Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: IQLzj9GrFivVUN0H2CHr9sRmMNcDOhgMjySNaRvltdU=
Subject key identifier: 1F:72:EF:1B:F2:96:C3:A3:30:A3:F4:5F:19:F8:A8:C2:28:82:31:F1
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 019A2A43A34BB448A0ADB8FD2070C5DAD9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 0991
Signing time: Tue 28 Oct 2025 10:01:06 +0000
Manifest this update: Tue 28 Oct 2025 10:01:06 +0000
Manifest next update: Wed 29 Oct 2025 10:01:06 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: TbhSnjmyR06Zibam1QXJWTs8toJt8/S7xUAVR8wXl74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:a3:4b:b4:48:a0:ad:b8:fd:20:70:c5:da:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Oct 28 10:01:06 2025 GMT
Not After : Oct 29 10:01:06 2025 GMT
Subject: CN=1f72ef1bf296c3a330a3f45f19f8a8c2288231f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:93:34:79:aa:68:3b:b8:c0:b2:b8:59:16:
60:b1:3f:23:a8:5e:aa:12:91:2d:1d:0a:87:81:df:
cf:bd:46:7a:80:b0:5a:02:5d:45:d4:f1:fe:c5:86:
b9:e6:4a:8b:18:d0:a0:d1:12:a7:52:18:5f:ca:0c:
b9:8d:df:c0:42:6d:52:b3:55:b3:e5:49:ee:cf:01:
1f:f9:16:cd:2e:58:e3:bb:d4:10:03:25:70:4e:8c:
45:e7:93:51:6f:f7:21:09:61:fd:0d:9f:30:45:26:
ce:18:9f:8a:5f:81:73:cf:5a:c0:e4:e7:24:b1:5a:
bb:eb:0c:e2:fb:be:f4:37:f0:7c:30:66:4a:23:2d:
54:68:37:99:f9:92:ad:d3:05:70:ed:ae:1e:21:e5:
05:26:a5:cf:fe:42:b9:82:e6:00:41:c2:3d:98:6c:
cd:3b:b2:e1:81:75:49:20:10:1f:dc:0b:ee:8c:c8:
94:c2:83:f7:c9:d7:06:0d:51:f6:20:5e:b7:bb:72:
e9:c5:d9:6e:39:61:ce:4e:f6:26:2d:3c:64:8c:9b:
d1:6b:5c:16:65:f9:c8:c6:a9:b2:21:47:ea:e5:e1:
89:a7:d3:a9:2e:7b:47:0e:73:ca:56:c9:96:bb:0a:
ca:ff:d8:5f:44:4b:24:af:70:9e:9d:24:79:cb:41:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:EF:1B:F2:96:C3:A3:30:A3:F4:5F:19:F8:A8:C2:28:82:31:F1
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:54:73:5c:31:ae:da:f9:ee:e7:2a:80:8e:d4:01:12:27:0f:
61:cd:d0:10:69:5a:15:64:5c:46:ea:b0:67:61:f0:16:db:6e:
f7:ad:03:48:bf:35:19:69:8d:a6:f4:90:5b:bf:e1:57:0e:5b:
2f:0e:ae:2f:ef:6a:50:19:d4:9f:05:9e:6d:e4:55:73:50:80:
53:42:6f:a9:02:81:ab:6b:de:9b:78:1d:b3:3e:70:29:79:e3:
8e:2f:dc:b5:e9:58:0d:6f:61:da:7f:ee:d6:b6:c3:c0:06:a6:
7f:6f:3e:15:8a:be:eb:e1:3c:5f:8b:8b:79:cf:44:76:c0:84:
5a:32:a7:a5:1a:bd:42:80:19:3d:2d:ee:d8:bd:57:9b:d5:8d:
79:11:5f:a0:72:79:cd:dd:41:51:e0:20:a7:aa:84:b8:6f:56:
3b:5e:17:22:66:26:07:17:19:0a:25:ab:a1:08:0c:cf:c0:bd:
36:ed:db:86:0b:71:85:7e:86:8e:a4:4f:cf:0d:94:57:dc:97:
61:05:70:c6:0d:9f:da:f0:08:99:bc:47:a0:1d:75:51:e1:84:
cf:9e:75:65:d3:2f:41:7f:8e:fa:8c:c8:86:a2:85:c1:aa:c7:
bd:a2:f2:63:b4:e3:7c:40:0c:32:09:91:5e:2e:3e:20:a5:6b:
8d:36:26:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ6NLtEigrbj9IHDF2tneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWRjZDdhZWE4OTIzYThhYWZkMmEzOGQxZGMzZDA2Njg0
MDc5YTYwHhcNMjUxMDI4MTAwMTA2WhcNMjUxMDI5MTAwMTA2WjAzMTEwLwYDVQQD
EygxZjcyZWYxYmYyOTZjM2EzMzBhM2Y0NWYxOWY4YThjMjI4ODIzMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+TNHmqaDu4wLK4WRZgsT8jqF6q
EpEtHQqHgd/PvUZ6gLBaAl1F1PH+xYa55kqLGNCg0RKnUhhfygy5jd/AQm1Ss1Wz
5UnuzwEf+RbNLljju9QQAyVwToxF55NRb/chCWH9DZ8wRSbOGJ+KX4Fzz1rA5Ock
sVq76wzi+770N/B8MGZKIy1UaDeZ+ZKt0wVw7a4eIeUFJqXP/kK5guYAQcI9mGzN
O7LhgXVJIBAf3AvujMiUwoP3ydcGDVH2IF63u3LpxdluOWHOTvYmLTxkjJvRa1wW
ZfnIxqmyIUfq5eGJp9OpLntHDnPKVsmWuwrK/9hfREskr3CenSR5y0FxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9y7xvylsOjMKP0Xxn4qMIogjHxMB8GA1UdIwQY
MBaAFNsdzXrqiSOoqv0qONHcPQZoQHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zNWFkNmUtNGQ2Yi00ZjljLTkwZjMt
OTBiMThjYThjMjBjLzEvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zNWFkNmUtNGQ2Yi00ZjljLTkwZjMtOTBiMThjYThjMjBj
LzEvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplRzXDGu
2vnu5yqAjtQBEicPYc3QEGlaFWRcRuqwZ2HwFttu960DSL81GWmNpvSQW7/hVw5b
Lw6uL+9qUBnUnwWebeRVc1CAU0JvqQKBq2vem3gdsz5wKXnjji/ctelYDW9h2n/u
1rbDwAamf28+FYq+6+E8X4uLec9EdsCEWjKnpRq9QoAZPS3u2L1Xm9WNeRFfoHJ5
zd1BUeAgp6qEuG9WO14XImYmBxcZCiWroQgMz8C9Nu3bhgtxhX6GjqRPzw2UV9yX
YQVwxg2f2vAImbxHoB11UeGEz551ZdMvQX+O+ozIhqKFwarHvaLyY7TjfEAMMgmR
Xi4+IKVrjTYmlw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:51:08 2025 by rpki-client