Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: DO9INGvm34KWIROI6FRhwDGjDnODUJG27JP8HC9w/ek=
Subject key identifier: BE:8C:54:64:64:96:87:A2:40:83:1B:29:EA:B1:A2:3E:99:43:91:79
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019A1CBF597254323C2CAC63998E71094CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1097
Signing time: Sat 25 Oct 2025 19:01:33 +0000
Manifest this update: Sat 25 Oct 2025 19:01:33 +0000
Manifest next update: Sun 26 Oct 2025 19:01:33 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: X21esRcg3i+JmRyA1kojs/7fehsqXnJUMD34Gk0f42E=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:59:72:54:32:3c:2c:ac:63:99:8e:71:09:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Oct 25 19:01:33 2025 GMT
Not After : Oct 26 19:01:33 2025 GMT
Subject: CN=be8c5464649687a240831b29eab1a23e99439179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:77:5d:09:ad:61:c7:09:a4:17:1e:1e:26:
07:a0:13:3b:25:f0:34:36:4f:16:58:9b:26:c5:f8:
51:45:45:75:36:45:45:28:bd:f0:e2:a2:2b:b6:eb:
9f:17:59:4b:fc:0b:cb:7c:18:2e:06:31:7f:1e:2c:
0d:ca:9c:74:20:c8:c3:f8:7f:16:c9:4c:0b:d9:23:
6e:0f:72:a3:c3:f5:6f:b6:a4:f6:19:80:54:2d:3a:
13:ca:c8:19:bb:ac:b0:be:16:a9:02:0f:de:b3:55:
83:ad:75:5b:93:de:51:f2:cd:44:19:f6:44:2e:0a:
b7:51:47:13:58:39:a7:49:21:5e:93:d4:43:31:77:
04:1c:ca:e8:f7:72:7d:56:10:a6:7c:be:ee:63:6c:
6e:be:77:8f:ff:0c:e2:78:9e:68:bd:c4:de:d8:42:
54:d5:35:63:eb:c7:71:f2:f4:c0:0d:e1:4c:ae:39:
b6:82:a3:ac:24:2d:84:2b:e9:d8:f3:fa:0e:e8:4f:
11:a4:0a:95:5b:44:8c:ba:93:1b:ea:cd:05:c4:2f:
11:dc:a1:d0:25:8f:7e:9d:03:17:75:36:3d:d3:32:
18:36:8f:ce:36:8b:41:7f:8d:d9:fa:5d:4f:4d:6e:
7d:37:34:f9:eb:5e:8d:d2:fc:c3:5c:f3:2a:7b:14:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:54:64:64:96:87:A2:40:83:1B:29:EA:B1:A2:3E:99:43:91:79
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6e:24:35:e9:7b:43:4d:b1:9b:43:c7:53:e0:f5:bf:85:21:
17:86:a3:2d:fd:12:30:a5:84:68:c3:9b:8f:00:ee:52:19:bc:
c2:26:47:ab:ea:93:cd:5d:14:b6:bb:5e:46:cc:d1:84:b1:68:
d3:81:f5:6e:dc:44:11:6e:94:5e:7a:b0:64:17:95:cb:9c:9b:
db:ac:17:d4:36:d8:25:4f:e6:ab:1f:91:47:f0:50:48:d8:45:
bf:67:ae:96:3e:5a:df:0a:de:2a:b4:12:6b:f9:b4:70:02:b4:
79:14:b8:95:13:63:38:77:bb:4b:37:72:57:32:80:ad:de:4f:
7c:61:ec:03:cf:60:be:a2:77:1d:52:9b:49:1d:2b:9b:48:4c:
78:3a:1a:73:ea:39:92:b7:28:30:75:0e:21:89:ae:27:6b:fb:
b0:39:5d:71:ec:dc:5c:aa:94:f5:ff:da:54:1e:c1:9b:06:0f:
d5:50:54:b2:ef:48:6f:7e:66:70:75:d1:e5:b6:e0:11:83:1f:
74:fb:cc:98:71:6d:de:98:7f:7f:7d:f7:79:33:a3:f8:d6:90:
59:a7:f9:05:aa:f3:4c:e4:f6:49:e0:45:93:22:13:32:c8:a7:
28:ac:10:c4:ac:4c:28:79:f5:c6:27:87:75:ac:6b:9f:98:d7:
57:ac:a4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocv1lyVDI8LKxjmY5xCUyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjUxMDI1MTkwMTMzWhcNMjUxMDI2MTkwMTMzWjAzMTEwLwYDVQQD
EyhiZThjNTQ2NDY0OTY4N2EyNDA4MzFiMjllYWIxYTIzZTk5NDM5MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLB3XQmtYccJpBceHiYHoBM7JfA0
Nk8WWJsmxfhRRUV1NkVFKL3w4qIrtuufF1lL/AvLfBguBjF/HiwNypx0IMjD+H8W
yUwL2SNuD3Kjw/VvtqT2GYBULToTysgZu6ywvhapAg/es1WDrXVbk95R8s1EGfZE
Lgq3UUcTWDmnSSFek9RDMXcEHMro93J9VhCmfL7uY2xuvneP/wzieJ5ovcTe2EJU
1TVj68dx8vTADeFMrjm2gqOsJC2EK+nY8/oO6E8RpAqVW0SMupMb6s0FxC8R3KHQ
JY9+nQMXdTY90zIYNo/ONotBf43Z+l1PTW59NzT5616N0vzDXPMqexTJ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6MVGRkloeiQIMbKeqxoj6ZQ5F5MB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApW4kNel7
Q02xm0PHU+D1v4UhF4ajLf0SMKWEaMObjwDuUhm8wiZHq+qTzV0UtrteRszRhLFo
04H1btxEEW6UXnqwZBeVy5yb26wX1DbYJU/mqx+RR/BQSNhFv2eulj5a3wreKrQS
a/m0cAK0eRS4lRNjOHe7SzdyVzKArd5PfGHsA89gvqJ3HVKbSR0rm0hMeDoac+o5
krcoMHUOIYmuJ2v7sDldcezcXKqU9f/aVB7BmwYP1VBUsu9Ib35mcHXR5bbgEYMf
dPvMmHFt3ph/f333eTOj+NaQWaf5BarzTOT2SeBFkyITMsinKKwQxKxMKHn1xieH
daxrn5jXV6ykkw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:08:27 2025 by rpki-client