Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: fLe5JcY6y7cTqTKuXxhK5XBnIBhDXHlSBzRRoem6afs=
Subject key identifier: 74:FF:A4:9B:90:1A:BA:21:91:FB:FD:39:3C:2A:2D:D2:64:5D:8E:16
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 019A71B8F959C6A6BBBA1A5F288695ABDA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: JpxD1sG3eqISA3tC0345Gf0kAyF96Q9iwoI3BHs3IeA=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f9:59:c6:a6:bb:ba:1a:5f:28:86:95:ab:da:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=74ffa49b901aba2191fbfd393c2a2dd2645d8e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:9c:86:a4:3d:bd:b0:1a:13:a2:68:8c:a1:
e2:e4:ec:c8:ad:c0:b3:56:f6:2b:65:d7:00:87:41:
62:1b:fd:56:4a:f7:fc:12:d6:6e:41:1d:c4:03:ef:
70:e1:59:b3:b4:51:9a:a0:e2:bd:b7:96:21:88:b2:
14:ed:76:19:11:39:8c:37:e2:67:18:e7:16:c1:44:
0b:3a:d3:43:cd:18:2d:be:06:79:36:1c:1e:2a:0d:
61:4e:2b:e9:a0:50:05:e3:fa:33:7b:34:b1:e1:10:
89:19:39:d8:a0:93:e3:52:25:53:08:11:f8:85:19:
c9:00:ae:e2:2d:fb:81:7f:d5:74:c7:f4:01:de:cb:
41:bc:44:69:a9:7d:ad:5b:e8:fe:0b:51:ba:6f:37:
1d:6b:37:b9:eb:f7:db:5a:cd:07:3f:cb:9f:94:d1:
51:c8:b0:78:fd:34:6f:74:61:d2:9a:fd:1b:4b:ba:
02:c9:9d:96:25:e8:8d:73:9c:c8:bb:ce:82:74:1a:
57:49:ee:a7:7c:5e:42:d9:73:2a:ce:22:96:c8:9d:
67:ba:ed:d4:e2:96:48:ee:70:70:bc:20:aa:c0:c3:
4d:e1:68:08:c6:6d:3b:74:db:89:e5:6d:ff:5b:bd:
e8:61:d1:c8:2c:d9:ac:25:fd:08:ab:66:1e:59:50:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:A4:9B:90:1A:BA:21:91:FB:FD:39:3C:2A:2D:D2:64:5D:8E:16
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:87:3e:59:61:b8:4e:ce:74:86:db:f8:40:ad:1f:92:75:
a6:89:f4:1d:5b:ea:37:ca:4b:f4:a0:eb:b3:c9:a6:ff:2b:3a:
e6:50:8b:ad:4e:7e:61:90:64:b3:16:4e:5d:43:51:a6:13:79:
0f:58:ad:2f:08:70:99:4c:3a:cf:03:b6:47:7b:f4:11:5f:36:
99:52:df:a1:79:7c:41:ef:b2:65:e1:69:4a:4d:15:05:45:f0:
c6:b0:94:bd:fe:9c:bb:d2:b3:42:aa:1d:f3:b8:2f:9e:d6:f4:
cb:4c:8f:1d:30:cb:29:53:f4:c5:2e:cf:ab:e3:9e:62:41:bd:
be:2c:20:bd:db:82:a4:c2:84:82:c2:f1:04:e9:a2:70:3a:8a:
87:9d:f4:53:5e:21:eb:22:aa:c3:f3:7a:8b:f8:ab:ea:ac:71:
97:e8:b8:ca:a8:18:3f:24:bc:f6:00:9c:6d:5f:23:7e:49:73:
65:01:ca:83:2d:e8:a8:60:fa:45:fc:7a:e6:5f:90:e4:fb:be:
d5:45:58:fd:62:5a:03:8d:58:92:a2:6d:ed:ab:9e:28:97:04:
7d:5c:c9:ef:19:d3:80:e1:10:2c:17:0d:dc:81:fb:0c:f8:19:
ae:87:6d:da:ff:0b:93:ac:a1:86:1e:70:c3:54:76:a8:94:57:
d9:1a:6a:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPlZxqa7uhpfKIaVq9qTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmU1Y2RmNGM1NGZmODY4Y2U4OTUzMTVlYWI1OGYyZDg4
NjUwYzIwHhcNMjUxMTExMDcwMjE5WhcNMjUxMTEyMDcwMjE5WjAzMTEwLwYDVQQD
Eyg3NGZmYTQ5YjkwMWFiYTIxOTFmYmZkMzkzYzJhMmRkMjY0NWQ4ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfWchqQ9vbAaE6JojKHi5OzIrcCz
VvYrZdcAh0FiG/1WSvf8EtZuQR3EA+9w4VmztFGaoOK9t5YhiLIU7XYZETmMN+Jn
GOcWwUQLOtNDzRgtvgZ5NhweKg1hTivpoFAF4/ozezSx4RCJGTnYoJPjUiVTCBH4
hRnJAK7iLfuBf9V0x/QB3stBvERpqX2tW+j+C1G6bzcdaze56/fbWs0HP8uflNFR
yLB4/TRvdGHSmv0bS7oCyZ2WJeiNc5zIu86CdBpXSe6nfF5C2XMqziKWyJ1nuu3U
4pZI7nBwvCCqwMNN4WgIxm07dNuJ5W3/W73oYdHILNmsJf0Iq2YeWVDlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT/pJuQGrohkfv9OTwqLdJkXY4WMB8GA1UdIwQY
MBaAFNkuXN9MVP+GjOiVMV6rWPLYhlDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWIt
ZjVmZTNlMWIwYTYzLzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWItZjVmZTNlMWIwYTYz
LzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBuHPllh
uE7OdIbb+ECtH5J1pon0HVvqN8pL9KDrs8mm/ys65lCLrU5+YZBksxZOXUNRphN5
D1itLwhwmUw6zwO2R3v0EV82mVLfoXl8Qe+yZeFpSk0VBUXwxrCUvf6cu9KzQqod
87gvntb0y0yPHTDLKVP0xS7Pq+OeYkG9viwgvduCpMKEgsLxBOmicDqKh530U14h
6yKqw/N6i/ir6qxxl+i4yqgYPyS89gCcbV8jfklzZQHKgy3oqGD6Rfx65l+Q5Pu+
1UVY/WJaA41YkqJt7aueKJcEfVzJ7xnTgOEQLBcN3IH7DPgZrodt2v8Lk6yhhh5w
w1R2qJRX2Rpq3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:10 2025 by rpki-client