Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: AMuoiw7kKl8lpwrOQzNTsIT7H3U8cGjrhMQK5K8CueA=
Subject key identifier: 52:BD:88:B7:24:20:B4:38:FA:A9:1B:FA:0F:C3:1A:E1:13:A7:17:70
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 019A71EEC417F75867DF08518DC842F76CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 07CB
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: 917AuAF8hKtLAR0IOL3DzZr2jcXrRXbN95iPvL66yi4=)
2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c4:17:f7:58:67:df:08:51:8d:c8:42:f7:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=52bd88b72420b438faa91bfa0fc31ae113a71770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:39:e5:8e:fc:da:cb:4d:bf:ea:07:9b:d3:
81:d1:18:95:65:e4:a3:d7:26:0c:db:51:19:74:34:
6c:06:4b:85:d3:82:fb:fe:96:f4:c3:01:ed:ca:e9:
fe:4a:16:10:6c:f2:43:db:28:c0:40:a7:d4:17:fa:
6c:12:2f:02:1a:e2:86:c9:5c:0c:09:7c:17:b9:64:
26:94:41:a5:73:85:4b:c5:3c:2c:6d:05:3c:38:8e:
6b:4f:88:59:83:c2:ce:bb:95:19:00:fe:ed:e0:7e:
c1:c2:46:a5:32:fc:da:95:68:e3:61:0f:f5:13:2f:
c9:1a:70:6e:8b:fe:7d:6e:55:bc:ff:42:27:e7:da:
be:72:d7:ac:7b:a3:64:10:8b:c8:aa:90:9c:02:79:
7d:1f:e7:15:ef:c8:1a:64:77:da:f3:75:f2:f4:82:
cc:e8:97:1f:30:9c:bc:3b:65:30:9a:24:32:47:6b:
fb:0d:4b:9f:76:07:8f:6d:40:3e:fb:38:af:3d:88:
b4:c7:f6:7b:91:e9:9e:4e:02:8c:e6:88:df:54:c6:
38:b1:f0:5c:67:ac:3c:f9:38:39:84:58:dc:17:fc:
df:72:74:65:9d:41:56:75:ff:02:ae:6d:b2:9e:c8:
17:eb:49:8b:c5:a4:ad:9a:07:67:b0:dc:b7:90:d4:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:88:B7:24:20:B4:38:FA:A9:1B:FA:0F:C3:1A:E1:13:A7:17:70
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b3:59:ea:ac:9d:d4:70:b9:e6:67:1c:9a:6f:4d:c4:64:44:
69:de:45:a1:f0:9b:75:8d:00:e8:2f:95:5b:29:79:93:64:61:
24:5a:bd:9c:c5:04:c5:e4:f7:a3:b6:af:79:63:89:b5:b6:1a:
4b:bb:e0:15:97:45:bc:e3:46:fd:9a:db:d6:80:0d:79:30:2f:
08:a9:ce:40:e1:a9:d0:c1:77:7d:8f:d1:9d:b7:b0:74:ee:c2:
ad:87:d8:b4:18:88:a2:b0:4d:30:be:59:b2:4c:60:26:0f:a4:
80:78:62:ec:b6:44:ec:86:3b:ff:31:42:b2:82:8a:99:5b:0b:
22:12:88:64:fc:88:bf:85:c3:40:8a:ae:1f:e1:59:e4:dd:d6:
2a:41:c0:5a:3d:06:3e:57:cb:18:35:0b:65:f7:e7:f4:df:ad:
6a:2e:25:b7:0f:ac:6b:86:d9:f5:18:62:f9:ff:61:df:00:c2:
59:47:59:48:18:7f:9e:3d:d0:9f:4c:04:72:96:22:79:7d:f3:
10:ef:c9:47:d0:73:c0:57:f1:25:50:24:84:3b:4b:98:7b:58:
02:69:db:42:17:52:7a:c7:10:92:47:f4:81:00:87:d0:59:2f:
5c:fb:49:82:61:e7:20:4c:2c:d8:42:e0:09:5c:cd:b9:95:d4:
1b:45:66:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sQX91hn3whRjchC92zyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh
YTA2YTYwHhcNMjUxMTExMDgwMTA0WhcNMjUxMTEyMDgwMTA0WjAzMTEwLwYDVQQD
Eyg1MmJkODhiNzI0MjBiNDM4ZmFhOTFiZmEwZmMzMWFlMTEzYTcxNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvQ55Y782stNv+oHm9OB0RiVZeSj
1yYM21EZdDRsBkuF04L7/pb0wwHtyun+ShYQbPJD2yjAQKfUF/psEi8CGuKGyVwM
CXwXuWQmlEGlc4VLxTwsbQU8OI5rT4hZg8LOu5UZAP7t4H7BwkalMvzalWjjYQ/1
Ey/JGnBui/59blW8/0In59q+ctese6NkEIvIqpCcAnl9H+cV78gaZHfa83Xy9ILM
6JcfMJy8O2UwmiQyR2v7DUufdgePbUA++zivPYi0x/Z7kemeTgKM5ojfVMY4sfBc
Z6w8+Tg5hFjcF/zfcnRlnUFWdf8Crm2ynsgX60mLxaStmgdnsNy3kNQJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK9iLckILQ4+qkb+g/DGuETpxdwMB8GA1UdIwQY
MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt
MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0
LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbNZ6qyd
1HC55mccmm9NxGREad5FofCbdY0A6C+VWyl5k2RhJFq9nMUExeT3o7aveWOJtbYa
S7vgFZdFvONG/Zrb1oANeTAvCKnOQOGp0MF3fY/RnbewdO7CrYfYtBiIorBNML5Z
skxgJg+kgHhi7LZE7IY7/zFCsoKKmVsLIhKIZPyIv4XDQIquH+FZ5N3WKkHAWj0G
PlfLGDULZffn9N+tai4ltw+sa4bZ9Rhi+f9h3wDCWUdZSBh/nj3Qn0wEcpYieX3z
EO/JR9BzwFfxJVAkhDtLmHtYAmnbQhdSescQkkf0gQCH0FkvXPtJgmHnIEws2ELg
CVzNuZXUG0VmtQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client