Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: gLR9pGJWjNuUG83emji8H87D8LS4QVZgKAF6LlMKSy8=
Subject key identifier: F5:FE:B2:83:DC:EC:B7:C5:2B:0E:1F:67:D5:AA:66:0B:53:3E:E0:BA
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 0199FE477F3CD3EEE5865FCAD9B0CF4980A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:02:02 +0000
Manifest this update: Sun 19 Oct 2025 21:02:02 +0000
Manifest next update: Mon 20 Oct 2025 21:02:02 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: 8qsuCf6HsvpJW6BEJ0lUE9WJzrX9FNn42qdDkMk9p34=)
2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:7f:3c:d3:ee:e5:86:5f:ca:d9:b0:cf:49:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Oct 19 21:02:02 2025 GMT
Not After : Oct 20 21:02:02 2025 GMT
Subject: CN=f5feb283dcecb7c52b0e1f67d5aa660b533ee0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:f3:4e:b5:1c:fd:e3:dc:5a:3b:4f:e6:ae:
99:c5:be:a5:a9:14:64:2e:a0:32:54:4a:55:b0:9c:
63:b2:74:c6:00:4b:ae:b7:11:a5:d8:8b:a3:e7:03:
b4:3d:e3:e9:7f:64:a2:0c:db:2c:0a:24:7a:ba:04:
be:8b:ef:5b:7b:27:89:a7:1e:5a:bb:81:09:90:90:
69:4f:a5:80:65:58:ba:1f:f9:23:8a:5c:54:13:71:
13:1e:f0:dc:51:91:13:9c:f9:ab:07:19:de:b1:fa:
78:f6:f1:7b:c5:79:14:72:e9:1d:82:11:2b:02:7b:
0f:af:8d:2f:c0:25:f4:00:2a:b6:aa:30:8b:e2:7a:
92:44:0c:08:ea:6b:ce:68:b2:de:f3:3d:78:fd:88:
12:6e:cd:fc:a4:80:3e:7d:11:1f:a7:f0:44:0b:49:
13:37:3d:43:34:d8:7a:e3:57:dd:ef:8b:28:e3:77:
e0:cb:f1:de:da:7d:be:e8:c9:55:e0:d9:c8:f4:97:
1d:c2:83:21:93:85:54:b3:82:ad:40:86:7b:97:64:
69:14:e7:47:ef:57:3f:6e:6b:c5:85:5d:13:dc:d1:
ca:4a:30:87:3d:e1:61:46:74:3b:75:2e:8a:1f:ed:
d7:93:bd:92:08:d9:d1:ad:47:69:b4:93:d3:de:7d:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:B2:83:DC:EC:B7:C5:2B:0E:1F:67:D5:AA:66:0B:53:3E:E0:BA
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4f:8d:08:5f:68:e6:41:19:d9:f0:df:dd:40:88:3c:e4:a7:
69:9f:72:3a:ff:59:ca:5e:7b:33:8e:57:6f:4d:73:33:e0:83:
19:db:3f:88:38:c0:d9:32:de:7b:d0:5c:67:2d:1c:48:6e:0a:
19:d3:82:be:c2:b3:99:32:d8:d7:4b:ac:2a:d2:78:21:d9:d7:
90:5d:82:7f:75:7b:d0:c0:bb:21:a2:3c:0f:df:ab:81:61:d1:
ea:94:1b:44:33:f6:0f:66:fe:e3:4f:3a:b8:1e:06:9d:dd:ee:
67:28:8c:01:62:26:f8:20:2e:1a:9b:60:db:79:f0:b6:06:9b:
c9:86:58:3c:39:eb:7e:2b:56:1e:ad:9c:99:b1:81:c7:26:25:
56:7f:aa:bb:3f:48:2e:24:ac:3d:71:5f:62:a6:eb:5c:22:ae:
d2:57:bf:a5:f0:6f:6b:ed:61:b5:85:ea:86:50:cb:85:94:be:
a5:2f:a7:fe:13:5c:d6:5d:d8:e2:f7:2a:53:a0:16:7a:2f:c4:
a5:2d:45:7e:a1:1c:9c:db:a4:78:80:f4:36:ad:8a:23:cf:82:
99:98:dd:92:55:87:c7:55:ad:50:2b:47:71:be:f8:67:9c:80:
4c:1d:8d:c5:3c:3b:5a:fe:6a:4c:dc:73:89:37:0d:cd:9b:f6:
3e:74:f2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R3880+7lhl/K2bDPSYCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj
MTdmMzQwHhcNMjUxMDE5MjEwMjAyWhcNMjUxMDIwMjEwMjAyWjAzMTEwLwYDVQQD
EyhmNWZlYjI4M2RjZWNiN2M1MmIwZTFmNjdkNWFhNjYwYjUzM2VlMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunnzTrUc/ePcWjtP5q6Zxb6lqRRk
LqAyVEpVsJxjsnTGAEuutxGl2Iuj5wO0PePpf2SiDNssCiR6ugS+i+9beyeJpx5a
u4EJkJBpT6WAZVi6H/kjilxUE3ETHvDcUZETnPmrBxnesfp49vF7xXkUcukdghEr
AnsPr40vwCX0ACq2qjCL4nqSRAwI6mvOaLLe8z14/YgSbs38pIA+fREfp/BEC0kT
Nz1DNNh641fd74so43fgy/He2n2+6MlV4NnI9JcdwoMhk4VUs4KtQIZ7l2RpFOdH
71c/bmvFhV0T3NHKSjCHPeFhRnQ7dS6KH+3Xk72SCNnRrUdptJPT3n2BrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX+soPc7LfFKw4fZ9WqZgtTPuC6MB8GA1UdIwQY
MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt
YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1
LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk+NCF9o
5kEZ2fDf3UCIPOSnaZ9yOv9Zyl57M45Xb01zM+CDGds/iDjA2TLee9BcZy0cSG4K
GdOCvsKzmTLY10usKtJ4IdnXkF2Cf3V70MC7IaI8D9+rgWHR6pQbRDP2D2b+4086
uB4Gnd3uZyiMAWIm+CAuGptg23nwtgabyYZYPDnrfitWHq2cmbGBxyYlVn+quz9I
LiSsPXFfYqbrXCKu0le/pfBva+1htYXqhlDLhZS+pS+n/hNc1l3Y4vcqU6AWei/E
pS1FfqEcnNukeID0Nq2KI8+CmZjdklWHx1WtUCtHcb74Z5yATB2NxTw7Wv5qTNxz
iTcNzZv2PnTyvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:59 2025 by rpki-client