Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: QOHcKFRMEcYg3Zxnd0eaD0Btk2K1kS0dDHh723M7jSQ=
Subject key identifier: B3:C4:B7:D3:D6:DE:CE:1A:D0:91:BB:C2:F6:0D:31:F2:3C:87:3B:FF
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019A500751404E905F32D5D29F57707A269D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0D9B
Signing time: Tue 04 Nov 2025 18:00:47 +0000
Manifest this update: Tue 04 Nov 2025 18:00:47 +0000
Manifest next update: Wed 05 Nov 2025 18:00:47 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: bzVQgKImaTfhxUSSGUNz34MKGG1mYAglC8ccZJkXnj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:51:40:4e:90:5f:32:d5:d2:9f:57:70:7a:26:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Nov 4 18:00:47 2025 GMT
Not After : Nov 5 18:00:47 2025 GMT
Subject: CN=b3c4b7d3d6dece1ad091bbc2f60d31f23c873bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:5e:50:e2:38:5c:57:cf:89:f9:67:eb:f8:
6b:98:eb:0b:2b:95:5b:7c:91:a0:68:ad:1f:bb:c4:
19:1c:a1:9e:5a:6d:97:e8:80:48:3c:f0:c7:0f:d5:
87:f4:41:7e:5b:43:ba:d9:d0:93:bc:ee:04:be:14:
15:79:bf:8d:cb:4a:2e:c0:da:66:29:0a:6d:db:2e:
3d:35:d8:75:d1:46:e6:09:af:44:bf:1f:80:92:65:
ac:f7:51:c6:48:16:7d:82:93:58:b3:c5:cd:8d:a2:
f1:df:a6:f9:35:92:cf:cb:d7:2b:b3:e5:ec:c7:ec:
f4:0d:24:c1:a6:4b:74:aa:06:67:55:84:85:57:36:
42:bb:f2:2c:9b:3f:3a:ba:44:cb:b7:32:67:64:89:
1b:27:c2:bb:1e:dd:d9:14:84:31:ba:d5:ec:f3:cf:
a3:f2:17:6c:02:03:1c:f1:1a:2f:53:0f:55:b3:62:
cf:00:76:50:b8:c6:d4:f5:5a:57:6e:d7:21:12:67:
65:61:88:4f:5a:14:6d:33:6c:ae:7e:3e:d4:73:1b:
d8:de:0e:32:09:32:2c:9f:fb:bb:2c:d6:b2:5a:01:
89:74:e1:12:2a:89:3a:8b:3a:83:bb:5e:c6:1e:c3:
db:4e:55:98:16:9f:2d:08:a0:27:d0:b2:1a:38:d7:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:B7:D3:D6:DE:CE:1A:D0:91:BB:C2:F6:0D:31:F2:3C:87:3B:FF
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:54:52:83:1f:5d:7e:52:a1:be:b6:13:5f:75:c2:91:0d:
c3:44:6e:ac:c4:0b:a9:43:40:3b:79:6f:4f:fa:7f:ef:44:1a:
b1:66:0c:74:d2:dc:88:7e:8e:01:f7:5a:9c:bc:d1:19:f4:d0:
69:51:56:30:8c:db:7c:48:fe:ee:81:45:67:82:67:06:4f:64:
6e:ea:d9:6e:63:07:1f:78:02:c7:2a:71:a6:20:86:88:fd:d4:
48:ea:09:6a:71:47:b2:b9:52:25:4e:04:52:91:eb:cf:f4:f5:
08:1e:d0:fa:07:cc:ea:43:f5:b9:cf:97:a7:70:33:41:0c:10:
49:de:43:d5:98:7a:8d:ea:fb:de:1a:9a:6e:5c:f2:87:04:aa:
30:d5:e0:fb:f9:da:e6:70:7d:9f:ba:40:3c:04:e7:e5:c3:0b:
81:ff:4c:35:29:62:50:53:0d:b7:af:4c:a8:9a:86:1f:2d:ec:
d8:62:a9:ec:a5:8d:30:d8:57:6c:9e:91:4e:b3:c5:05:e1:a8:
ce:bb:3c:57:c5:a9:60:34:da:62:e3:c0:60:9a:ea:db:a4:c1:
ff:66:07:26:ff:84:30:26:1a:93:8f:85:7f:63:e0:f1:d5:36:
c7:a4:64:be:03:2c:f2:7b:70:f8:a0:2d:85:2f:76:f1:58:c3:
92:ec:e3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB1FATpBfMtXSn1dweiadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjUxMTA0MTgwMDQ3WhcNMjUxMTA1MTgwMDQ3WjAzMTEwLwYDVQQD
EyhiM2M0YjdkM2Q2ZGVjZTFhZDA5MWJiYzJmNjBkMzFmMjNjODczYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhVeUOI4XFfPifln6/hrmOsLK5Vb
fJGgaK0fu8QZHKGeWm2X6IBIPPDHD9WH9EF+W0O62dCTvO4EvhQVeb+Ny0ouwNpm
KQpt2y49Ndh10UbmCa9Evx+AkmWs91HGSBZ9gpNYs8XNjaLx36b5NZLPy9crs+Xs
x+z0DSTBpkt0qgZnVYSFVzZCu/Ismz86ukTLtzJnZIkbJ8K7Ht3ZFIQxutXs88+j
8hdsAgMc8RovUw9Vs2LPAHZQuMbU9VpXbtchEmdlYYhPWhRtM2yufj7UcxvY3g4y
CTIsn/u7LNayWgGJdOESKok6izqDu17GHsPbTlWYFp8tCKAn0LIaONeufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPEt9PW3s4a0JG7wvYNMfI8hzv/MB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVVUUoMf
XX5Sob62E191wpENw0RurMQLqUNAO3lvT/p/70QasWYMdNLciH6OAfdanLzRGfTQ
aVFWMIzbfEj+7oFFZ4JnBk9kburZbmMHH3gCxypxpiCGiP3USOoJanFHsrlSJU4E
UpHrz/T1CB7Q+gfM6kP1uc+Xp3AzQQwQSd5D1Zh6jer73hqablzyhwSqMNXg+/na
5nB9n7pAPATn5cMLgf9MNSliUFMNt69MqJqGHy3s2GKp7KWNMNhXbJ6RTrPFBeGo
zrs8V8WpYDTaYuPAYJrq26TB/2YHJv+EMCYak4+Ff2Pg8dU2x6RkvgMs8ntw+KAt
hS928VjDkuzjog==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:02:28 2025 by rpki-client