVNM55tA=
Subject key identifier: EC:AB:B8:8A:58:7B:7F:EA:59:EB:BB:54:EF:E0:5F:67:5D:6B:95:CC
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 0199FC219CA8C591A24A62CF3FC09811314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 11
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: N1ZkxUhwPm2V59anvx5NXCf7CmM.roa (hash: 9Fwl8CDGvzJI6F3M9oMQd/b2VRMAR2xqbeSGtsUwU3U=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: puMBC15lJk7q82LWSL11kpSy8XkGRuPDwt0AaYkhhZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9c:a8:c5:91:a2:4a:62:cf:3f:c0:98:11:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=ecabb88a587b7fea59ebbb54efe05f675d6b95cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:fa:ef:65:8b:a6:fb:44:54:89:7c:8f:41:
f9:aa:c2:72:19:6e:0d:84:54:a6:ad:a7:b1:04:61:
9c:01:df:05:cb:d2:a3:0f:3c:bb:ec:6c:43:a1:ba:
9c:ed:ca:17:ea:8a:e5:ce:f9:c0:87:3f:7c:f8:1d:
07:28:a8:d6:d2:d3:28:90:3e:20:0a:01:65:08:a3:
e5:b7:56:58:2d:c9:4b:58:4c:0a:b8:ae:77:e6:20:
9a:51:d1:1a:2e:cd:ca:39:0f:3b:6b:53:9a:41:32:
77:ec:0a:2f:2e:b9:d5:b1:a7:45:6f:4e:7a:2b:f7:
5b:68:29:e9:d9:91:e5:44:5d:16:45:7e:b5:89:8d:
76:6e:e9:80:ba:e0:b7:01:d8:4b:97:5a:92:f1:d7:
e8:2c:db:30:07:26:5e:6d:b1:75:ca:7a:4f:be:ad:
33:47:81:e0:06:83:e6:c6:93:d9:d7:d9:df:55:3b:
22:12:7d:30:1c:9f:af:80:c7:74:97:e7:7f:0a:85:
11:85:68:75:eb:e8:48:76:84:35:34:be:5c:4c:9a:
f4:7e:c8:3a:20:d1:b3:da:4e:2b:21:a3:a0:f8:cc:
27:1e:79:c0:2b:25:c5:1e:e1:86:c8:4a:a9:f7:95:
53:b9:5d:04:db:19:96:ee:62:dd:88:f8:ed:85:e8:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AB:B8:8A:58:7B:7F:EA:59:EB:BB:54:EF:E0:5F:67:5D:6B:95:CC
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c9:0d:7f:19:83:f0:69:07:8b:b8:78:68:63:9a:66:96:e4:
bf:0d:0c:a8:a2:17:c5:4d:f9:ea:1c:37:7f:22:2d:60:4d:56:
32:94:c3:1a:62:79:e4:d3:7f:24:5e:2d:4a:63:bc:16:82:c2:
7b:6f:57:e7:44:4b:ea:8f:be:fe:52:ed:73:7b:fe:e7:c4:a5:
fa:de:59:2f:70:72:77:da:3e:dc:b6:0b:7b:ed:03:21:81:e4:
58:df:fd:1f:83:e4:e9:f3:25:d9:9f:66:f4:1f:ef:f2:0d:73:
bd:08:46:ab:07:4d:70:97:d2:c8:af:a8:37:ae:7a:61:f5:29:
8a:fa:80:83:4d:4e:d2:ed:7f:7f:b9:1d:56:63:af:90:d5:e4:
1b:8b:f1:bb:1e:69:85:1c:87:76:62:c5:44:0c:77:39:78:a6:
c8:7c:66:3c:f1:79:c7:33:9f:13:9a:5f:85:44:04:ed:68:42:
5f:2a:34:4c:24:29:41:8f:9e:e5:9e:00:53:b1:09:8f:5d:7c:
95:7f:a3:2b:57:9b:e8:35:e3:cb:2d:c0:b6:b1:36:52:74:63:
68:05:05:e9:4c:51:1a:15:f8:2b:08:1c:bf:d5:66:76:95:49:
3d:3a:07:41:c2:17:e0:11:4a:99:6d:0a:d3:ee:d2:2a:c0:3c:
77:dc:9b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZyoxZGiSmLPP8CYETFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2
ZDlkZTEwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
EyhlY2FiYjg4YTU4N2I3ZmVhNTllYmJiNTRlZmUwNWY2NzVkNmI5NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pv672WLpvtEVIl8j0H5qsJyGW4N
hFSmraexBGGcAd8Fy9KjDzy77GxDobqc7coX6orlzvnAhz98+B0HKKjW0tMokD4g
CgFlCKPlt1ZYLclLWEwKuK535iCaUdEaLs3KOQ87a1OaQTJ37AovLrnVsadFb056
K/dbaCnp2ZHlRF0WRX61iY12bumAuuC3AdhLl1qS8dfoLNswByZebbF1ynpPvq0z
R4HgBoPmxpPZ19nfVTsiEn0wHJ+vgMd0l+d/CoURhWh16+hIdoQ1NL5cTJr0fsg6
INGz2k4rIaOg+MwnHnnAKyXFHuGGyEqp95VTuV0E2xmW7mLdiPjtheh29wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyruIpYe3/qWeu7VO/gX2dda5XMMB8GA1UdIwQY
MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt
MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2
LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlskNfxmD
8GkHi7h4aGOaZpbkvw0MqKIXxU356hw3fyItYE1WMpTDGmJ55NN/JF4tSmO8FoLC
e29X50RL6o++/lLtc3v+58Sl+t5ZL3Byd9o+3LYLe+0DIYHkWN/9H4Pk6fMl2Z9m
9B/v8g1zvQhGqwdNcJfSyK+oN656YfUpivqAg01O0u1/f7kdVmOvkNXkG4vxux5p
hRyHdmLFRAx3OXimyHxmPPF5xzOfE5pfhUQE7WhCXyo0TCQpQY+e5Z4AU7EJj118
lX+jK1eb6DXjyy3AtrE2UnRjaAUF6UxRGhX4Kwgcv9VmdpVJPToHQcIX4BFKmW0K
0+7SKsA8d9ybXg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:12 2025 by rpki-client