Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: 44LlmA+Nji0kn1nwo4Yd5nvVCqZME1H47SSCWthN4V4=
Subject key identifier: 12:2F:26:4C:10:87:7E:D7:D5:15:DD:9F:D1:AF:51:15:B0:19:86:05
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019A258AA8AC88510FB54134376C9D5A1A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1708
Signing time: Mon 27 Oct 2025 12:00:35 +0000
Manifest this update: Mon 27 Oct 2025 12:00:35 +0000
Manifest next update: Tue 28 Oct 2025 12:00:35 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: s0s09pBm4UuMJCqgJG+6aMBWfCGk4OzB1uEstRF4tmw=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:a8:ac:88:51:0f:b5:41:34:37:6c:9d:5a:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Oct 27 12:00:35 2025 GMT
Not After : Oct 28 12:00:35 2025 GMT
Subject: CN=122f264c10877ed7d515dd9fd1af5115b0198605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:49:0e:8c:d4:89:44:29:ef:fa:8e:7a:d5:
1e:41:d0:ba:9a:76:ad:f3:b7:25:94:d9:d5:ce:6c:
5f:70:38:c9:6a:42:38:75:68:41:3c:d7:f8:1e:02:
83:67:2e:6b:2c:96:5f:6d:46:4e:78:38:8f:1b:0b:
45:a2:14:6f:01:dd:78:f9:89:7b:68:2a:f6:36:c9:
fc:2f:e1:4c:1f:dd:da:c5:54:a1:2d:ff:3c:5f:65:
6f:d5:24:04:01:a1:00:79:2a:5c:65:07:19:ba:c9:
d5:b0:89:15:5c:07:79:9d:9e:6d:ca:ab:e7:6a:ec:
93:32:9c:20:6c:6c:6e:61:d9:36:35:5a:a5:00:f9:
cf:83:80:0d:a7:f3:ac:6e:66:2b:5d:3e:2e:21:ca:
bf:97:7f:3d:b1:d3:89:0f:07:2f:21:a4:0d:bd:08:
53:3a:5b:ed:a2:92:a5:79:2d:7d:80:51:52:c5:d5:
1c:56:7d:98:63:b8:8c:56:e8:14:e9:73:74:6a:72:
32:cc:c5:39:65:ef:01:99:da:ee:bf:57:30:da:cc:
85:d0:f8:40:28:33:a9:93:c0:2c:83:01:08:58:76:
43:8a:06:97:42:78:f0:22:84:e4:2a:68:ed:54:dc:
e0:af:e3:65:7a:ff:1e:c6:ee:c8:32:08:cf:31:30:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:26:4C:10:87:7E:D7:D5:15:DD:9F:D1:AF:51:15:B0:19:86:05
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:81:45:27:e3:5d:2b:98:e7:37:28:1c:9a:88:63:2b:74:
5c:3b:8f:ec:70:55:f2:85:27:fa:87:15:a6:81:f2:4a:64:e0:
d8:82:f3:9a:86:64:58:eb:68:aa:df:ad:e5:1f:d1:ef:1a:6f:
ed:72:f8:b6:fc:57:ed:d8:83:61:b1:9a:25:a1:6a:fd:15:36:
4b:8c:79:1b:d8:21:39:d4:4e:3e:56:56:4f:ee:a8:a6:be:95:
ab:37:7b:21:9f:91:16:10:58:b6:55:bf:5f:be:85:b2:a4:19:
ba:e2:2f:b3:a6:03:61:43:be:e4:ef:3c:75:77:1a:0d:ce:e3:
f2:57:aa:c0:36:a1:7e:42:35:66:79:cf:8d:f9:6c:60:67:bf:
21:6e:17:cf:df:1d:85:a7:3c:33:93:a3:0e:83:e1:91:ae:0b:
d1:6c:3a:ec:f9:d3:fc:ad:52:70:f6:8e:b3:32:bc:19:33:c5:
5d:22:b4:bb:bc:8a:70:14:42:8f:9f:2a:d9:25:5f:58:90:fa:
cf:ae:c1:39:85:fd:ca:87:70:a7:e8:7c:2d:34:64:ef:60:51:
17:61:7d:27:24:b5:fb:c2:7d:66:6b:0a:c5:ea:e3:2a:c9:1d:
ca:52:73:89:ac:bc:61:5b:9b:7e:29:3c:d3:b4:53:17:1b:9a:
8c:9c:b0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoliqisiFEPtUE0N2ydWhqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjUxMDI3MTIwMDM1WhcNMjUxMDI4MTIwMDM1WjAzMTEwLwYDVQQD
EygxMjJmMjY0YzEwODc3ZWQ3ZDUxNWRkOWZkMWFmNTExNWIwMTk4NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4xJDozUiUQp7/qOetUeQdC6mnat
87cllNnVzmxfcDjJakI4dWhBPNf4HgKDZy5rLJZfbUZOeDiPGwtFohRvAd14+Yl7
aCr2Nsn8L+FMH93axVShLf88X2Vv1SQEAaEAeSpcZQcZusnVsIkVXAd5nZ5tyqvn
auyTMpwgbGxuYdk2NVqlAPnPg4ANp/OsbmYrXT4uIcq/l389sdOJDwcvIaQNvQhT
OlvtopKleS19gFFSxdUcVn2YY7iMVugU6XN0anIyzMU5Ze8Bmdruv1cw2syF0PhA
KDOpk8AsgwEIWHZDigaXQnjwIoTkKmjtVNzgr+Nlev8exu7IMgjPMTDenQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIvJkwQh37X1RXdn9GvURWwGYYFMB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7OBRSfj
XSuY5zcoHJqIYyt0XDuP7HBV8oUn+ocVpoHySmTg2ILzmoZkWOtoqt+t5R/R7xpv
7XL4tvxX7diDYbGaJaFq/RU2S4x5G9ghOdROPlZWT+6opr6Vqzd7IZ+RFhBYtlW/
X76FsqQZuuIvs6YDYUO+5O88dXcaDc7j8leqwDahfkI1ZnnPjflsYGe/IW4Xz98d
hac8M5OjDoPhka4L0Ww67PnT/K1ScPaOszK8GTPFXSK0u7yKcBRCj58q2SVfWJD6
z67BOYX9yodwp+h8LTRk72BRF2F9JyS1+8J9ZmsKxerjKskdylJziay8YVubfik8
07RTFxuajJywLQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:26:07 2025 by rpki-client