Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: cxC0m+1LR5+8TDMS01uQDzg1epi58pA4oVODGxp6N5k=
Subject key identifier: 17:74:0C:18:29:D2:BB:CD:CD:D9:63:83:38:C8:ED:CF:D0:70:17:D6
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0198D4A7B8419A33ED98ED6749D41E8AC76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 10AE
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: YpLMsSgYSsZZlLbWEQ5s9SOQo4Sdwdcb4PcGs9S1FKE=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b8:41:9a:33:ed:98:ed:67:49:d4:1e:8a:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=17740c1829d2bbcdcdd9638338c8edcfd07017d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ea:70:64:aa:fb:91:30:f4:01:f1:6a:43:
75:a7:9c:52:06:82:57:1f:4b:76:ca:f5:a2:0d:6a:
3f:d0:15:ea:43:02:49:ea:d4:c0:79:ae:98:24:24:
70:e0:a7:f9:31:89:b8:78:bd:a8:9e:c2:a4:57:7d:
1f:d7:e6:d4:81:08:b5:5f:8b:08:2b:46:97:39:f1:
22:5b:f4:30:16:8a:c7:30:2c:75:cd:26:9b:2e:83:
44:b7:3c:bc:d8:e6:a7:72:e2:c2:dd:fd:cb:b6:bf:
03:64:54:d7:ae:b8:a4:7c:9f:52:ff:20:a8:0f:ef:
e7:11:34:83:27:e3:8f:fd:aa:37:31:b4:55:42:29:
e4:49:37:3e:65:06:02:63:60:c5:89:dd:17:d2:ef:
18:2d:6a:66:8a:cf:39:e0:ba:f4:f5:d7:89:16:c5:
d4:bc:7d:e1:d3:d7:b4:a9:a3:43:2e:48:8f:28:ec:
32:ff:3f:7f:75:80:5a:f8:9b:3e:c3:66:2e:f3:b3:
44:50:24:0d:b0:bf:6c:f9:ca:3e:16:0a:ca:a1:b5:
92:d5:7e:17:d5:ee:22:fc:a5:d4:d1:04:a7:18:79:
24:80:e0:ed:c0:94:f9:bc:19:7f:81:5d:6d:1d:5e:
71:a0:e8:ef:ec:24:20:55:88:63:c6:1e:c0:e7:65:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:0C:18:29:D2:BB:CD:CD:D9:63:83:38:C8:ED:CF:D0:70:17:D6
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:75:28:f6:0f:51:b3:a2:f7:24:3a:e0:6e:9b:2b:cb:58:40:
ca:ae:6f:d5:bd:a1:29:45:c3:ad:3a:46:f4:6b:a9:a3:f0:7b:
69:50:3c:86:f4:4c:d1:1b:5a:60:95:28:6e:17:f2:3e:71:2c:
0a:94:23:e5:4e:b1:c6:aa:20:70:7d:f7:db:16:8c:31:21:65:
04:c1:54:a1:2e:2d:68:eb:30:d8:87:db:b4:c1:4d:79:18:14:
a4:16:8b:a8:8f:16:f2:6a:6e:6a:52:df:a0:41:f7:80:96:4d:
6a:0d:c3:15:c4:1e:78:47:d8:dc:57:50:ce:65:a3:67:86:05:
c3:f2:7d:3c:a9:a6:5c:e4:62:95:fc:c1:3c:30:d1:16:c1:09:
df:af:c7:19:9c:27:cb:d7:8a:6d:05:61:dc:b0:32:2f:14:6c:
7b:ee:0f:5a:70:ad:51:06:1e:af:72:73:9b:30:2e:7a:7b:29:
0d:40:d1:ae:6c:f1:eb:d6:f0:29:03:30:5c:07:c7:be:cf:89:
8c:2e:a8:8f:d6:65:3b:63:04:30:32:1c:06:ae:53:07:99:19:
92:1f:14:13:49:e9:7e:9f:9b:4b:5a:5c:13:d1:05:40:e4:0b:
f5:dd:69:a9:ff:a3:51:1e:aa:3f:1c:71:fe:d5:7c:50:bd:b9:
1d:20:ec:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp7hBmjPtmO1nSdQeisdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh
MGIwMDkwHhcNMjUwODIzMDIwMDE3WhcNMjUwODI0MDIwMDE3WjAzMTEwLwYDVQQD
EygxNzc0MGMxODI5ZDJiYmNkY2RkOTYzODMzOGM4ZWRjZmQwNzAxN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVjqcGSq+5Ew9AHxakN1p5xSBoJX
H0t2yvWiDWo/0BXqQwJJ6tTAea6YJCRw4Kf5MYm4eL2onsKkV30f1+bUgQi1X4sI
K0aXOfEiW/QwForHMCx1zSabLoNEtzy82OancuLC3f3Ltr8DZFTXrrikfJ9S/yCo
D+/nETSDJ+OP/ao3MbRVQinkSTc+ZQYCY2DFid0X0u8YLWpmis854Lr09deJFsXU
vH3h09e0qaNDLkiPKOwy/z9/dYBa+Js+w2Yu87NEUCQNsL9s+co+FgrKobWS1X4X
1e4i/KXU0QSnGHkkgODtwJT5vBl/gV1tHV5xoOjv7CQgVYhjxh7A52UYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd0DBgp0rvNzdljgzjI7c/QcBfWMB8GA1UdIwQY
MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt
ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw
LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHUo9g9R
s6L3JDrgbpsry1hAyq5v1b2hKUXDrTpG9Gupo/B7aVA8hvRM0RtaYJUobhfyPnEs
CpQj5U6xxqogcH332xaMMSFlBMFUoS4taOsw2IfbtMFNeRgUpBaLqI8W8mpualLf
oEH3gJZNag3DFcQeeEfY3FdQzmWjZ4YFw/J9PKmmXORilfzBPDDRFsEJ36/HGZwn
y9eKbQVh3LAyLxRse+4PWnCtUQYer3JzmzAuenspDUDRrmzx69bwKQMwXAfHvs+J
jC6oj9ZlO2MEMDIcBq5TB5kZkh8UE0npfp+bS1pcE9EFQOQL9d1pqf+jUR6qPxxx
/tV8UL25HSDs4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:41 2025 by rpki-client