Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: BHUj8emOKl8jfaysIVL/D/3tOyE2q7UWVwrpF2nBJXo=
Subject key identifier: 91:0B:27:F0:52:8F:CF:64:CE:5E:0C:8C:B0:43:6D:17:EC:43:07:B3
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019A70A50EB8E0BDDCF2F0213132A0944EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: xx3A3rJJGNOOO4fXFrbH451l2RMm0/JzkjVYGRA6YVc=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0e:b8:e0:bd:dc:f2:f0:21:31:32:a0:94:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=910b27f0528fcf64ce5e0c8cb0436d17ec4307b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:26:43:c1:7b:9c:e2:c9:2b:b9:9e:46:f1:
64:bb:fe:0a:bb:d3:ae:76:49:12:d9:8a:94:29:9b:
98:ad:ba:bd:fa:7d:a4:86:12:6d:6e:1f:07:da:82:
e3:d4:97:d2:92:a5:1c:ea:e9:53:14:f3:0a:1b:e3:
db:21:67:92:f8:83:f1:c4:4e:b7:f7:a6:0e:23:ee:
a0:9c:0d:4c:46:02:67:40:eb:c3:31:23:69:1e:bd:
d3:d2:00:8b:0b:87:b7:7c:50:90:23:92:17:46:f5:
fc:50:cb:44:a1:20:73:e0:e6:a4:36:0f:24:71:45:
e9:65:36:8f:d3:c4:f3:11:e3:f9:19:3c:49:b7:9c:
ed:71:7b:e8:4d:dd:68:41:3a:f6:91:54:7e:aa:54:
7a:30:47:ad:b4:3e:e3:92:78:63:a8:53:4b:ec:5b:
c3:2e:bb:94:e2:9d:3b:28:2b:42:ce:b5:0c:44:49:
c5:80:d0:be:e6:dd:13:be:1e:30:3d:8a:77:84:17:
23:e6:70:1f:2c:bc:41:aa:3f:b3:ab:d4:22:74:72:
55:89:88:d5:53:05:6e:e6:04:e2:05:cb:c7:be:ba:
0a:c4:4c:40:e0:bc:de:d9:05:cd:4d:68:6b:1a:7d:
47:a2:89:94:4d:41:3d:76:ea:d3:b8:d2:12:aa:1f:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:27:F0:52:8F:CF:64:CE:5E:0C:8C:B0:43:6D:17:EC:43:07:B3
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:51:75:09:d9:d2:d7:22:7f:f3:f0:ce:7d:74:6b:64:71:51:
14:ad:3c:f9:50:17:6d:f1:c9:0f:d0:13:5d:1b:d3:b7:d5:aa:
6f:fa:75:c4:d3:11:c3:88:1e:25:bc:84:56:15:15:7b:6c:cb:
91:2c:d4:c0:5e:6e:e6:7d:2a:71:2e:29:82:7f:c9:fd:86:41:
fb:3e:55:07:72:6d:9a:9d:4d:a8:2b:21:5b:13:98:04:fc:28:
b0:29:10:29:24:9f:a8:15:75:2a:9a:e0:ba:82:03:f9:71:6d:
c6:13:a5:45:1e:53:da:ff:d0:71:de:da:95:58:01:ed:5b:6e:
35:8e:3b:14:6b:57:80:ed:f7:a1:e1:4b:12:bd:3b:a3:3a:b1:
93:b5:fa:ff:df:3d:8a:67:c1:8c:87:41:8e:a8:34:ff:7e:22:
4e:f2:96:e3:4d:e6:e1:86:8e:4d:14:10:c5:1d:1c:50:bd:27:
c7:1c:19:4a:ef:58:41:e1:28:e3:2e:b4:3b:f2:30:8c:70:34:
99:6d:73:a1:37:16:95:22:cb:a2:cd:78:98:b8:ee:ff:4f:65:
9e:44:b2:3f:84:a6:77:5d:3b:32:69:03:89:d8:f5:4a:bb:f3:
03:be:d9:72:5e:2c:7e:e4:09:7a:ba:0c:c6:7b:82:c8:27:b6:
dc:34:69:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQ644L3c8vAhMTKglE6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUxMTExMDIwMDU2WhcNMjUxMTEyMDIwMDU2WjAzMTEwLwYDVQQD
Eyg5MTBiMjdmMDUyOGZjZjY0Y2U1ZTBjOGNiMDQzNmQxN2VjNDMwN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEsmQ8F7nOLJK7meRvFku/4Ku9Ou
dkkS2YqUKZuYrbq9+n2khhJtbh8H2oLj1JfSkqUc6ulTFPMKG+PbIWeS+IPxxE63
96YOI+6gnA1MRgJnQOvDMSNpHr3T0gCLC4e3fFCQI5IXRvX8UMtEoSBz4OakNg8k
cUXpZTaP08TzEeP5GTxJt5ztcXvoTd1oQTr2kVR+qlR6MEettD7jknhjqFNL7FvD
LruU4p07KCtCzrUMREnFgNC+5t0Tvh4wPYp3hBcj5nAfLLxBqj+zq9QidHJViYjV
UwVu5gTiBcvHvroKxExA4Lze2QXNTWhrGn1HoomUTUE9durTuNISqh8cYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJELJ/BSj89kzl4MjLBDbRfsQwezMB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElF1CdnS
1yJ/8/DOfXRrZHFRFK08+VAXbfHJD9ATXRvTt9Wqb/p1xNMRw4geJbyEVhUVe2zL
kSzUwF5u5n0qcS4pgn/J/YZB+z5VB3Jtmp1NqCshWxOYBPwosCkQKSSfqBV1Kprg
uoID+XFtxhOlRR5T2v/Qcd7alVgB7VtuNY47FGtXgO33oeFLEr07ozqxk7X6/989
imfBjIdBjqg0/34iTvKW403m4YaOTRQQxR0cUL0nxxwZSu9YQeEo4y60O/IwjHA0
mW1zoTcWlSLLos14mLju/09lnkSyP4Smd107MmkDidj1SrvzA77Zcl4sfuQJeroM
xnuCyCe23DRpVA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:58 2025 by rpki-client