Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: f1rNCOXhAjLBPxYdVN+WyAMsPGoAKq9c9b+O37nGIms=
Subject key identifier: E9:E1:D3:95:A8:05:C1:96:81:2B:E9:03:A2:39:B9:30:A4:18:C6:E7
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019A71B8ECA49926B4F1C7D9830DF98E7F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 087C
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: v67L63hTyKrNxZ2IwHWa3ZXZHhaAgPR+DpprRmLVgmE=)
2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ec:a4:99:26:b4:f1:c7:d9:83:0d:f9:8e:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=e9e1d395a805c196812be903a239b930a418c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:4f:32:13:58:36:78:fd:c4:ed:5b:7f:7c:
18:2b:43:a0:f7:05:fc:94:42:16:2b:1f:3d:68:d7:
57:1f:03:6f:21:dc:43:f1:2a:f3:fc:87:84:2d:35:
75:c4:35:6e:48:50:d1:bd:c9:a5:dd:14:f4:7c:ae:
a1:1c:af:44:dc:c7:25:b7:83:28:ca:20:c7:c7:7c:
aa:2d:d5:2e:d5:ba:d5:49:3d:87:85:10:db:4a:c1:
11:f1:79:eb:e5:fb:a1:9b:3c:a9:61:37:a9:4c:e3:
66:3d:cd:bd:29:80:e5:ac:3c:fd:37:98:3f:ed:eb:
c5:3d:6b:fe:ed:9d:75:21:c6:e7:f4:88:c3:1f:8b:
4e:17:71:82:59:2c:98:d3:4d:28:87:4c:11:38:36:
d8:40:e2:08:b6:0a:9a:2b:9e:09:ee:f1:15:77:e7:
23:f6:95:6d:91:0c:4c:ce:7c:67:0a:9d:f0:c7:40:
16:ef:97:e2:2b:60:9b:52:cd:aa:69:cc:02:cc:44:
bd:4b:1f:b9:4a:e7:d2:0f:58:b7:30:12:24:31:1a:
2a:7e:ef:11:47:23:e5:7b:29:40:d5:f6:05:01:ca:
ea:98:87:f0:cd:f3:85:65:19:d3:06:1c:56:8b:de:
51:28:b1:f6:de:ae:9c:16:93:9f:0c:eb:ef:ad:50:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:D3:95:A8:05:C1:96:81:2B:E9:03:A2:39:B9:30:A4:18:C6:E7
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:50:f9:e4:b1:fc:30:70:14:8c:f1:91:0f:ec:09:09:72:27:
04:02:f1:ab:b5:76:8d:cd:45:63:ce:56:8b:11:24:4e:94:ab:
5e:a9:9f:16:aa:7a:99:5b:18:ad:6f:10:29:a9:ec:bd:02:ad:
96:5e:ec:54:dc:cc:7f:b4:03:28:e2:6e:b5:3b:9b:54:e3:bc:
c1:e9:9e:4d:55:98:d4:08:7f:cd:84:c1:00:5a:36:67:5f:23:
ce:a6:ca:6f:5a:18:06:e0:32:f5:02:25:5c:27:65:b3:49:00:
87:25:53:ca:56:46:61:e5:b8:7d:8e:05:d7:82:5c:51:49:e1:
d8:90:97:98:d7:f4:2d:c7:43:b7:36:90:a1:ab:20:04:8d:4d:
79:d9:0e:61:c2:34:21:75:a8:de:0b:f3:e9:2d:b6:ba:c2:39:
83:66:de:8b:c1:da:6f:3a:46:80:6a:fa:b9:d3:71:c1:78:aa:
a8:19:6d:60:28:d8:34:e2:51:4c:c0:67:81:03:16:29:db:af:
ed:c1:5b:ec:66:36:c5:a3:d0:6c:33:b2:82:a7:e2:9d:ed:f6:
6c:ab:fe:39:65:c2:d0:7d:ae:65:67:ba:0a:08:eb:f0:86:cb:
38:2a:9d:ed:a2:43:65:7c:17:d7:9d:02:f1:aa:f7:80:a9:00:
45:41:4f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOykmSa08cfZgw35jn9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0
Yzc2NjQwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
EyhlOWUxZDM5NWE4MDVjMTk2ODEyYmU5MDNhMjM5YjkzMGE0MThjNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHVPMhNYNnj9xO1bf3wYK0Og9wX8
lEIWKx89aNdXHwNvIdxD8Srz/IeELTV1xDVuSFDRvcml3RT0fK6hHK9E3Mclt4Mo
yiDHx3yqLdUu1brVST2HhRDbSsER8Xnr5fuhmzypYTepTONmPc29KYDlrDz9N5g/
7evFPWv+7Z11Icbn9IjDH4tOF3GCWSyY000oh0wRODbYQOIItgqaK54J7vEVd+cj
9pVtkQxMznxnCp3wx0AW75fiK2CbUs2qacwCzES9Sx+5SufSD1i3MBIkMRoqfu8R
RyPleylA1fYFAcrqmIfwzfOFZRnTBhxWi95RKLH23q6cFpOfDOvvrVDV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnh05WoBcGWgSvpA6I5uTCkGMbnMB8GA1UdIwQY
MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt
ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl
LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlD55LH8
MHAUjPGRD+wJCXInBALxq7V2jc1FY85WixEkTpSrXqmfFqp6mVsYrW8QKansvQKt
ll7sVNzMf7QDKOJutTubVOO8wemeTVWY1Ah/zYTBAFo2Z18jzqbKb1oYBuAy9QIl
XCdls0kAhyVTylZGYeW4fY4F14JcUUnh2JCXmNf0LcdDtzaQoasgBI1NedkOYcI0
IXWo3gvz6S22usI5g2bei8HabzpGgGr6udNxwXiqqBltYCjYNOJRTMBngQMWKduv
7cFb7GY2xaPQbDOygqfine32bKv+OWXC0H2uZWe6Cgjr8IbLOCqd7aJDZXwX150C
8ar3gKkARUFPTA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:45 2025 by rpki-client