Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: DEiaLu68BLEzuwuVoFfHQhXTS5ueG4fzZ3BdikqdwBM=
Subject key identifier: D6:49:FD:F5:6E:00:53:F9:72:9A:DE:DD:F2:AD:05:0B:6E:54:96:55
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 019A71B8B7660629BD7AC1283CBB7A5DCE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0F9C
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: N0dQMg+PEGxrD3eADvvwombSeo/8vVVDaKh9A3ZMwjY=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b7:66:06:29:bd:7a:c1:28:3c:bb:7a:5d:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=d649fdf56e0053f9729adeddf2ad050b6e549655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:57:42:c9:18:a6:32:56:30:e0:6d:e9:de:
52:58:b2:27:5f:1b:8a:5b:a7:de:91:ea:a9:bd:d2:
ac:c9:f6:6b:86:e8:e5:81:7c:7b:d1:7d:d2:3f:80:
a2:e1:18:25:f8:8d:31:91:42:16:f5:9a:56:66:d2:
04:8d:0b:aa:ec:72:50:d7:85:9c:4c:e9:67:1a:6b:
b1:d4:e8:1e:47:56:5b:2f:1f:c9:a3:67:12:74:91:
27:c9:ad:2d:13:f7:e5:f0:f3:8a:94:78:08:6a:96:
3a:8b:95:f9:68:22:81:3e:83:9f:99:8f:d5:52:41:
f7:ed:5e:8b:70:66:50:39:a2:c6:dd:fd:b9:74:d8:
90:03:7c:61:d1:da:4e:ed:64:0a:97:a0:28:de:10:
4c:89:7c:03:4f:12:e0:79:92:55:f4:1f:21:b6:7f:
2e:e0:f9:08:48:51:47:ce:b2:55:f2:9b:97:33:99:
a7:68:d0:1e:07:0b:1b:e8:02:be:50:57:e8:66:82:
2d:a7:31:a1:1a:25:3f:df:77:af:0b:3b:f2:c7:88:
2f:35:ab:75:05:54:74:b5:81:78:49:13:11:f2:38:
cc:19:a0:66:26:b3:ad:c6:f8:39:18:c3:ff:aa:18:
62:48:dc:c5:e5:19:7e:5b:fd:39:00:7c:14:80:60:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:FD:F5:6E:00:53:F9:72:9A:DE:DD:F2:AD:05:0B:6E:54:96:55
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:13:54:5e:b9:ed:0d:83:e4:99:41:5e:e4:46:53:71:9b:
99:ae:6b:22:47:42:24:e2:fa:91:b7:f5:cc:12:42:c8:61:4e:
d9:1e:01:8d:58:69:17:61:e8:ed:71:eb:56:13:ba:40:87:33:
c0:ed:17:b1:19:4e:be:90:5b:5e:17:d4:4d:d7:7d:7a:55:08:
60:c8:d8:0e:f6:64:bf:a6:97:68:cb:14:f9:61:1c:b9:fd:9f:
c3:b8:1e:39:b4:87:cd:59:3d:a6:02:bb:8b:90:20:07:ec:dc:
f3:ab:d9:13:62:06:9a:57:d0:df:93:b7:4d:8f:7d:e3:b1:a5:
68:ea:c4:3c:6c:32:0e:e3:d1:2c:f2:6f:01:e2:07:ec:17:59:
75:05:5d:b7:3a:bf:b4:4a:ab:05:45:bd:bf:32:6e:73:27:3a:
5d:a8:6f:1c:99:1a:f2:3e:3b:fb:53:75:c1:f3:d7:98:dc:42:
0b:ce:c1:b9:a1:55:7c:59:3e:48:fd:4c:4f:21:2d:91:65:9b:
14:39:27:6c:91:9d:65:a7:d8:44:6c:39:b8:b8:e6:46:8d:28:
21:d0:0c:05:8b:76:5e:29:55:e3:af:33:c1:7b:ff:f5:58:b9:
19:e5:da:fa:a6:9a:06:2d:0a:ba:86:48:38:49:99:f3:27:d5:
c9:6d:fa:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLdmBim9esEoPLt6Xc4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjUxMTExMDcwMjAxWhcNMjUxMTEyMDcwMjAxWjAzMTEwLwYDVQQD
EyhkNjQ5ZmRmNTZlMDA1M2Y5NzI5YWRlZGRmMmFkMDUwYjZlNTQ5NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxXQskYpjJWMOBt6d5SWLInXxuK
W6fekeqpvdKsyfZrhujlgXx70X3SP4Ci4Rgl+I0xkUIW9ZpWZtIEjQuq7HJQ14Wc
TOlnGmux1OgeR1ZbLx/Jo2cSdJEnya0tE/fl8POKlHgIapY6i5X5aCKBPoOfmY/V
UkH37V6LcGZQOaLG3f25dNiQA3xh0dpO7WQKl6Ao3hBMiXwDTxLgeZJV9B8htn8u
4PkISFFHzrJV8puXM5mnaNAeBwsb6AK+UFfoZoItpzGhGiU/33evCzvyx4gvNat1
BVR0tYF4SRMR8jjMGaBmJrOtxvg5GMP/qhhiSNzF5Rl+W/05AHwUgGCDVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZJ/fVuAFP5cpre3fKtBQtuVJZVMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1UTVF65
7Q2D5JlBXuRGU3Gbma5rIkdCJOL6kbf1zBJCyGFO2R4BjVhpF2Ho7XHrVhO6QIcz
wO0XsRlOvpBbXhfUTdd9elUIYMjYDvZkv6aXaMsU+WEcuf2fw7geObSHzVk9pgK7
i5AgB+zc86vZE2IGmlfQ35O3TY9947GlaOrEPGwyDuPRLPJvAeIH7BdZdQVdtzq/
tEqrBUW9vzJucyc6XahvHJka8j47+1N1wfPXmNxCC87BuaFVfFk+SP1MTyEtkWWb
FDknbJGdZafYRGw5uLjmRo0oIdAMBYt2XilV468zwXv/9Vi5GeXa+qaaBi0KuoZI
OEmZ8yfVyW36Vw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client