Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: JZoCC1hv38yO5eYAfw8i5wk7cfK4drHL2w3/rBuloI0=
Subject key identifier: CB:37:24:CB:4E:B4:FA:C2:E2:24:2A:F9:F3:95:D3:BF:C1:44:D4:B9
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 0199FB0F2CA14C8D6CA6D7F0478DE7AAD868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 015C
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: EapCHjHS3TIJa/J6VdnySpuXQDTTKEHraEI6zUXNZzQ=)
2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2c:a1:4c:8d:6c:a6:d7:f0:47:8d:e7:aa:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=cb3724cb4eb4fac2e2242af9f395d3bfc144d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:cd:77:79:a7:27:66:7c:44:02:ca:c7:77:
1a:1a:80:2e:a3:72:7d:cd:2b:53:a5:e8:1c:a4:8a:
c3:a6:2c:05:a9:a0:f6:6b:7a:a7:5a:bc:b9:63:2b:
b2:3a:65:a0:07:11:8c:19:f1:4f:8f:d3:70:b9:81:
7b:af:57:b3:e9:bc:95:06:05:ea:33:11:ec:f4:15:
dd:30:9d:aa:b0:70:2b:5d:25:ad:b8:ed:21:70:16:
0f:83:b5:4f:ee:46:d6:b9:a7:cc:50:57:1f:02:c4:
7f:7b:ef:22:48:85:73:d8:27:50:5c:0f:84:43:5e:
e7:79:df:98:d8:23:ed:72:66:e2:8f:69:58:92:c5:
b1:3f:f2:1f:36:90:d8:b7:fd:2e:82:65:70:e8:94:
84:4d:bd:49:f1:e2:66:a8:79:2e:cf:c4:b3:c4:0c:
99:09:9e:1e:b0:bf:bb:ee:f4:76:d1:3e:6a:e1:b6:
45:07:92:0a:e7:6e:6c:22:11:57:59:a1:d7:4d:12:
3d:cb:27:a5:1d:53:13:02:5b:03:b2:a3:25:8a:0c:
92:17:87:ac:d0:0c:2f:86:19:55:d8:d1:ff:0a:ac:
da:9e:65:29:ef:29:11:c3:d5:4f:44:fc:cc:40:03:
27:3f:5b:b9:1b:55:46:38:88:48:14:2b:77:7d:fa:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:24:CB:4E:B4:FA:C2:E2:24:2A:F9:F3:95:D3:BF:C1:44:D4:B9
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0e:e7:ca:c4:ec:e5:be:2d:2d:78:1b:6f:d7:e5:81:cd:7f:
a7:49:23:5b:7b:d2:dc:39:b9:a3:68:e8:77:13:f6:a2:01:c5:
74:fa:b5:98:01:ee:da:05:56:78:07:2b:20:43:c0:67:7b:20:
92:a4:8d:41:fc:24:18:f7:38:a7:ac:6d:3d:37:08:1b:32:96:
94:d5:bb:d4:f0:25:f9:9d:07:99:a0:3a:74:1e:fb:f0:cd:38:
58:00:b2:3d:13:d1:9c:0e:51:30:50:d0:89:54:d0:fb:e2:a0:
4c:46:3f:0f:40:d9:01:46:9e:2f:aa:61:da:2d:2a:4e:93:48:
2a:15:c3:67:37:2b:55:65:08:f2:13:a7:ce:bc:a4:63:3e:e6:
f0:61:8f:89:e5:95:80:ec:37:57:cb:34:09:02:b3:20:1a:76:
c6:b0:86:ae:64:db:26:dd:99:c7:94:d4:9e:14:73:f8:73:48:
91:1e:8b:b3:a3:32:a0:c0:73:91:78:ce:08:90:c3:17:ca:06:
d3:2a:f2:72:15:c8:6b:f8:44:4a:a8:e5:1a:72:1b:18:f6:d6:
48:49:ce:a5:64:40:16:4a:3d:78:6a:51:2a:4e:61:70:98:be:
32:51:61:70:25:04:77:a2:89:78:cd:0a:fc:6c:31:b2:12:ee:
22:23:26:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DyyhTI1sptfwR43nqthoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl
M2E5MGUwHhcNMjUxMDE5MDYwMTM5WhcNMjUxMDIwMDYwMTM5WjAzMTEwLwYDVQQD
EyhjYjM3MjRjYjRlYjRmYWMyZTIyNDJhZjlmMzk1ZDNiZmMxNDRkNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCbNd3mnJ2Z8RALKx3caGoAuo3J9
zStTpegcpIrDpiwFqaD2a3qnWry5YyuyOmWgBxGMGfFPj9NwuYF7r1ez6byVBgXq
MxHs9BXdMJ2qsHArXSWtuO0hcBYPg7VP7kbWuafMUFcfAsR/e+8iSIVz2CdQXA+E
Q17ned+Y2CPtcmbij2lYksWxP/IfNpDYt/0ugmVw6JSETb1J8eJmqHkuz8SzxAyZ
CZ4esL+77vR20T5q4bZFB5IK525sIhFXWaHXTRI9yyelHVMTAlsDsqMligySF4es
0AwvhhlV2NH/CqzanmUp7ykRw9VPRPzMQAMnP1u5G1VGOIhIFCt3ffrKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs3JMtOtPrC4iQq+fOV07/BRNS5MB8GA1UdIwQY
MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt
ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx
LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmg7nysTs
5b4tLXgbb9flgc1/p0kjW3vS3Dm5o2jodxP2ogHFdPq1mAHu2gVWeAcrIEPAZ3sg
kqSNQfwkGPc4p6xtPTcIGzKWlNW71PAl+Z0HmaA6dB778M04WACyPRPRnA5RMFDQ
iVTQ++KgTEY/D0DZAUaeL6ph2i0qTpNIKhXDZzcrVWUI8hOnzrykYz7m8GGPieWV
gOw3V8s0CQKzIBp2xrCGrmTbJt2Zx5TUnhRz+HNIkR6Ls6MyoMBzkXjOCJDDF8oG
0yrychXIa/hESqjlGnIbGPbWSEnOpWRAFko9eGpRKk5hcJi+MlFhcCUEd6KJeM0K
/GwxshLuIiMmhQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:09 2025 by rpki-client