Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: Yu3WssAnm3EVpoovyYd/kxQ5EFNxBg178yMhuOCXyyQ=
Subject key identifier: 19:17:1A:6F:1B:85:EC:71:54:B1:C3:82:38:84:FE:64:AE:B2:78:5A
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019A71EE86488BDA8A524A656A7EEA74D889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: zofYgGh6LP9+Q2jUHxW3s5c537GXpP7PclND9PTqkog=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:48:8b:da:8a:52:4a:65:6a:7e:ea:74:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=19171a6f1b85ec7154b1c3823884fe64aeb2785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:49:fe:aa:e9:a5:71:f2:de:8e:a6:fa:01:
93:f5:93:af:20:e2:1b:cb:4b:3f:b3:b8:59:1c:a1:
32:11:38:cb:d0:1a:40:fb:71:b0:d6:cf:bd:66:f9:
ff:d6:d8:64:85:9a:f0:73:d2:63:ac:08:7c:8a:f9:
ec:6d:10:50:7d:38:ad:db:8e:0a:8b:58:d5:bb:3e:
8f:ff:ab:46:92:d9:ab:33:5d:de:32:ae:22:8d:49:
e8:f9:29:61:2b:a8:e5:1e:5a:41:b5:ad:d4:43:20:
9f:ac:e5:76:fc:68:de:85:f6:77:83:45:f6:35:5c:
7b:d5:e4:6d:dd:fe:0d:cc:db:df:9d:84:7c:30:44:
c5:6d:b4:77:f5:56:00:57:3c:a8:08:43:28:e0:bf:
b1:73:dd:97:76:68:eb:b5:56:f2:d8:85:66:11:0c:
dc:0a:74:7c:97:e9:e7:68:4c:58:55:60:97:f4:8f:
4b:a5:6a:eb:29:31:06:b5:16:e1:61:ee:6b:6d:03:
aa:58:5d:e3:53:e8:48:dc:8a:99:28:e9:42:a2:b9:
a8:73:6c:a3:bb:50:88:46:4d:00:e0:7c:52:36:dc:
80:49:43:2b:b8:bb:a0:48:57:01:5c:10:45:09:e7:
bd:87:6a:94:3d:a9:28:4a:6b:16:9a:a3:7c:6c:e5:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:17:1A:6F:1B:85:EC:71:54:B1:C3:82:38:84:FE:64:AE:B2:78:5A
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:4b:f3:e4:1c:3c:6d:c2:69:ad:cd:5a:d8:29:f8:6f:79:
80:49:25:23:95:42:e1:49:de:56:e8:9a:3b:d3:c9:07:ef:16:
c5:f1:c0:d4:3a:5f:d7:40:18:35:9e:15:84:0c:d6:9e:b3:d7:
2b:c2:d7:f6:45:c2:f2:a3:46:54:2a:a7:c9:4d:40:36:15:17:
4c:db:1e:1b:9d:24:88:cb:03:55:0e:68:68:73:d6:ba:49:aa:
cf:37:bb:fb:2f:1e:8a:82:c9:c5:b0:74:32:07:92:e2:db:40:
51:35:12:d2:8d:9b:65:cd:59:af:90:d3:06:90:35:a3:f2:44:
08:4e:b2:e7:d5:74:99:5c:a1:58:22:1f:c6:04:13:5f:38:26:
30:ae:9d:da:c4:d5:36:d8:76:3f:ba:01:58:37:08:01:b6:b5:
f3:a1:40:39:f8:8d:cd:97:32:8e:18:1c:31:a3:68:74:9c:32:
0e:97:72:65:ba:21:6f:b3:15:73:d1:3a:5f:22:93:36:e4:2b:
63:31:01:45:85:7a:22:b7:0d:d2:16:28:93:0d:dc:bc:7d:b7:
57:82:17:f7:d3:f8:6a:7f:ae:85:5b:7b:16:3a:82:22:01:29:
d0:d4:44:b7:b3:16:49:3f:55:66:61:bb:cd:c2:5d:c8:08:29:
5f:41:17:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oZIi9qKUkplan7qdNiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5
NjQ5YmIwHhcNMjUxMTExMDgwMDQ4WhcNMjUxMTEyMDgwMDQ4WjAzMTEwLwYDVQQD
EygxOTE3MWE2ZjFiODVlYzcxNTRiMWMzODIzODg0ZmU2NGFlYjI3ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5J/qrppXHy3o6m+gGT9ZOvIOIb
y0s/s7hZHKEyETjL0BpA+3Gw1s+9Zvn/1thkhZrwc9JjrAh8ivnsbRBQfTit244K
i1jVuz6P/6tGktmrM13eMq4ijUno+SlhK6jlHlpBta3UQyCfrOV2/GjehfZ3g0X2
NVx71eRt3f4NzNvfnYR8METFbbR39VYAVzyoCEMo4L+xc92XdmjrtVby2IVmEQzc
CnR8l+nnaExYVWCX9I9LpWrrKTEGtRbhYe5rbQOqWF3jU+hI3IqZKOlCormoc2yj
u1CIRk0A4HxSNtyASUMruLugSFcBXBBFCee9h2qUPakoSmsWmqN8bOWXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkXGm8bhexxVLHDgjiE/mSusnhaMB8GA1UdIwQY
MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt
ZWVkZjc2MDc3ZjA5LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5
LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0tL8+Qc
PG3Caa3NWtgp+G95gEklI5VC4UneVuiaO9PJB+8WxfHA1Dpf10AYNZ4VhAzWnrPX
K8LX9kXC8qNGVCqnyU1ANhUXTNseG50kiMsDVQ5oaHPWukmqzze7+y8eioLJxbB0
MgeS4ttAUTUS0o2bZc1Zr5DTBpA1o/JECE6y59V0mVyhWCIfxgQTXzgmMK6d2sTV
Nth2P7oBWDcIAba186FAOfiNzZcyjhgcMaNodJwyDpdyZbohb7MVc9E6XyKTNuQr
YzEBRYV6IrcN0hYokw3cvH23V4IX99P4an+uhVt7FjqCIgEp0NREt7MWST9VZmG7
zcJdyAgpX0EX2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:49 2025 by rpki-client