Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: Gw1KSC3lhkFCt+YHPrL/WTcPaHZ51jvI2cMpl+hFsf4=
Subject key identifier: 82:68:74:CF:C8:E3:3D:BD:06:AC:DE:5C:14:61:DB:2B:0F:B6:71:65
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019A06A47C4E3F11B18934CCFF6EA520EBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 12:00:34 +0000
Manifest this update: Tue 21 Oct 2025 12:00:34 +0000
Manifest next update: Wed 22 Oct 2025 12:00:34 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: phvmi1pCMNgfl79e3w19kIVIwHsz8DaaJp0UlBtAH5c=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:7c:4e:3f:11:b1:89:34:cc:ff:6e:a5:20:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Oct 21 12:00:34 2025 GMT
Not After : Oct 22 12:00:34 2025 GMT
Subject: CN=826874cfc8e33dbd06acde5c1461db2b0fb67165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:2d:b6:d3:c6:b7:d7:35:40:52:fd:91:60:
cd:b2:f9:7f:96:4b:82:c3:89:07:ca:5a:33:8a:1e:
92:6a:f5:25:2a:2c:1e:05:5c:6c:dc:6d:c7:7e:04:
5e:e9:48:3d:d7:ec:79:7f:da:ab:68:e8:2d:e7:a5:
4b:69:76:bf:ff:fa:fd:69:fe:66:f4:a9:94:66:fb:
bd:23:ed:d7:be:df:00:13:a1:2b:ce:7f:5d:f7:a5:
54:45:b8:1b:8a:b6:8c:dd:69:8a:c5:cb:52:96:17:
1e:b2:2a:97:24:ce:0d:c9:7a:c8:1f:eb:64:53:1d:
b9:4e:96:cb:9e:17:f6:03:7e:a6:7b:4e:f5:1a:1f:
6f:31:e2:2c:1c:32:02:3e:5a:33:aa:00:52:5e:49:
de:68:86:01:33:95:29:9a:a2:43:5d:2a:e4:fa:d1:
16:ae:3f:79:c1:ff:9c:3d:8e:2a:02:27:c1:e9:5c:
1a:c1:5d:09:0a:23:18:9d:5c:f7:51:db:0b:65:44:
8d:3e:11:c6:6b:36:4e:8c:82:ab:25:19:8c:54:52:
7b:73:0d:cc:94:ec:55:87:f3:65:e1:9f:44:e4:21:
17:d6:a8:d5:17:ab:ba:81:6d:fa:79:c8:71:bf:22:
58:f1:08:72:dd:e4:6e:83:bd:45:77:e7:92:ea:f8:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:74:CF:C8:E3:3D:BD:06:AC:DE:5C:14:61:DB:2B:0F:B6:71:65
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2f:db:1c:eb:be:35:31:91:0e:ef:73:36:c9:75:72:43:24:
8f:d2:32:e4:a3:0d:88:c6:ba:20:e0:a6:4c:77:48:32:52:65:
c7:cf:7c:0f:62:88:02:6f:f4:c4:fe:a7:b3:4b:e0:5f:3a:2e:
2c:61:00:d5:3d:98:f0:1d:78:0e:d1:f6:4b:06:aa:9e:2c:ae:
94:44:a4:dc:46:48:a3:ae:60:40:26:3c:0b:9a:85:48:1f:15:
6c:01:5e:f0:ac:72:cf:d1:b0:fe:70:24:0d:e7:1e:84:df:82:
e4:b2:a3:e3:c1:e3:93:78:00:e7:ab:5f:b4:9e:dd:8f:12:89:
a4:e8:ed:c2:96:96:bb:6b:71:9c:f7:d1:b1:b7:a4:25:76:34:
5c:c4:ff:27:52:b8:04:73:f9:1d:08:b3:1b:69:7b:5c:38:84:
ab:52:e8:ba:96:94:be:0c:dc:5c:35:b6:5d:96:59:4c:00:7d:
aa:79:a1:28:ae:ac:5b:08:33:a0:41:d2:fb:e9:bd:9d:a5:86:
05:34:fa:3f:1b:40:2f:7a:69:5f:12:6b:eb:3e:eb:41:01:f5:
54:f1:49:43:52:d7:62:88:5a:b0:41:6f:7d:48:d3:b6:81:c9:
08:d3:43:16:83:cf:cf:e7:a6:b0:a9:d0:c4:06:88:99:91:68:
69:e5:02:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGpHxOPxGxiTTM/26lIOuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm
ZTM3M2MwHhcNMjUxMDIxMTIwMDM0WhcNMjUxMDIyMTIwMDM0WjAzMTEwLwYDVQQD
Eyg4MjY4NzRjZmM4ZTMzZGJkMDZhY2RlNWMxNDYxZGIyYjBmYjY3MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju0tttPGt9c1QFL9kWDNsvl/lkuC
w4kHylozih6SavUlKiweBVxs3G3HfgRe6Ug91+x5f9qraOgt56VLaXa///r9af5m
9KmUZvu9I+3Xvt8AE6Erzn9d96VURbgbiraM3WmKxctSlhcesiqXJM4NyXrIH+tk
Ux25TpbLnhf2A36me071Gh9vMeIsHDICPlozqgBSXkneaIYBM5UpmqJDXSrk+tEW
rj95wf+cPY4qAifB6VwawV0JCiMYnVz3UdsLZUSNPhHGazZOjIKrJRmMVFJ7cw3M
lOxVh/Nl4Z9E5CEX1qjVF6u6gW36echxvyJY8Qhy3eRug71Fd+eS6vgxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJodM/I4z29BqzeXBRh2ysPtnFlMB8GA1UdIwQY
MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt
NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk
LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmC/bHOu+
NTGRDu9zNsl1ckMkj9Iy5KMNiMa6IOCmTHdIMlJlx898D2KIAm/0xP6ns0vgXzou
LGEA1T2Y8B14DtH2SwaqniyulESk3EZIo65gQCY8C5qFSB8VbAFe8Kxyz9Gw/nAk
DecehN+C5LKj48Hjk3gA56tftJ7djxKJpOjtwpaWu2txnPfRsbekJXY0XMT/J1K4
BHP5HQizG2l7XDiEq1LoupaUvgzcXDW2XZZZTAB9qnmhKK6sWwgzoEHS++m9naWG
BTT6PxtAL3ppXxJr6z7rQQH1VPFJQ1LXYohasEFvfUjTtoHJCNNDFoPPz+emsKnQ
xAaImZFoaeUCgg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:08:41 2025 by rpki-client