Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: ozXuWbjKL+45S63IEPHNC3zLwIo9E0YIpOtV7yiHDM0=
Subject key identifier: 46:2C:3E:2F:41:D1:3F:A1:2E:34:71:25:C0:13:9E:50:70:DE:8F:E3
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 019A7149E7CE89DA5F6A0751FC2C63D98C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: E2
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: BkMQYoAI25wyv3Cu863Oy/X0IiQBqkiq0/KFR4INnW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e7:ce:89:da:5f:6a:07:51:fc:2c:63:d9:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=462c3e2f41d13fa12e347125c0139e5070de8fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:13:bc:0b:bc:dc:75:0d:03:83:cb:c3:d0:
3e:1c:94:24:18:f9:4d:18:5e:95:1f:73:f4:ed:ca:
16:12:2e:30:8e:a2:f0:43:dd:1e:5e:df:f1:68:cf:
a1:4b:25:73:ff:1e:cb:20:0d:5a:e2:db:24:39:4b:
a2:be:18:8c:78:38:51:56:bd:ef:cd:1c:6c:ce:a9:
0d:3c:98:90:5e:95:be:60:7f:4e:fa:2c:d3:39:1f:
3f:38:73:c8:29:14:f0:85:a2:19:c8:37:15:13:bf:
9a:20:7a:fb:01:f2:98:81:4d:6e:b9:7c:55:8c:ec:
71:de:af:fc:32:8c:d1:d8:27:1f:e9:91:63:3f:20:
e0:6a:6e:71:96:2d:5c:1d:4f:0c:9f:6b:6a:5a:24:
c6:49:2b:10:a4:21:a0:a6:ec:27:74:d5:6e:64:62:
d6:c9:a5:01:d5:59:52:a2:13:17:73:0b:e4:d9:dd:
1e:4e:6e:b9:ec:09:1b:04:3e:1d:65:36:f5:3d:07:
f3:8c:f6:ad:7e:e2:c6:29:ba:f8:dd:c5:df:2a:0f:
fe:88:47:6e:4b:ec:37:ab:35:69:b2:7a:9a:45:f3:
d0:f7:ef:d5:5b:ac:1b:54:b2:1c:0f:94:27:1c:d0:
02:86:03:71:d1:c6:87:0b:0f:7a:cb:97:26:fb:f9:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:3E:2F:41:D1:3F:A1:2E:34:71:25:C0:13:9E:50:70:DE:8F:E3
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:29:eb:cb:11:b3:1a:ad:55:f8:d9:89:d4:3b:93:82:72:
1d:bf:20:39:ee:40:89:2c:bd:84:5b:e8:76:e9:33:43:1d:c5:
ea:95:34:ba:ab:f3:97:48:23:3a:1f:16:a9:a5:40:f9:a5:56:
3b:a5:10:cc:3e:25:4f:93:41:5c:84:1f:f0:ad:04:99:02:be:
4d:21:c1:c4:5f:1a:9c:76:93:8a:a4:66:61:2a:78:53:aa:62:
c2:08:f4:c8:27:70:bd:02:18:82:0d:7b:54:20:da:05:34:42:
2c:5a:10:c3:e9:fc:c7:de:55:a0:28:7b:57:60:00:09:8f:cd:
22:c4:e8:52:3d:52:38:21:fe:52:92:c1:54:da:53:17:78:b7:
f2:73:2e:50:65:94:41:a4:fd:f7:83:d5:ba:50:76:47:70:db:
d1:5f:64:d5:3a:74:d3:82:0f:b3:b9:ac:c7:d8:75:5e:4e:ba:
c7:2d:93:62:2e:0f:ba:1c:0c:d3:5a:ae:22:92:04:56:ae:93:
f2:79:1f:bb:36:a8:da:01:e0:04:d5:53:87:f8:e3:52:9c:01:
48:36:8a:72:c4:a4:54:55:b2:84:31:4f:30:75:96:82:96:16:
bb:00:e1:2c:03:8d:25:fd:6b:59:8a:c0:02:4b:de:49:a1:df:
80:64:65:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSefOidpfagdR/Cxj2YxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmJmZjM2YmY5NTdhOTE2N2VlM2YwZmE0YTY0ZDg3MjUx
NmU3MmQwHhcNMjUxMTExMDUwMTAwWhcNMjUxMTEyMDUwMTAwWjAzMTEwLwYDVQQD
Eyg0NjJjM2UyZjQxZDEzZmExMmUzNDcxMjVjMDEzOWU1MDcwZGU4ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtgTvAu83HUNA4PLw9A+HJQkGPlN
GF6VH3P07coWEi4wjqLwQ90eXt/xaM+hSyVz/x7LIA1a4tskOUuivhiMeDhRVr3v
zRxszqkNPJiQXpW+YH9O+izTOR8/OHPIKRTwhaIZyDcVE7+aIHr7AfKYgU1uuXxV
jOxx3q/8MozR2Ccf6ZFjPyDgam5xli1cHU8Mn2tqWiTGSSsQpCGgpuwndNVuZGLW
yaUB1VlSohMXcwvk2d0eTm657AkbBD4dZTb1PQfzjPatfuLGKbr43cXfKg/+iEdu
S+w3qzVpsnqaRfPQ9+/VW6wbVLIcD5QnHNAChgNx0caHCw96y5cm+/mVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYsPi9B0T+hLjRxJcATnlBw3o/jMB8GA1UdIwQY
MBaAFNkr/za/lXqRZ+4/D6SmTYclFuctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjct
NWRmZWI5NzgyY2ZiLzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjctNWRmZWI5NzgyY2Zi
LzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDMp68sR
sxqtVfjZidQ7k4JyHb8gOe5AiSy9hFvodukzQx3F6pU0uqvzl0gjOh8WqaVA+aVW
O6UQzD4lT5NBXIQf8K0EmQK+TSHBxF8anHaTiqRmYSp4U6piwgj0yCdwvQIYgg17
VCDaBTRCLFoQw+n8x95VoCh7V2AACY/NIsToUj1SOCH+UpLBVNpTF3i38nMuUGWU
QaT994PVulB2R3Db0V9k1Tp004IPs7msx9h1Xk66xy2TYi4PuhwM01quIpIEVq6T
8nkfuzao2gHgBNVTh/jjUpwBSDaKcsSkVFWyhDFPMHWWgpYWuwDhLAONJf1rWYrA
AkveSaHfgGRlHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client