Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: r15YEROZCzZZQR7F7SphHhGuHiz7vaiBGlaApJaz4rA=
Subject key identifier: 9F:69:75:92:BE:92:31:79:45:A6:33:CB:98:7B:57:8A:71:28:27:B9
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0199FC8F45540BA3386FD5E88236DF22975E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0E27
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: Y8ClRFJiJMXOLlaLSg3VdfVDW2vS/ZRvuh0rkUdbFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:45:54:0b:a3:38:6f:d5:e8:82:36:df:22:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=9f697592be92317945a633cb987b578a712827b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:f7:0c:2d:ae:f7:b0:9e:b3:7e:10:90:f7:
93:bd:e8:a4:1e:ce:f3:1a:3b:0c:72:b4:28:bc:08:
99:0a:ed:bb:3e:74:fa:c0:09:e0:e6:a1:bb:0e:7b:
ab:2f:d3:35:74:d5:97:6b:08:4f:63:1c:61:9e:4a:
32:e4:bf:00:67:ec:28:25:9f:cb:04:36:1c:52:c7:
6d:95:6b:8e:23:6a:fc:ca:be:31:e3:3f:a8:4c:86:
0f:67:4e:bc:8b:b7:65:b9:7c:60:1d:40:f0:5f:4d:
ae:6d:86:48:f8:fb:d2:90:b8:d3:52:88:16:13:27:
64:2d:67:61:44:c2:d6:4c:7e:6e:b2:25:57:54:4d:
cc:84:17:ac:56:39:f3:e9:23:b7:f2:1e:df:c9:32:
e3:d6:b3:04:9c:93:4a:cd:fe:21:54:e4:3d:2b:f2:
54:d6:cd:61:47:4a:73:70:f8:52:43:7d:d6:ee:a5:
a3:da:77:e7:af:53:e4:1c:59:cd:b1:cf:8a:3d:47:
da:b6:2b:df:20:d0:62:8e:57:ed:18:13:a6:fc:27:
80:9b:e1:df:72:89:0c:b4:02:35:9a:fe:5b:0a:0a:
38:d4:cb:ab:fd:cc:2d:18:56:c3:89:dc:14:1a:99:
ab:17:8e:6a:d3:0d:2f:a9:29:d7:44:28:cb:eb:75:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:75:92:BE:92:31:79:45:A6:33:CB:98:7B:57:8A:71:28:27:B9
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6d:65:31:40:cf:de:8d:5e:d2:3f:54:f9:59:93:75:09:ad:
51:2d:21:05:fc:f7:b2:9b:6b:ee:3e:28:1e:23:74:99:29:8c:
b2:50:5b:19:33:ee:a2:61:dd:ff:b0:07:2b:90:94:5c:93:56:
91:4b:68:f7:47:8c:e6:38:2e:c2:16:9d:81:b6:64:01:c9:20:
44:6d:93:c7:57:c7:1d:33:f2:71:22:16:14:ae:f9:1a:9a:31:
28:72:21:4d:10:91:76:0d:7f:6e:c2:ed:98:aa:af:e5:98:24:
74:44:e5:fd:1f:ac:f2:0b:74:d3:d0:ea:a8:5e:54:e0:41:c0:
77:61:b5:6b:9f:62:f4:1a:64:6b:dd:59:49:28:28:87:75:d0:
fc:5d:f4:f7:94:eb:be:0d:19:8a:76:cc:7c:69:f3:4a:eb:12:
4b:ee:0d:1e:df:4b:3d:7c:e9:6a:12:38:d5:0a:b6:07:c4:a6:
f1:26:5a:93:18:86:e0:21:70:99:79:a0:ac:d3:8f:f0:a5:95:
f5:44:b2:33:08:e7:ce:d2:c8:05:b5:4d:f4:d6:9e:ef:2a:60:
17:3a:87:49:ed:9c:cd:f0:d2:3e:14:76:64:50:18:c7:5b:fd:
9e:73:8b:26:d8:95:4d:8e:f6:e3:98:26:ed:b4:b1:94:78:53:
c7:a6:e5:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0VUC6M4b9XogjbfIpdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjUxMDE5MTMwMTExWhcNMjUxMDIwMTMwMTExWjAzMTEwLwYDVQQD
Eyg5ZjY5NzU5MmJlOTIzMTc5NDVhNjMzY2I5ODdiNTc4YTcxMjgyN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyP3DC2u97Ces34QkPeTveikHs7z
GjsMcrQovAiZCu27PnT6wAng5qG7DnurL9M1dNWXawhPYxxhnkoy5L8AZ+woJZ/L
BDYcUsdtlWuOI2r8yr4x4z+oTIYPZ068i7dluXxgHUDwX02ubYZI+PvSkLjTUogW
EydkLWdhRMLWTH5usiVXVE3MhBesVjnz6SO38h7fyTLj1rMEnJNKzf4hVOQ9K/JU
1s1hR0pzcPhSQ33W7qWj2nfnr1PkHFnNsc+KPUfativfINBijlftGBOm/CeAm+Hf
cokMtAI1mv5bCgo41Mur/cwtGFbDidwUGpmrF45q0w0vqSnXRCjL63VvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9pdZK+kjF5RaYzy5h7V4pxKCe5MB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG1lMUDP
3o1e0j9U+VmTdQmtUS0hBfz3sptr7j4oHiN0mSmMslBbGTPuomHd/7AHK5CUXJNW
kUto90eM5jguwhadgbZkAckgRG2Tx1fHHTPycSIWFK75GpoxKHIhTRCRdg1/bsLt
mKqv5ZgkdETl/R+s8gt009DqqF5U4EHAd2G1a59i9Bpka91ZSSgoh3XQ/F3095Tr
vg0ZinbMfGnzSusSS+4NHt9LPXzpahI41Qq2B8Sm8SZakxiG4CFwmXmgrNOP8KWV
9USyMwjnztLIBbVN9Nae7ypgFzqHSe2czfDSPhR2ZFAYx1v9nnOLJtiVTY7245gm
7bSxlHhTx6blWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:17 2025 by rpki-client