Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: GOhCq+tqkN5zPAqIOAuctmbA4Tyey3bM404uc5OGRxY=
Subject key identifier: 78:14:53:C4:7F:BA:BB:DF:24:A7:73:94:47:37:DC:1C:82:60:01:80
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 019A72CAB3173697CA4EEDAAFEF7EF9D9889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 029F
Signing time: Tue 11 Nov 2025 12:01:18 +0000
Manifest this update: Tue 11 Nov 2025 12:01:18 +0000
Manifest next update: Wed 12 Nov 2025 12:01:18 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: 9nR5aab6nw+xYA524+wYEhmvi7yua7PWFt6D3WNYgME=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b3:17:36:97:ca:4e:ed:aa:fe:f7:ef:9d:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Nov 11 12:01:18 2025 GMT
Not After : Nov 12 12:01:18 2025 GMT
Subject: CN=781453c47fbabbdf24a773944737dc1c82600180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:2a:d3:be:ec:01:f6:c1:68:25:56:f4:0f:
b9:cd:cd:ee:d7:00:d9:e1:90:ee:91:02:2d:fb:f2:
67:9c:51:b3:05:c7:02:63:e3:37:9e:cb:7e:90:57:
d3:20:8c:55:92:59:59:ed:7d:ce:96:9f:65:bb:b8:
44:7f:86:be:ec:3a:42:6b:22:36:6b:6c:4e:30:93:
d3:6f:59:a0:34:75:69:46:54:69:e5:51:ca:81:75:
d4:c9:ec:78:13:57:4a:47:8d:61:6c:74:e6:42:80:
9d:35:60:d0:77:c9:bc:4c:ba:17:41:38:4f:0a:f8:
5b:99:50:ad:f6:b8:92:da:59:32:0d:24:50:a2:39:
23:84:4f:86:f6:19:b9:fe:0f:fd:e3:a1:87:f4:0d:
89:fa:db:39:17:66:ba:2f:01:57:b4:0a:3d:f5:fd:
7b:20:ab:e7:aa:fb:73:ec:17:99:2a:fa:93:63:43:
f4:a3:83:8c:fc:d9:1e:dc:c6:43:98:b2:17:6a:cf:
f4:01:23:21:81:46:8f:17:b0:13:93:b4:e2:14:10:
c3:13:f7:76:18:9c:ea:67:8c:80:76:9e:f8:8e:88:
e6:8a:3a:a9:1a:86:58:28:62:e7:48:6d:98:d8:67:
e7:5f:89:87:59:36:df:38:ca:3c:b4:f8:56:37:91:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:53:C4:7F:BA:BB:DF:24:A7:73:94:47:37:DC:1C:82:60:01:80
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d1:e3:1e:4e:f4:65:05:ff:ea:f2:a7:0b:07:2a:16:36:d3:
b4:2e:06:81:0c:01:eb:bc:49:bb:b4:33:1d:05:82:d4:07:6f:
7b:e1:53:57:93:ee:5a:cf:5d:6f:8f:4d:75:1f:fd:ce:7f:bd:
81:5b:28:cd:3d:c3:12:83:ee:a0:0e:f3:73:a5:47:25:87:01:
96:76:fd:58:8d:8a:83:c0:d8:24:cb:8b:ce:73:55:6f:e8:53:
11:53:d8:e6:22:e1:76:55:6b:5e:fb:38:7b:a0:aa:d6:f2:e7:
ba:9e:9e:e4:1b:6c:a1:9f:6e:19:a3:8e:81:24:ea:98:df:02:
27:63:75:64:bf:a1:2b:dc:4a:11:c0:bc:ff:8b:42:13:fd:57:
da:71:99:dd:85:f8:5c:4c:14:bf:23:a7:0f:44:51:65:8a:2f:
97:00:53:df:9d:45:e3:44:92:d2:53:16:58:b8:c2:a2:c5:df:
06:67:e0:7a:2d:e0:d5:76:f7:ba:d6:24:6e:2f:00:a7:59:dc:
3c:b3:af:57:8a:66:48:a8:7c:f0:a8:30:00:84:26:9c:ef:59:
93:98:5d:d1:34:b9:63:d6:22:e2:cc:1b:6a:7c:14:b8:0f:75:
8f:ff:f7:2c:ea:f6:72:0b:f6:e4:74:e2:93:76:05:12:0f:c6:
ac:35:d1:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyrMXNpfKTu2q/vfvnZiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4M2VmNzE0Mjk5OGU0ZTY1NjYwNTNlMmM2M2E3MDgwOGM2
ZWEyMzcwHhcNMjUxMTExMTIwMTE4WhcNMjUxMTEyMTIwMTE4WjAzMTEwLwYDVQQD
Eyg3ODE0NTNjNDdmYmFiYmRmMjRhNzczOTQ0NzM3ZGMxYzgyNjAwMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsroq077sAfbBaCVW9A+5zc3u1wDZ
4ZDukQIt+/JnnFGzBccCY+M3nst+kFfTIIxVkllZ7X3Olp9lu7hEf4a+7DpCayI2
a2xOMJPTb1mgNHVpRlRp5VHKgXXUyex4E1dKR41hbHTmQoCdNWDQd8m8TLoXQThP
CvhbmVCt9riS2lkyDSRQojkjhE+G9hm5/g/946GH9A2J+ts5F2a6LwFXtAo99f17
IKvnqvtz7BeZKvqTY0P0o4OM/Nke3MZDmLIXas/0ASMhgUaPF7ATk7TiFBDDE/d2
GJzqZ4yAdp74jojmijqpGoZYKGLnSG2Y2GfnX4mHWTbfOMo8tPhWN5E14wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgUU8R/urvfJKdzlEc33ByCYAGAMB8GA1UdIwQY
MBaAFNg+9xQpmOTmVmBT4sY6cICMbqI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjIt
N2Y3NWExYjEwZWMzLzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjItN2Y3NWExYjEwZWMz
LzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9HjHk70
ZQX/6vKnCwcqFjbTtC4GgQwB67xJu7QzHQWC1Adve+FTV5PuWs9db49NdR/9zn+9
gVsozT3DEoPuoA7zc6VHJYcBlnb9WI2Kg8DYJMuLznNVb+hTEVPY5iLhdlVrXvs4
e6Cq1vLnup6e5BtsoZ9uGaOOgSTqmN8CJ2N1ZL+hK9xKEcC8/4tCE/1X2nGZ3YX4
XEwUvyOnD0RRZYovlwBT351F40SS0lMWWLjCosXfBmfgei3g1Xb3utYkbi8Ap1nc
PLOvV4pmSKh88KgwAIQmnO9Zk5hd0TS5Y9Yi4swbanwUuA91j//3LOr2cgv25HTi
k3YFEg/GrDXRXw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:34 2025 by rpki-client