Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: j5OyPDgY/GCLs/BQwvsA4JuZedxBzL2rs2y7tWkc1Qs=
Subject key identifier: 18:BD:CF:F0:68:A7:C6:EC:75:C7:99:68:DB:11:34:9A:0E:25:B6:72
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 019A70DC3C21760347567CF139EDD26F0F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 0192
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: Re/ENpcORG58ZLJk7G3i1BXvp6pcMKo0Q8FhlYuXHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3c:21:76:03:47:56:7c:f1:39:ed:d2:6f:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=18bdcff068a7c6ec75c79968db11349a0e25b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:dc:2b:4f:aa:4d:33:2e:2c:73:4c:27:5f:
49:e4:2a:c1:ff:4a:ac:7c:00:0b:ba:49:e3:50:72:
55:02:4d:9d:97:12:92:bb:bc:f1:96:08:0a:f1:be:
a9:19:15:43:e9:cd:a7:1b:3d:61:b3:2a:00:f6:a0:
47:b5:84:d1:06:1e:0f:ca:4b:59:6c:64:72:ba:72:
d7:f0:50:23:53:57:f1:cb:02:3c:49:d0:70:f5:ac:
88:9a:64:66:e2:7e:5c:7d:42:21:dd:5e:67:8c:83:
27:00:4f:fc:1a:01:9b:3d:c8:1f:eb:d9:38:35:bc:
80:e2:dc:41:2c:dd:64:90:dc:36:87:c9:bf:3f:e7:
ea:df:03:19:44:62:de:03:17:15:15:f9:3e:59:d6:
78:44:34:71:9a:a4:e9:dd:5a:a3:ca:2d:3e:d0:08:
4e:b3:3f:97:97:2d:bb:30:3f:5a:5f:65:92:f3:3b:
19:6d:62:40:c6:d3:0a:c1:cb:97:3c:0f:a4:9e:74:
2b:4a:ac:e8:7b:5d:39:2b:62:22:cc:61:72:9f:25:
14:21:c6:df:2c:87:ee:f5:c3:c8:8a:f5:a7:75:ac:
4a:4a:b3:14:9b:76:39:60:aa:95:88:01:7d:d3:0d:
5f:01:38:63:54:b8:35:68:d3:20:b3:34:a7:69:90:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:CF:F0:68:A7:C6:EC:75:C7:99:68:DB:11:34:9A:0E:25:B6:72
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:64:94:dc:11:99:11:d5:87:9c:0a:ec:9f:a8:73:eb:79:
40:a2:10:7b:f8:d6:6f:14:13:bc:8c:05:e7:19:a0:64:49:e4:
87:91:e8:15:e8:2c:0c:ab:38:09:1c:b6:8b:3c:5e:9e:c1:8b:
1b:52:63:46:96:52:1c:0c:30:18:81:98:d7:ae:45:f6:3d:5f:
ae:59:c0:d1:d1:3f:6d:c6:10:4c:6c:e0:dc:2c:99:9a:2c:a0:
20:fb:51:13:3f:85:e8:77:88:69:b0:91:42:03:72:5a:97:72:
2b:71:37:4a:aa:aa:a6:b3:be:f8:b2:80:6d:f6:58:d7:dc:16:
b2:78:fc:52:0c:4b:ac:47:ea:34:fd:22:ac:0c:2b:ef:3e:f3:
59:38:ab:ae:8b:9e:86:76:43:42:38:90:b0:84:7a:32:5f:c4:
41:07:39:02:8e:7b:ce:c5:7f:ed:e8:a3:58:5b:7f:f5:95:56:
6d:98:a8:75:9b:3f:2f:5c:15:c7:df:a9:4b:9a:00:3f:72:47:
81:6d:78:bc:b9:73:df:d7:5b:00:9c:a3:08:97:7b:f4:0f:7f:
b4:13:a4:9e:41:7d:0e:5d:e1:7d:19:f8:ba:cc:8e:83:09:15:
9a:62:18:d6:68:64:2c:18:c5:61:f5:c3:99:85:03:b4:1e:20:
9d:9d:48:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DwhdgNHVnzxOe3Sbw80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTlmMzFjNjI2ZDM3NzE3NTc4NmUxNDlkMzI2NmM3NTNk
MDA2NGUwHhcNMjUxMTExMDMwMTEyWhcNMjUxMTEyMDMwMTEyWjAzMTEwLwYDVQQD
EygxOGJkY2ZmMDY4YTdjNmVjNzVjNzk5NjhkYjExMzQ5YTBlMjViNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB3cK0+qTTMuLHNMJ19J5CrB/0qs
fAALuknjUHJVAk2dlxKSu7zxlggK8b6pGRVD6c2nGz1hsyoA9qBHtYTRBh4PyktZ
bGRyunLX8FAjU1fxywI8SdBw9ayImmRm4n5cfUIh3V5njIMnAE/8GgGbPcgf69k4
NbyA4txBLN1kkNw2h8m/P+fq3wMZRGLeAxcVFfk+WdZ4RDRxmqTp3Vqjyi0+0AhO
sz+Xly27MD9aX2WS8zsZbWJAxtMKwcuXPA+knnQrSqzoe105K2IizGFynyUUIcbf
LIfu9cPIivWndaxKSrMUm3Y5YKqViAF90w1fAThjVLg1aNMgszSnaZBWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi9z/Bop8bsdceZaNsRNJoOJbZyMB8GA1UdIwQY
MBaAFNnp8xxibTdxdXhuFJ0yZsdT0AZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMt
NmRlNWNiZGU2YjRiLzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMtNmRlNWNiZGU2YjRi
LzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmltklNwR
mRHVh5wK7J+oc+t5QKIQe/jWbxQTvIwF5xmgZEnkh5HoFegsDKs4CRy2izxensGL
G1JjRpZSHAwwGIGY165F9j1frlnA0dE/bcYQTGzg3CyZmiygIPtREz+F6HeIabCR
QgNyWpdyK3E3SqqqprO++LKAbfZY19wWsnj8UgxLrEfqNP0irAwr7z7zWTirroue
hnZDQjiQsIR6Ml/EQQc5Ao57zsV/7eijWFt/9ZVWbZiodZs/L1wVx9+pS5oAP3JH
gW14vLlz39dbAJyjCJd79A9/tBOknkF9Dl3hfRn4usyOgwkVmmIY1mhkLBjFYfXD
mYUDtB4gnZ1I1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client