Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: VgVTTCBhraU5YxwMfEnT0KdHPff05BEpjtMk3+u7PJ4=
Subject key identifier: 9E:E4:2B:DB:8C:25:E5:1D:25:DF:EE:15:B3:08:6B:10:58:14:8D:D0
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 019A71499F7746F81870D385B5B419144F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: 01B1
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: 0ZAOzPQ9ZHKw9jy4A7WYrkuO6GHJvFDRqhS8CAdVgeI=)
2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9f:77:46:f8:18:70:d3:85:b5:b4:19:14:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=9ee42bdb8c25e51d25dfee15b3086b1058148dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:25:4b:1c:d5:ac:61:2e:47:94:c6:59:86:
d9:6d:1b:6f:43:6f:ae:75:7b:46:86:44:b9:69:30:
59:9b:db:49:0e:69:f1:22:22:f4:54:78:08:a4:21:
9b:40:bc:81:ad:9a:5c:aa:74:a1:0f:f6:ad:3f:b8:
88:1b:44:51:c8:96:54:7a:4c:03:5c:6e:8b:c8:94:
30:e7:22:d8:89:de:43:f7:78:41:91:b0:0f:ac:f6:
a5:a7:b5:91:e5:80:00:ae:2a:e7:19:8e:c1:a5:d1:
4c:82:79:dd:07:47:dd:39:47:15:6d:59:b2:00:cc:
46:3c:53:8a:ee:f1:a9:fc:e4:b8:98:2a:67:12:33:
2c:5a:46:ea:7c:c9:59:ee:54:0e:c0:c7:16:5a:74:
a6:4a:8a:58:7e:03:31:ba:be:61:55:2c:52:8c:3b:
8e:e9:23:ff:9f:cb:c8:96:fb:c8:5a:19:53:3b:fc:
31:12:f6:90:a3:8b:3f:31:ba:a1:4e:ef:ec:24:1c:
7b:71:0f:c0:dd:04:8a:1c:57:0e:fe:23:04:d5:5c:
d3:ce:84:05:c9:e5:f6:37:ac:68:e5:21:00:52:76:
41:b1:6d:a5:b7:85:1d:f5:65:19:5a:2c:94:44:5c:
2d:35:c2:df:72:5b:30:51:f2:cb:2e:9b:cd:07:b5:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:2B:DB:8C:25:E5:1D:25:DF:EE:15:B3:08:6B:10:58:14:8D:D0
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a8:e7:1d:5d:ca:e8:7f:65:cd:93:c5:cf:92:cf:83:ed:9d:
41:fc:b2:e1:e6:eb:6a:32:6b:1f:62:33:d6:53:13:1b:ea:9c:
f6:2f:75:c4:16:f7:f1:3e:11:11:02:05:10:96:20:64:9e:84:
6f:6a:30:24:0f:ad:ac:0d:8a:85:a6:34:f9:9d:c3:30:81:50:
8e:2c:2b:52:ab:8a:11:53:da:f6:e0:1a:b0:58:4a:95:cf:bc:
4b:9f:71:31:34:73:6d:e7:29:4d:a0:ec:e3:15:cc:32:fb:2c:
2b:0a:67:6d:2c:d1:3e:4c:f5:83:1d:17:47:87:55:24:c3:ef:
07:5d:c9:3a:92:43:8a:83:7d:a6:39:3b:b1:7b:ed:50:eb:4b:
3e:fe:d1:20:7b:9b:ff:9c:09:b9:66:27:fc:1e:10:05:ed:14:
33:be:76:80:64:1d:68:59:04:87:d7:6f:20:39:f6:7b:3f:fe:
ff:96:97:b0:ab:f1:6f:f8:ae:d9:f5:bf:b6:df:d9:6f:cc:f1:
a4:b3:fa:e6:b1:b3:ac:4f:2b:3e:d9:6e:42:9a:4e:1e:5c:c5:
63:95:69:f6:5c:75:91:51:96:27:5e:f7:89:f4:11:e0:2f:0e:
dc:2a:ef:e8:88:9e:8d:e7:dc:36:a8:b1:38:80:97:1b:11:51:
cf:42:2e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSZ93RvgYcNOFtbQZFE9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5
MDc5ZWQwHhcNMjUxMTExMDUwMDQxWhcNMjUxMTEyMDUwMDQxWjAzMTEwLwYDVQQD
Eyg5ZWU0MmJkYjhjMjVlNTFkMjVkZmVlMTViMzA4NmIxMDU4MTQ4ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq4lSxzVrGEuR5TGWYbZbRtvQ2+u
dXtGhkS5aTBZm9tJDmnxIiL0VHgIpCGbQLyBrZpcqnShD/atP7iIG0RRyJZUekwD
XG6LyJQw5yLYid5D93hBkbAPrPalp7WR5YAArirnGY7BpdFMgnndB0fdOUcVbVmy
AMxGPFOK7vGp/OS4mCpnEjMsWkbqfMlZ7lQOwMcWWnSmSopYfgMxur5hVSxSjDuO
6SP/n8vIlvvIWhlTO/wxEvaQo4s/MbqhTu/sJBx7cQ/A3QSKHFcO/iME1VzTzoQF
yeX2N6xo5SEAUnZBsW2lt4Ud9WUZWiyURFwtNcLfclswUfLLLpvNB7U/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7kK9uMJeUdJd/uFbMIaxBYFI3QMB8GA1UdIwQY
MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt
ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm
LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqjnHV3K
6H9lzZPFz5LPg+2dQfyy4ebrajJrH2Iz1lMTG+qc9i91xBb38T4REQIFEJYgZJ6E
b2owJA+trA2KhaY0+Z3DMIFQjiwrUquKEVPa9uAasFhKlc+8S59xMTRzbecpTaDs
4xXMMvssKwpnbSzRPkz1gx0XR4dVJMPvB13JOpJDioN9pjk7sXvtUOtLPv7RIHub
/5wJuWYn/B4QBe0UM752gGQdaFkEh9dvIDn2ez/+/5aXsKvxb/iu2fW/tt/Zb8zx
pLP65rGzrE8rPtluQppOHlzFY5Vp9lx1kVGWJ173ifQR4C8O3Crv6IiejefcNqix
OICXGxFRz0Iu4A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client