Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: dNBcrY+lyeMGsPQfcWHvYVp+mG/KkUyhu3B1GKYyrAA=
Subject key identifier: E7:19:87:36:03:63:DA:55:0D:A0:F3:16:72:F0:A9:C7:52:05:CA:53
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 0199F87BF4D6ABF60EB528EDCE1B356AC9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 017D
Signing time: Sat 18 Oct 2025 18:01:37 +0000
Manifest this update: Sat 18 Oct 2025 18:01:37 +0000
Manifest next update: Sun 19 Oct 2025 18:01:37 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: 7nQJ4LNHOtRmtH0zBnqZqDFYBy80w+EBMyVutveieyM=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:7b:f4:d6:ab:f6:0e:b5:28:ed:ce:1b:35:6a:c9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Oct 18 18:01:37 2025 GMT
Not After : Oct 19 18:01:37 2025 GMT
Subject: CN=e71987360363da550da0f31672f0a9c75205ca53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:0a:f7:fb:e0:21:b9:42:8b:99:d5:f1:e2:
a5:fa:eb:b3:f2:7a:44:af:37:02:bb:5e:d2:5d:56:
50:35:0c:25:9f:9d:8d:34:1c:9c:dd:c9:35:33:ae:
be:f7:6f:2b:30:02:9d:c1:f2:f0:6a:49:1e:09:c1:
f5:d7:a2:ee:ee:24:d7:22:46:ed:0b:2a:bd:07:55:
33:8a:9e:8a:0e:97:b7:8c:c0:62:27:85:59:c4:99:
f4:2c:51:e2:dd:29:d8:78:33:d4:65:d4:3d:09:86:
1d:30:5c:7d:ad:bb:1d:f7:e8:2c:f2:fd:e1:a5:09:
66:24:ac:49:33:f9:ec:3a:5c:7f:f8:99:4b:62:b7:
5b:d8:72:c4:e7:e5:4b:a1:ad:43:40:ba:35:a9:f1:
bc:20:09:01:22:ff:12:4c:88:cb:0d:de:f7:ac:79:
b1:94:50:ae:39:a0:37:97:17:64:1e:a0:90:90:0f:
82:47:01:55:b2:07:02:41:d6:11:e5:ba:75:4c:e7:
99:f8:39:a3:f1:25:75:1a:a9:99:e1:77:20:31:76:
d9:a1:f0:77:1f:3d:34:f1:f7:64:00:5e:25:53:18:
17:1c:dd:c0:57:77:f6:47:42:2a:43:a2:2a:01:56:
39:d6:79:3f:34:4e:5c:31:d8:99:e6:b8:f9:84:7d:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:87:36:03:63:DA:55:0D:A0:F3:16:72:F0:A9:C7:52:05:CA:53
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:31:f7:c5:bf:ce:58:9f:cb:71:bb:5a:7e:ed:1d:9c:5b:e6:
96:a5:47:f4:0d:0b:cc:2c:43:42:62:8c:61:ef:7e:a8:ef:66:
7e:3a:f6:83:fc:f3:de:06:12:5f:4b:4d:1c:7c:e1:3e:00:89:
9b:98:42:a2:31:50:ea:a3:37:b7:01:83:d3:89:8c:17:4e:b5:
b0:b5:a3:7d:74:d2:f0:4d:de:19:18:03:d9:6b:89:d7:f1:16:
d7:65:50:ee:02:0e:a9:a4:23:4d:2e:8f:c5:2b:df:bb:b6:df:
7d:02:57:5b:56:c7:ec:93:68:ca:b2:d8:16:10:eb:8b:f5:de:
c7:d7:a7:21:99:fa:df:8b:1a:f4:05:7a:f3:a2:28:fc:a1:93:
4f:86:5c:fe:8c:5d:6c:19:79:8b:70:2d:91:9b:bf:3a:1b:e6:
0e:f9:1c:16:e3:6a:3c:84:50:47:53:5a:ae:71:f7:55:0a:45:
f3:71:d0:6e:76:8b:8a:ae:1a:5b:c2:f5:db:d0:ac:d1:bf:a0:
08:9e:f9:98:c7:49:b9:34:18:b6:5d:f3:46:95:25:bf:b5:f9:
64:9e:b6:8f:dc:a5:b7:ef:d9:05:6e:4d:d7:b5:a1:05:9b:ba:
9e:e4:74:9f:7b:16:b0:f1:9d:e0:29:c2:f3:f8:91:e9:b4:b9:
f7:bc:f0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn4e/TWq/YOtSjtzhs1asnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjUxMDE4MTgwMTM3WhcNMjUxMDE5MTgwMTM3WjAzMTEwLwYDVQQD
EyhlNzE5ODczNjAzNjNkYTU1MGRhMGYzMTY3MmYwYTljNzUyMDVjYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoIK9/vgIblCi5nV8eKl+uuz8npE
rzcCu17SXVZQNQwln52NNByc3ck1M66+928rMAKdwfLwakkeCcH116Lu7iTXIkbt
Cyq9B1Uzip6KDpe3jMBiJ4VZxJn0LFHi3SnYeDPUZdQ9CYYdMFx9rbsd9+gs8v3h
pQlmJKxJM/nsOlx/+JlLYrdb2HLE5+VLoa1DQLo1qfG8IAkBIv8STIjLDd73rHmx
lFCuOaA3lxdkHqCQkA+CRwFVsgcCQdYR5bp1TOeZ+Dmj8SV1GqmZ4XcgMXbZofB3
Hz008fdkAF4lUxgXHN3AV3f2R0IqQ6IqAVY51nk/NE5cMdiZ5rj5hH22wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcZhzYDY9pVDaDzFnLwqcdSBcpTMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATH3xb/O
WJ/Lcbtafu0dnFvmlqVH9A0LzCxDQmKMYe9+qO9mfjr2g/zz3gYSX0tNHHzhPgCJ
m5hCojFQ6qM3twGD04mMF061sLWjfXTS8E3eGRgD2WuJ1/EW12VQ7gIOqaQjTS6P
xSvfu7bffQJXW1bH7JNoyrLYFhDri/Xex9enIZn634sa9AV686Io/KGTT4Zc/oxd
bBl5i3AtkZu/OhvmDvkcFuNqPIRQR1NarnH3VQpF83HQbnaLiq4aW8L129Cs0b+g
CJ75mMdJuTQYtl3zRpUlv7X5ZJ62j9ylt+/ZBW5N17WhBZu6nuR0n3sWsPGd4CnC
8/iR6bS597zwiw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 04:00:26 2025 by rpki-client