Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: ZjCdGve7ZH0gTsiZmONL2IRNXaAtcTAMibMZ673xW0Y=
Subject key identifier: 93:CA:19:4A:30:A8:08:A3:42:A4:AA:E2:4D:08:9A:00:A9:4A:D6:8D
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019A73011C3118DA14FB9A88E6276F26B3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 13CD
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: 9x1WdUWEyzupkA4wBkxLGkwXCeI+tMFuFbvhkCfTFHA=)
2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:31:18:da:14:fb:9a:88:e6:27:6f:26:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=93ca194a30a808a342a4aae24d089a00a94ad68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:e1:9a:eb:2f:51:29:3b:4c:8b:aa:d1:06:
1b:0e:13:97:14:f7:41:ce:d6:23:53:fd:45:31:e1:
69:6d:d6:0d:37:de:d1:f1:41:76:88:3b:ac:e4:88:
40:e1:d7:49:7b:47:55:e7:c2:91:2d:b2:2a:ae:2d:
67:cd:e3:ac:e9:2e:bf:6b:eb:ab:6c:7f:40:5a:5b:
a7:ac:96:55:8e:58:68:96:9f:db:d0:28:7d:c1:45:
ef:3b:ab:8c:99:d3:92:cf:ca:fb:fc:75:77:ac:75:
5b:59:12:20:74:1d:3f:f2:59:ba:55:71:84:bc:20:
8e:45:e9:da:9b:f1:3a:60:b8:94:6c:ca:28:ea:99:
d9:8c:d5:89:2e:80:0b:8f:d1:87:09:20:f8:a2:14:
5f:e9:2e:e2:a7:2c:f2:35:ad:b8:62:de:25:21:c2:
40:1f:0b:e6:7f:6e:4c:3e:76:87:fb:77:92:1a:af:
71:6b:d0:4d:d9:8d:0f:48:47:14:b9:ea:11:aa:cc:
d3:07:63:b7:82:91:7f:3b:52:04:ea:04:70:b0:24:
28:f0:18:68:c3:7a:62:8b:f2:69:b3:15:4a:38:18:
a7:12:bf:91:82:ab:d7:41:d0:c9:64:7a:05:7c:21:
fb:c8:c5:fa:0b:ba:c2:b3:18:16:f8:f5:74:55:a2:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:19:4A:30:A8:08:A3:42:A4:AA:E2:4D:08:9A:00:A9:4A:D6:8D
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:df:b4:97:c1:92:9f:18:c5:88:be:c1:23:68:e2:26:5d:
f9:2a:78:fb:11:ce:6e:5e:a6:cc:b0:7e:ce:06:f3:7b:fb:6e:
0b:87:f8:4f:15:60:e6:5a:da:9f:2a:0b:16:d0:be:80:9b:e0:
ba:b1:33:46:58:c7:5f:66:98:85:a1:bc:a6:03:22:73:4d:13:
1b:b8:f8:ef:78:4e:6a:0a:76:16:1f:aa:6d:41:2d:11:e1:c4:
53:9b:40:1e:fa:22:c1:8d:f8:70:78:62:ea:37:64:8f:36:b0:
6c:fc:fc:be:b8:27:2a:0e:a7:15:37:53:28:50:a3:ee:78:39:
19:79:a9:d1:4f:ef:d2:a7:a7:d8:3e:49:3b:a5:9c:f6:0a:0b:
bc:88:96:2c:f9:0c:72:c5:88:fe:9f:41:4d:f3:c8:c6:38:e3:
69:ad:e7:d4:af:40:6e:65:db:01:50:25:60:49:63:80:3e:87:
4c:ee:92:41:12:20:17:d6:e0:75:6e:64:c1:f9:9f:71:8e:67:
23:9b:ad:ed:60:af:77:91:ce:20:e7:de:c9:7d:dc:ba:c4:d9:
55:98:3c:0d:03:5e:69:0f:87:83:c1:49:ae:c0:46:2d:b3:de:
0b:f6:69:fe:0f:2e:f4:1b:55:4e:b9:75:45:9f:d9:7d:9f:e9:
6b:2c:aa:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzARwxGNoU+5qI5idvJrPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjUxMTExMTMwMDQzWhcNMjUxMTEyMTMwMDQzWjAzMTEwLwYDVQQD
Eyg5M2NhMTk0YTMwYTgwOGEzNDJhNGFhZTI0ZDA4OWEwMGE5NGFkNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9rhmusvUSk7TIuq0QYbDhOXFPdB
ztYjU/1FMeFpbdYNN97R8UF2iDus5IhA4ddJe0dV58KRLbIqri1nzeOs6S6/a+ur
bH9AWlunrJZVjlholp/b0Ch9wUXvO6uMmdOSz8r7/HV3rHVbWRIgdB0/8lm6VXGE
vCCORenam/E6YLiUbMoo6pnZjNWJLoALj9GHCSD4ohRf6S7ipyzyNa24Yt4lIcJA
Hwvmf25MPnaH+3eSGq9xa9BN2Y0PSEcUueoRqszTB2O3gpF/O1IE6gRwsCQo8Bho
w3pii/JpsxVKOBinEr+RgqvXQdDJZHoFfCH7yMX6C7rCsxgW+PV0VaL3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPKGUowqAijQqSq4k0ImgCpStaNMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7vftJfB
kp8YxYi+wSNo4iZd+Sp4+xHObl6mzLB+zgbze/tuC4f4TxVg5lranyoLFtC+gJvg
urEzRljHX2aYhaG8pgMic00TG7j473hOagp2Fh+qbUEtEeHEU5tAHvoiwY34cHhi
6jdkjzawbPz8vrgnKg6nFTdTKFCj7ng5GXmp0U/v0qen2D5JO6Wc9goLvIiWLPkM
csWI/p9BTfPIxjjjaa3n1K9AbmXbAVAlYEljgD6HTO6SQRIgF9bgdW5kwfmfcY5n
I5ut7WCvd5HOIOfeyX3cusTZVZg8DQNeaQ+Hg8FJrsBGLbPeC/Zp/g8u9BtVTrl1
RZ/ZfZ/payyqeg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client