Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: BiVg11BCELOOZCjYIY/UgZbAdZacbKKqAnITMsgl0T4=
Subject key identifier: FB:20:D5:F2:8E:66:36:AE:05:16:52:78:EE:6A:7E:FA:38:C5:29:EB
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019A2AE81CC62411815579A0BFA4C16D224B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 081F
Signing time: Tue 28 Oct 2025 13:00:45 +0000
Manifest this update: Tue 28 Oct 2025 13:00:45 +0000
Manifest next update: Wed 29 Oct 2025 13:00:45 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: 0t9JNyxJRXXuwIuf+Bn9ZDTPIARnfkm7TSGzyIGyLgk=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:1c:c6:24:11:81:55:79:a0:bf:a4:c1:6d:22:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Oct 28 13:00:45 2025 GMT
Not After : Oct 29 13:00:45 2025 GMT
Subject: CN=fb20d5f28e6636ae05165278ee6a7efa38c529eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:50:b9:3f:c3:2a:20:be:92:4e:68:2f:99:
06:95:48:1b:94:2d:d0:52:0c:6e:9b:78:2f:5c:c3:
fb:cc:49:79:94:5a:37:b8:5d:a4:5a:16:71:c3:f0:
b8:ec:55:5f:34:aa:44:09:e7:e5:b3:5f:6f:49:4f:
1c:91:5a:35:09:ae:88:de:26:0e:89:74:b4:9d:9f:
63:ec:93:b2:c5:eb:24:11:a3:c1:2a:7e:d3:70:54:
4b:d0:dd:5f:fa:6a:6c:3a:68:a6:f3:c8:5e:8c:82:
8d:4b:8e:3d:e5:3a:d5:c9:29:5d:d2:1e:80:07:f9:
66:31:3b:65:f5:75:66:40:0d:3a:a8:4d:3e:b7:46:
e6:f2:96:ca:68:3d:7a:d3:a5:33:f9:a8:2e:df:50:
99:72:ad:45:41:b0:1e:8b:4b:8c:9c:d5:4a:f9:97:
42:ed:74:cd:3f:07:b0:20:6d:66:a7:e7:15:be:b6:
5e:28:7e:fc:1d:5e:62:80:d9:d4:ca:6e:b1:06:8d:
e9:b9:81:bd:61:60:4a:db:ff:e0:98:e6:f6:36:26:
6e:26:bf:98:62:22:09:49:05:fd:5c:4d:53:bf:65:
8e:ce:bf:e1:26:ac:bd:50:18:ca:ab:6c:da:a3:2a:
7f:5f:c7:02:d6:96:01:00:e3:df:a3:60:4c:af:85:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:D5:F2:8E:66:36:AE:05:16:52:78:EE:6A:7E:FA:38:C5:29:EB
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bb:2b:9c:11:1a:33:28:a4:bc:56:bb:3c:e8:54:55:9d:80:
0f:d1:f3:4b:7d:07:e8:52:0a:73:7b:ef:ad:23:1c:59:43:db:
95:3c:86:30:ef:9d:fe:9a:0a:b6:8f:a6:c4:54:7e:3a:1d:84:
f7:b3:4f:f9:33:60:11:d5:eb:d9:0c:0b:60:a9:39:c9:af:40:
b6:92:7c:05:6b:79:63:47:a8:9d:63:13:d8:dc:55:ed:f3:1c:
de:22:4a:18:1a:76:bc:a3:ac:fb:8d:7d:7a:29:55:f8:2c:2d:
3d:70:5f:da:aa:e6:c6:79:9a:29:3b:bf:ee:73:51:42:1c:c5:
4b:e7:cb:17:13:f0:df:2f:8f:16:d7:d1:90:0c:9c:c6:24:70:
37:01:07:de:a7:28:e2:a0:3f:be:37:06:e0:f0:59:98:6b:de:
26:5c:8b:61:32:e4:76:8a:7d:e8:f6:5c:d2:90:7c:9f:07:b6:
a1:03:21:da:cf:25:23:27:50:31:49:46:a7:e1:69:4a:89:33:
7d:38:a1:7d:95:bb:b4:e4:cb:e7:6c:e6:43:47:6c:3e:8f:b3:
aa:77:09:26:ff:64:00:fa:80:35:a0:77:d2:27:4d:11:42:fc:
ce:37:93:0d:45:45:6b:5c:62:30:77:cd:b9:37:5b:a5:d8:79:
47:a2:c9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoq6BzGJBGBVXmgv6TBbSJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjUxMDI4MTMwMDQ1WhcNMjUxMDI5MTMwMDQ1WjAzMTEwLwYDVQQD
EyhmYjIwZDVmMjhlNjYzNmFlMDUxNjUyNzhlZTZhN2VmYTM4YzUyOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxdQuT/DKiC+kk5oL5kGlUgblC3Q
Ugxum3gvXMP7zEl5lFo3uF2kWhZxw/C47FVfNKpECefls19vSU8ckVo1Ca6I3iYO
iXS0nZ9j7JOyxeskEaPBKn7TcFRL0N1f+mpsOmim88hejIKNS4495TrVySld0h6A
B/lmMTtl9XVmQA06qE0+t0bm8pbKaD1606Uz+agu31CZcq1FQbAei0uMnNVK+ZdC
7XTNPwewIG1mp+cVvrZeKH78HV5igNnUym6xBo3puYG9YWBK2//gmOb2NiZuJr+Y
YiIJSQX9XE1Tv2WOzr/hJqy9UBjKq2zaoyp/X8cC1pYBAOPfo2BMr4WyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsg1fKOZjauBRZSeO5qfvo4xSnrMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbsrnBEa
MyikvFa7POhUVZ2AD9HzS30H6FIKc3vvrSMcWUPblTyGMO+d/poKto+mxFR+Oh2E
97NP+TNgEdXr2QwLYKk5ya9AtpJ8BWt5Y0eonWMT2NxV7fMc3iJKGBp2vKOs+419
eilV+CwtPXBf2qrmxnmaKTu/7nNRQhzFS+fLFxPw3y+PFtfRkAycxiRwNwEH3qco
4qA/vjcG4PBZmGveJlyLYTLkdop96PZc0pB8nwe2oQMh2s8lIydQMUlGp+FpSokz
fTihfZW7tOTL52zmQ0dsPo+zqncJJv9kAPqANaB30idNEUL8zjeTDUVFa1xiMHfN
uTdbpdh5R6LJbQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:26:23 2025 by rpki-client