Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: n0KvQ5g25In8N35NT3zn6YMf4ju0u6tMNZPl+BCVy+g=
Subject key identifier: 84:4B:7F:8D:3C:5F:70:38:C9:5F:C5:B2:34:02:DD:32:02:A6:E7:AE
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 019A71B7D79FF0F50744BCEEB6470C5BF3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 10BC
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: dawnDAAHX29dwWbJWh/MUjOJp9qtp+lN+7wdBPWnfhI=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d7:9f:f0:f5:07:44:bc:ee:b6:47:0c:5b:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=844b7f8d3c5f7038c95fc5b23402dd3202a6e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:fa:c8:c9:a0:95:d9:f0:02:37:6d:6f:c6:
08:77:fd:4b:49:8f:b1:80:68:c0:c8:63:29:bd:60:
7f:2c:6a:5a:2b:68:1a:1a:aa:33:44:8a:47:db:b6:
2c:35:55:ca:9f:93:be:6d:cc:41:01:72:f8:f8:cd:
3e:87:85:2b:f8:ba:7d:77:30:3e:de:af:ed:7a:c2:
37:7d:c6:01:61:33:25:51:bd:de:1f:c8:96:a8:f8:
88:ae:56:ee:6e:7a:4b:07:20:93:33:f0:72:72:c3:
c2:e4:3c:a9:79:c3:04:1c:1a:f4:ff:82:e1:b4:b3:
08:93:48:66:33:4c:86:64:8b:ff:77:a3:94:04:43:
bd:c8:dc:a8:cc:f6:ef:4d:55:20:fb:23:84:8b:0e:
30:ea:13:5f:a9:68:0f:0a:72:4e:11:14:fb:54:eb:
68:87:27:e7:9c:5d:55:15:47:21:15:93:fb:75:4b:
46:d1:53:0a:d1:b3:64:8b:6b:96:00:ae:bf:5c:0d:
ae:f8:46:91:d9:63:5e:82:bc:5f:bf:21:7f:8c:0d:
53:e7:43:36:2c:6b:a2:7a:3e:f0:b5:e0:14:6d:24:
a8:89:7a:5a:66:88:cd:46:77:42:ed:a4:c8:d7:c5:
6f:53:80:ab:42:91:65:90:fa:2a:8b:bc:05:23:97:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:7F:8D:3C:5F:70:38:C9:5F:C5:B2:34:02:DD:32:02:A6:E7:AE
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:24:6f:00:39:cc:a3:66:42:b0:da:78:e3:be:ba:0b:06:
19:89:4b:fd:f5:d4:2e:7a:4b:ed:4c:25:ef:c5:a3:22:b8:6e:
4b:1d:6b:0f:ca:fb:b3:57:24:d8:5c:14:90:df:ea:5b:f0:93:
d9:9d:23:d6:ae:b0:f8:d9:70:86:d6:81:a1:a8:9e:41:f0:7b:
d9:f1:b8:61:2c:3e:8c:35:3b:29:cf:b9:a5:85:e0:af:f9:52:
ed:c4:e7:22:e3:ce:34:97:5d:df:e0:19:f9:35:19:3c:19:c1:
bc:69:4d:1f:5a:12:b5:51:23:cd:0f:d6:ff:18:7f:f5:e9:73:
43:9d:fa:97:14:98:b9:a7:92:3d:20:91:f4:84:50:8d:b1:ba:
a1:b3:b5:fb:30:6a:08:9e:1f:75:8a:88:46:27:92:52:ef:fc:
f8:52:1b:be:79:e6:c0:87:5a:1f:2b:2a:34:ca:9a:9c:c2:e4:
70:34:50:79:f6:80:18:68:57:4d:2c:9c:57:f0:96:82:8d:2a:
9c:ee:51:29:f7:b2:fa:26:f3:e5:e5:e6:b9:1b:d4:2a:bc:24:
88:58:d0:0c:50:1f:43:2f:5a:46:f7:ec:77:ea:47:32:bf:65:
02:3a:67:75:c5:f4:45:f5:11:fc:ec:16:af:bd:48:1a:85:c6:
b7:20:04:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9ef8PUHRLzutkcMW/P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj
NmY0YzcwHhcNMjUxMTExMDcwMTA0WhcNMjUxMTEyMDcwMTA0WjAzMTEwLwYDVQQD
Eyg4NDRiN2Y4ZDNjNWY3MDM4Yzk1ZmM1YjIzNDAyZGQzMjAyYTZlN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt736yMmgldnwAjdtb8YId/1LSY+x
gGjAyGMpvWB/LGpaK2gaGqozRIpH27YsNVXKn5O+bcxBAXL4+M0+h4Ur+Lp9dzA+
3q/tesI3fcYBYTMlUb3eH8iWqPiIrlbubnpLByCTM/BycsPC5DypecMEHBr0/4Lh
tLMIk0hmM0yGZIv/d6OUBEO9yNyozPbvTVUg+yOEiw4w6hNfqWgPCnJOERT7VOto
hyfnnF1VFUchFZP7dUtG0VMK0bNki2uWAK6/XA2u+EaR2WNegrxfvyF/jA1T50M2
LGuiej7wteAUbSSoiXpaZojNRndC7aTI18VvU4CrQpFlkPoqi7wFI5ccWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRLf408X3A4yV/FsjQC3TICpueuMB8GA1UdIwQY
MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt
N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5
LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMckbwA5
zKNmQrDaeOO+ugsGGYlL/fXULnpL7Uwl78WjIrhuSx1rD8r7s1ck2FwUkN/qW/CT
2Z0j1q6w+NlwhtaBoaieQfB72fG4YSw+jDU7Kc+5pYXgr/lS7cTnIuPONJdd3+AZ
+TUZPBnBvGlNH1oStVEjzQ/W/xh/9elzQ536lxSYuaeSPSCR9IRQjbG6obO1+zBq
CJ4fdYqIRieSUu/8+FIbvnnmwIdaHysqNMqanMLkcDRQefaAGGhXTSycV/CWgo0q
nO5RKfey+ibz5eXmuRvUKrwkiFjQDFAfQy9aRvfsd+pHMr9lAjpndcX0RfUR/OwW
r71IGoXGtyAEEA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client