Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: Vgvt/vRaC3qvMbh7WVRJDwuQCjOYdMpxXruUHa2Qu3Y=
Subject key identifier: 3B:57:89:78:44:7C:F7:CD:90:CC:13:01:46:68:CD:AE:05:B3:49:27
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0199FEB48E9346BDEBBF54A93DCA12C6B84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 11D4
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: JtdOuJS/3+4nMfwgn+D3x17WyKq6WmCjUo9cutrQRbk=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8e:93:46:bd:eb:bf:54:a9:3d:ca:12:c6:b8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=3b578978447cf7cd90cc13014668cdae05b34927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:66:d6:19:30:10:d6:29:86:07:a9:df:04:
5e:bc:94:49:75:a8:a2:6c:01:db:09:85:5a:0e:cb:
e9:8b:c7:bf:75:63:89:59:10:08:f4:bf:1d:a0:43:
92:55:b0:38:02:36:6d:21:1b:61:a0:99:63:b8:d1:
0e:a9:4c:86:4e:78:9d:15:ee:62:57:50:7b:a5:f0:
25:b3:b2:a6:7f:2d:c5:1d:ff:71:42:96:86:3b:a8:
4c:2d:2e:2b:95:09:2b:59:b9:ec:df:a4:cf:9a:8a:
33:26:2c:7c:eb:d8:4e:37:de:fd:60:8c:60:28:6d:
10:a9:50:15:db:70:1c:10:a2:5e:a5:89:10:61:70:
ca:95:be:c4:13:27:16:db:5e:dd:28:c5:ef:d9:30:
da:ae:0b:5d:fe:f9:84:ea:80:64:95:f3:0b:61:34:
e5:e9:c1:c6:b5:00:e8:fe:4a:13:36:a6:c5:06:b5:
ba:3c:db:0c:8b:b6:4a:a7:7b:39:c3:d7:64:fd:a9:
2b:64:55:93:07:b1:9a:c1:a4:d3:ec:c4:b4:a7:ab:
91:05:fb:7f:b8:08:2e:03:df:cb:14:29:c9:b0:e1:
5b:bf:a0:2f:76:22:a4:69:16:52:ab:ac:b4:30:5c:
28:ba:15:e9:15:9a:47:f8:f1:f1:af:fb:23:2b:a5:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:57:89:78:44:7C:F7:CD:90:CC:13:01:46:68:CD:AE:05:B3:49:27
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8c:99:97:bf:ce:9c:d6:fa:76:f1:12:a1:ef:1d:ae:45:6e:
99:3d:01:b8:c4:70:e8:f8:eb:91:5c:b4:b5:c2:33:15:0a:81:
74:2d:23:3b:8f:ec:53:7d:c3:d8:bb:97:84:bc:bd:f7:9a:37:
29:ba:5c:9f:94:18:0c:9f:0b:5e:da:00:de:52:ce:a3:b4:99:
5e:c6:9a:9d:ae:32:02:6d:55:d4:09:e0:f3:f7:86:86:b3:4d:
b7:04:19:5e:3a:b7:0f:88:47:12:c9:ee:80:1b:e3:ff:54:aa:
e2:3e:81:b6:3a:c7:8a:a1:d1:91:fc:a6:44:f4:ea:3a:52:78:
3e:55:e8:54:68:06:d9:63:96:88:57:e9:6a:bd:7e:db:ba:6d:
41:c7:25:e8:da:40:eb:cb:90:13:4c:d7:7d:82:f1:e5:f9:c1:
82:2c:da:89:80:ff:25:d9:f9:e1:ca:e1:2b:f2:9b:33:8c:31:
4a:d7:63:1e:7a:83:3b:3c:2b:1f:57:1c:27:03:64:38:95:4d:
e5:8f:9b:49:92:34:9b:93:9c:ee:dd:d1:6e:96:6a:c4:7d:0d:
f7:b2:4e:bb:91:c3:89:82:b7:2b:f8:d1:41:f0:75:47:9f:69:
f3:47:56:d3:f6:7d:7e:51:f5:60:95:7b:b9:ad:d1:ad:20:d6:
55:f5:e0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tI6TRr3rv1SpPcoSxrhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjUxMDE5MjMwMTA5WhcNMjUxMDIwMjMwMTA5WjAzMTEwLwYDVQQD
EygzYjU3ODk3ODQ0N2NmN2NkOTBjYzEzMDE0NjY4Y2RhZTA1YjM0OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Nm1hkwENYphgep3wRevJRJdaii
bAHbCYVaDsvpi8e/dWOJWRAI9L8doEOSVbA4AjZtIRthoJljuNEOqUyGTnidFe5i
V1B7pfAls7Kmfy3FHf9xQpaGO6hMLS4rlQkrWbns36TPmoozJix869hON979YIxg
KG0QqVAV23AcEKJepYkQYXDKlb7EEycW217dKMXv2TDargtd/vmE6oBklfMLYTTl
6cHGtQDo/koTNqbFBrW6PNsMi7ZKp3s5w9dk/akrZFWTB7GawaTT7MS0p6uRBft/
uAguA9/LFCnJsOFbv6AvdiKkaRZSq6y0MFwouhXpFZpH+PHxr/sjK6U5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtXiXhEfPfNkMwTAUZoza4Fs0knMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4yZl7/O
nNb6dvESoe8drkVumT0BuMRw6PjrkVy0tcIzFQqBdC0jO4/sU33D2LuXhLy995o3
Kbpcn5QYDJ8LXtoA3lLOo7SZXsaana4yAm1V1Ang8/eGhrNNtwQZXjq3D4hHEsnu
gBvj/1Sq4j6BtjrHiqHRkfymRPTqOlJ4PlXoVGgG2WOWiFfpar1+27ptQccl6NpA
68uQE0zXfYLx5fnBgizaiYD/Jdn54crhK/KbM4wxStdjHnqDOzwrH1ccJwNkOJVN
5Y+bSZI0m5Oc7t3RbpZqxH0N97JOu5HDiYK3K/jRQfB1R59p80dW0/Z9flH1YJV7
ua3RrSDWVfXgYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:52 2025 by rpki-client