Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 7NjJzTeEoFmR0gnR3LLNvxMqDD8FSBnRHdr6X2St958=
Subject key identifier: 64:CE:2B:C8:63:61:09:15:57:14:09:5A:38:4F:F0:11:4F:AC:98:04
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019A02FEF80A7690D5B26FB839ECFE18830E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 19:00:55 +0000
Manifest this update: Mon 20 Oct 2025 19:00:55 +0000
Manifest next update: Tue 21 Oct 2025 19:00:55 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: KvkmeFy3uIrhIHjgGK0JlqvEewGJ0SHyjwuBrSZqEDA=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:f8:0a:76:90:d5:b2:6f:b8:39:ec:fe:18:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Oct 20 19:00:55 2025 GMT
Not After : Oct 21 19:00:55 2025 GMT
Subject: CN=64ce2bc8636109155714095a384ff0114fac9804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:8b:fe:2c:97:82:df:fc:88:df:1d:02:1a:
b5:f7:63:0a:b6:11:20:ea:b0:99:20:34:6e:b6:4e:
7a:2d:e4:97:e5:5d:46:18:fd:4b:ed:9e:13:5d:c4:
6b:61:26:35:f9:a9:aa:7c:42:4d:ef:26:90:b2:3b:
5e:cc:ca:1e:65:4b:fe:e4:1a:54:c1:01:52:41:e8:
bc:a1:36:dc:a3:96:89:f3:66:6c:02:bc:7a:ce:a9:
81:29:ef:f6:d8:ac:7d:de:37:aa:b5:f7:41:00:66:
47:a9:26:a3:20:a5:cb:05:82:7f:2a:69:46:36:c6:
fb:a8:ef:ce:0d:e1:b3:b2:1e:55:db:08:a4:a9:52:
58:72:75:37:3e:9d:ed:b4:81:e8:d8:8e:6f:ce:de:
d8:6b:51:8d:7f:74:87:ac:8f:04:a5:e8:e9:87:8b:
94:ef:1a:10:aa:84:f6:ff:8b:d8:74:6f:2c:c2:6c:
a2:ef:7a:bc:a1:f7:45:37:65:cf:6c:5c:40:22:1e:
02:f1:d4:a8:d1:ff:dd:12:47:02:56:28:a0:f5:06:
ed:81:23:c5:07:2e:b1:0b:8d:1b:81:35:f2:1f:ca:
d0:cc:c6:26:73:09:50:4a:6c:21:a9:04:94:7d:a8:
41:f6:24:4e:3d:e9:15:40:96:5b:e7:7b:54:d5:41:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:2B:C8:63:61:09:15:57:14:09:5A:38:4F:F0:11:4F:AC:98:04
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:a3:4c:2f:70:40:55:5f:d6:30:a3:89:4c:02:74:30:21:
4b:b1:e2:84:a3:fd:06:c1:52:34:95:4e:b4:bc:61:cb:e8:d7:
d7:74:0e:10:78:dc:d0:bb:76:d4:ef:ed:03:a3:ee:29:b1:30:
99:f6:7b:19:d1:5c:1f:fd:74:b1:d5:33:1d:b0:7c:8b:e2:b9:
b1:9e:d4:51:0d:07:c4:7b:4f:c2:aa:a3:d2:3e:5a:c2:1d:94:
03:e3:77:f4:f0:72:ce:ea:a0:b1:36:dc:5a:1e:39:2c:12:e6:
44:14:da:cf:ed:41:fc:d9:d6:a6:53:27:f5:ae:04:ec:22:27:
b2:df:38:a9:42:40:fe:ed:85:90:b3:b8:be:b9:70:9c:e9:bf:
d6:d5:d0:3c:50:aa:1a:f9:00:f9:ea:6e:e7:f3:d1:84:a4:25:
53:1f:54:27:a4:3d:78:2f:2d:df:f3:f4:32:3f:29:69:6f:be:
c2:c1:3c:30:6b:16:7c:e9:3a:21:39:b3:5f:c5:6e:46:fb:f8:
b1:20:94:49:db:85:97:8a:a9:14:94:86:d6:07:a7:e8:18:22:
b5:be:af:ca:7e:fd:d0:64:26:b6:57:b4:72:84:82:67:90:01:
18:83:3d:c8:ce:80:4b:c2:b6:63:8b:45:35:74:75:d9:b5:6d:
5c:20:55:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoC/vgKdpDVsm+4Oez+GIMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2
N2EwYzEwHhcNMjUxMDIwMTkwMDU1WhcNMjUxMDIxMTkwMDU1WjAzMTEwLwYDVQQD
Eyg2NGNlMmJjODYzNjEwOTE1NTcxNDA5NWEzODRmZjAxMTRmYWM5ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGyL/iyXgt/8iN8dAhq192MKthEg
6rCZIDRutk56LeSX5V1GGP1L7Z4TXcRrYSY1+amqfEJN7yaQsjtezMoeZUv+5BpU
wQFSQei8oTbco5aJ82ZsArx6zqmBKe/22Kx93jeqtfdBAGZHqSajIKXLBYJ/KmlG
Nsb7qO/ODeGzsh5V2wikqVJYcnU3Pp3ttIHo2I5vzt7Ya1GNf3SHrI8Epejph4uU
7xoQqoT2/4vYdG8swmyi73q8ofdFN2XPbFxAIh4C8dSo0f/dEkcCViig9QbtgSPF
By6xC40bgTXyH8rQzMYmcwlQSmwhqQSUfahB9iROPekVQJZb53tU1UH13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTOK8hjYQkVVxQJWjhP8BFPrJgEMB8GA1UdIwQY
MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt
Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw
LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRmjTC9w
QFVf1jCjiUwCdDAhS7HihKP9BsFSNJVOtLxhy+jX13QOEHjc0Lt21O/tA6PuKbEw
mfZ7GdFcH/10sdUzHbB8i+K5sZ7UUQ0HxHtPwqqj0j5awh2UA+N39PByzuqgsTbc
Wh45LBLmRBTaz+1B/NnWplMn9a4E7CInst84qUJA/u2FkLO4vrlwnOm/1tXQPFCq
GvkA+epu5/PRhKQlUx9UJ6Q9eC8t3/P0Mj8paW++wsE8MGsWfOk6ITmzX8VuRvv4
sSCUSduFl4qpFJSG1gen6Bgitb6vyn790GQmtle0coSCZ5ABGIM9yM6AS8K2Y4tF
NXR12bVtXCBVfA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:10 2025 by rpki-client