Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: GdH5qGzuZ5H1G7RZFSt0IJLVb1LLnrX+ggR2S+csIlY=
Subject key identifier: D7:F3:DE:3B:DA:DC:B3:E2:A7:D8:A0:9E:87:E4:D4:B1:08:FD:21:44
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019A7112B0A04873520F7F081780AFABE7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: AzSMpqX7xphDu9z92sK/C21HYIHA9plZWwlEqpDT7vo=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b0:a0:48:73:52:0f:7f:08:17:80:af:ab:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=d7f3de3bdadcb3e2a7d8a09e87e4d4b108fd2144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:c3:03:73:45:1a:02:04:2e:71:86:05:f4:
dc:01:18:3c:8d:7e:11:14:df:30:26:52:3a:26:f7:
b2:25:f9:c1:70:76:47:b9:5f:50:5d:aa:4b:c2:80:
d7:9d:56:91:bc:d2:03:6b:fb:c2:bd:77:10:ec:9c:
7e:32:a1:64:f8:ff:ea:b4:da:3a:60:1e:3c:e7:09:
e7:ab:cb:ea:92:ec:f6:26:a7:e3:65:cb:a3:cb:92:
9e:75:9b:1f:04:ec:3b:56:34:a0:19:71:6a:fe:bd:
1a:b6:16:cf:41:fa:3f:44:d4:fc:af:34:05:f9:cc:
43:73:1a:6f:e9:35:22:d7:b0:99:a2:11:6d:4f:3c:
7d:33:42:33:d4:ea:49:bd:57:47:17:12:a7:51:31:
97:b8:59:05:a8:5e:ac:77:da:1a:1e:3f:cc:d8:44:
31:d3:cc:f0:5a:3d:ea:b0:da:47:58:39:db:c3:f2:
9e:c9:dd:de:48:e8:1a:73:0e:c6:ad:19:0a:41:2c:
a6:99:c0:26:03:68:7a:e8:12:3d:69:11:ad:3d:e8:
ac:47:d0:2c:36:94:c5:64:ff:9c:50:3d:42:e2:83:
c6:ec:9a:1b:71:11:d3:fd:4b:e5:63:05:ae:dc:fd:
f1:e4:7a:c8:1b:98:ff:c8:6d:a1:1a:3d:b4:5f:83:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:DE:3B:DA:DC:B3:E2:A7:D8:A0:9E:87:E4:D4:B1:08:FD:21:44
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:9c:30:3f:e5:68:04:74:94:40:e2:43:44:aa:e3:94:53:
98:4c:6e:c3:ba:18:fe:d7:bb:82:5e:43:a8:3e:68:7b:71:65:
57:c6:fb:de:89:9d:b5:23:91:6d:c6:08:44:73:f1:50:10:a8:
dc:2d:f6:6a:47:08:e3:1f:3b:1e:e6:61:74:1b:b5:37:c5:5c:
9d:35:dd:3b:40:aa:ac:92:d4:0d:b3:dc:45:f1:3a:53:6c:82:
9f:d2:da:14:c1:33:71:8c:a6:40:82:58:16:b9:16:b0:ec:78:
f9:31:d0:c7:0d:ec:47:85:1e:71:13:ce:5b:33:73:bb:62:20:
b9:d3:00:57:0d:88:4c:36:e2:f0:e2:20:22:c3:f8:a8:ee:ae:
14:58:42:d6:0c:6d:bc:24:80:bd:85:bc:0c:e5:5b:b2:69:66:
c0:a3:9f:f2:3a:88:23:e9:7f:76:1e:85:cd:f3:9b:ad:c8:e5:
63:55:58:8d:5c:1d:71:91:61:fb:18:6e:cc:c7:da:48:31:7a:
3b:73:16:9a:85:4f:fe:6d:bf:00:f6:4a:2d:4b:39:6a:3b:92:
83:58:a0:45:4f:6c:12:4f:b1:03:68:09:84:8b:72:4c:cc:a8:
6e:ec:eb:f2:5f:b5:11:df:be:cb:e8:4b:c8:27:1a:27:4d:4c:
00:ea:c8:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErCgSHNSD38IF4Cvq+fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0
NzBiZmYwHhcNMjUxMTExMDQwMDQxWhcNMjUxMTEyMDQwMDQxWjAzMTEwLwYDVQQD
EyhkN2YzZGUzYmRhZGNiM2UyYTdkOGEwOWU4N2U0ZDRiMTA4ZmQyMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKLDA3NFGgIELnGGBfTcARg8jX4R
FN8wJlI6JveyJfnBcHZHuV9QXapLwoDXnVaRvNIDa/vCvXcQ7Jx+MqFk+P/qtNo6
YB485wnnq8vqkuz2JqfjZcujy5KedZsfBOw7VjSgGXFq/r0athbPQfo/RNT8rzQF
+cxDcxpv6TUi17CZohFtTzx9M0Iz1OpJvVdHFxKnUTGXuFkFqF6sd9oaHj/M2EQx
08zwWj3qsNpHWDnbw/Keyd3eSOgacw7GrRkKQSymmcAmA2h66BI9aRGtPeisR9As
NpTFZP+cUD1C4oPG7JobcRHT/UvlYwWu3P3x5HrIG5j/yG2hGj20X4OdOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfz3jva3LPip9ignofk1LEI/SFEMB8GA1UdIwQY
MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt
ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4
LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxacMD/l
aAR0lEDiQ0Sq45RTmExuw7oY/te7gl5DqD5oe3FlV8b73omdtSORbcYIRHPxUBCo
3C32akcI4x87HuZhdBu1N8VcnTXdO0CqrJLUDbPcRfE6U2yCn9LaFMEzcYymQIJY
FrkWsOx4+THQxw3sR4UecRPOWzNzu2IgudMAVw2ITDbi8OIgIsP4qO6uFFhC1gxt
vCSAvYW8DOVbsmlmwKOf8jqII+l/dh6FzfObrcjlY1VYjVwdcZFh+xhuzMfaSDF6
O3MWmoVP/m2/APZKLUs5ajuSg1igRU9sEk+xA2gJhItyTMyobuzr8l+1Ed++y+hL
yCcaJ01MAOrI5A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:48 2025 by rpki-client