Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: AfE2ZUoYvHOYCdeQ4Z5TaSCW5r6Ec66kf2OVuzuMCwA=
Subject key identifier: 04:A6:FA:7C:0F:50:7A:D0:92:3B:8B:D9:69:13:A5:46:3F:A9:C6:45
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019A2A43E1AE7EE4307F2D380247E93D5575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 2A
Signing time: Tue 28 Oct 2025 10:01:22 +0000
Manifest this update: Tue 28 Oct 2025 10:01:22 +0000
Manifest next update: Wed 29 Oct 2025 10:01:22 +0000
Files and hashes: 1: Cx0Wc_hxcpd0is7XF0LK-KtzFdY.roa (hash: 3aEd1MzE4wxCft0r0lHTBK1f538fKR5Xo3LF5iBw5Y0=)
2: XEzXLFWCK81H0mYYJL-WVNmtqGo.roa (hash: qICBsdU+J42/dQHA/dNncrV4zPltBFGJMDpu4ZuboZc=)
3: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: eTzC9n/NsPXQPt+RUGjjbVV5h7ddviQ3UwG6SszCyOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:e1:ae:7e:e4:30:7f:2d:38:02:47:e9:3d:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Oct 28 10:01:22 2025 GMT
Not After : Oct 29 10:01:22 2025 GMT
Subject: CN=04a6fa7c0f507ad0923b8bd96913a5463fa9c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:7f:f8:7c:3a:7a:03:19:98:57:aa:58:49:
5d:68:83:65:cc:c5:ee:c3:96:1b:8b:8e:02:11:12:
74:65:e2:49:06:85:e6:e3:c2:56:e8:8c:97:30:15:
57:e4:a7:76:cb:3d:13:e0:9f:ab:75:f3:3a:21:70:
20:bb:f5:af:81:a5:4e:a1:3a:5a:ec:3c:c1:57:dd:
6e:68:6b:df:ae:d1:88:ca:ff:27:65:2f:9b:e0:28:
02:ef:ec:11:e9:0a:94:93:4b:d4:dc:c4:80:86:0c:
1a:35:b2:1a:6f:8d:46:2d:25:03:6f:db:df:a4:c2:
0a:dd:e6:60:c5:5e:97:58:71:0c:47:b9:be:8a:21:
5e:ad:00:58:b9:69:5c:26:18:25:01:24:87:fe:d5:
2d:2c:e1:de:dd:fe:61:7f:48:c0:43:f5:09:6b:0a:
0e:d8:7e:b5:46:a4:33:ea:b3:6d:dd:4a:0d:1e:a6:
38:09:be:9a:ee:61:b3:d2:86:96:61:d1:0f:42:c4:
da:fc:17:b6:09:bc:42:ed:81:15:14:91:d4:e1:94:
f7:c4:9f:6d:e9:a1:7e:b0:f3:df:18:83:ad:3d:a4:
79:3f:90:d5:4a:b6:a4:57:14:59:c5:7b:57:ca:e1:
d9:b4:19:fc:99:d7:a7:d3:45:f3:32:d0:57:cf:6f:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:FA:7C:0F:50:7A:D0:92:3B:8B:D9:69:13:A5:46:3F:A9:C6:45
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f1:8c:94:80:6d:04:f5:f9:05:fc:ca:da:7f:6f:d7:5c:ec:
6a:a1:09:9f:c0:b1:ad:92:77:c7:c3:0f:d4:7d:18:ba:84:aa:
ad:f0:f7:84:92:49:eb:4b:bc:f6:57:eb:4c:bf:b1:5d:b8:9d:
f4:40:48:73:16:f1:d1:cc:29:30:7d:5c:dc:38:6e:2e:d3:f0:
1e:d9:9f:f2:68:3c:3e:94:97:62:35:e2:07:eb:1a:7a:8d:14:
86:1b:de:dd:89:5b:cc:0a:8b:4a:40:0b:37:16:3a:df:b9:51:
65:19:63:5c:6f:33:d0:60:2e:d5:e1:c2:36:db:54:7d:c6:39:
bd:73:0b:12:17:cd:2a:3c:0a:15:1e:54:09:a7:12:2a:26:f8:
54:64:ae:5e:09:7f:7d:f3:17:92:cc:0a:fc:94:c3:22:14:62:
f7:5a:6d:3f:76:ce:87:0e:37:f3:4d:3c:dc:46:b5:94:bd:c6:
16:48:53:48:63:25:9d:b2:8f:c9:10:f3:0d:37:f3:45:4d:c1:
71:77:48:93:50:c9:6c:09:d4:26:eb:6b:26:e1:f5:8c:c1:86:
47:50:9e:6d:12:86:41:f5:7c:8e:da:cc:ef:42:4f:f7:69:10:
9f:9a:63:df:c3:54:43:2e:47:07:3d:af:1f:8e:dd:6f:34:cb:
70:fc:3b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ+GufuQwfy04AkfpPVV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2
ZDlkZTEwHhcNMjUxMDI4MTAwMTIyWhcNMjUxMDI5MTAwMTIyWjAzMTEwLwYDVQQD
EygwNGE2ZmE3YzBmNTA3YWQwOTIzYjhiZDk2OTEzYTU0NjNmYTljNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC9/+Hw6egMZmFeqWEldaINlzMXu
w5Ybi44CERJ0ZeJJBoXm48JW6IyXMBVX5Kd2yz0T4J+rdfM6IXAgu/WvgaVOoTpa
7DzBV91uaGvfrtGIyv8nZS+b4CgC7+wR6QqUk0vU3MSAhgwaNbIab41GLSUDb9vf
pMIK3eZgxV6XWHEMR7m+iiFerQBYuWlcJhglASSH/tUtLOHe3f5hf0jAQ/UJawoO
2H61RqQz6rNt3UoNHqY4Cb6a7mGz0oaWYdEPQsTa/Be2CbxC7YEVFJHU4ZT3xJ9t
6aF+sPPfGIOtPaR5P5DVSrakVxRZxXtXyuHZtBn8mden00XzMtBXz2/lCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASm+nwPUHrQkjuL2WkTpUY/qcZFMB8GA1UdIwQY
MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt
MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2
LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfGMlIBt
BPX5BfzK2n9v11zsaqEJn8CxrZJ3x8MP1H0YuoSqrfD3hJJJ60u89lfrTL+xXbid
9EBIcxbx0cwpMH1c3DhuLtPwHtmf8mg8PpSXYjXiB+saeo0Uhhve3YlbzAqLSkAL
NxY637lRZRljXG8z0GAu1eHCNttUfcY5vXMLEhfNKjwKFR5UCacSKib4VGSuXgl/
ffMXkswK/JTDIhRi91ptP3bOhw4380083Ea1lL3GFkhTSGMlnbKPyRDzDTfzRU3B
cXdIk1DJbAnUJutrJuH1jMGGR1CebRKGQfV8jtrM70JP92kQn5pj38NUQy5HBz2v
H47dbzTLcPw77A==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:12:09 2025 by rpki-client