Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: o5BRiBoFHKdcDk8MRHWocgjHZwb9eOlEKvcYFFHfPJs=
Subject key identifier: 85:D7:D6:12:00:81:33:6A:B3:56:21:70:D4:5A:DD:AB:BC:AD:93:F7
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 0198D5BBDB4B7F3C1F2EBD21FCFFB9ECAE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 0488
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: 9LFhTnbHi2j1l30aEZ8E2DkeXMs8J5+p3g5tCxQuyVY=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:db:4b:7f:3c:1f:2e:bd:21:fc:ff:b9:ec:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=85d7d6120081336ab3562170d45addabbcad93f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:2e:c4:a2:3c:29:bf:62:b0:5e:f0:d3:85:
c9:19:7c:be:92:f9:6a:09:ed:48:d2:56:c0:9e:9e:
cf:da:71:41:b4:57:3a:6b:0e:85:16:76:c4:2a:e4:
ba:ba:0a:3a:98:0b:79:d4:70:e1:79:3f:3b:c2:40:
f2:42:65:bb:52:46:02:93:91:c7:2e:42:66:21:b1:
f8:90:f0:13:b6:a4:1c:1e:c4:f6:bc:e5:3f:c1:a5:
12:bd:bf:e1:f6:d4:01:54:56:93:a8:0c:fa:51:80:
c2:2a:c3:0a:a7:aa:19:a0:57:9e:e5:25:ee:49:ba:
bd:4d:67:67:7d:45:c2:63:ab:a2:5c:ad:e6:59:9a:
cb:48:bf:b7:79:fb:8e:12:27:b0:a7:e0:e5:5e:9d:
b6:d8:9d:43:00:73:1c:d4:d5:d8:a2:02:32:ee:e6:
97:f8:a8:16:6f:13:4e:be:a1:2c:fc:03:38:57:25:
34:b6:a4:c2:fa:c5:a4:43:51:24:8e:4e:9b:3c:e2:
40:4e:7b:ea:93:47:4d:d4:71:46:cf:34:a3:cf:70:
3d:b4:a8:ae:43:88:b9:f6:2f:47:36:a4:c0:44:0e:
02:7a:bf:21:86:a1:0c:a5:08:a8:bf:eb:a8:e8:23:
ea:a8:37:f4:bc:81:5c:aa:b6:90:59:0e:a6:8a:da:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:D6:12:00:81:33:6A:B3:56:21:70:D4:5A:DD:AB:BC:AD:93:F7
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:23:46:14:a4:b8:97:2d:05:cf:64:70:b6:71:c7:af:78:
9a:fe:9b:48:b7:f5:a8:cf:9c:e2:f6:76:d3:b5:7d:57:dd:07:
80:91:e5:16:c5:d0:85:c8:e4:f8:47:1b:b7:f9:cc:7d:90:09:
98:ee:7f:35:72:38:eb:f9:0d:46:45:c4:e9:c6:7c:e2:d6:84:
4a:e1:44:9c:4a:a5:04:bf:4d:1c:3e:9f:9e:d7:98:c6:b2:05:
cc:5d:47:18:d0:45:71:2e:b4:f3:08:49:74:ae:6e:e0:32:be:
e4:d2:10:8a:c1:eb:31:bf:44:bb:f8:94:c4:79:3b:e1:be:00:
26:a9:80:2e:22:98:1a:2b:40:9e:2c:6a:b2:e7:eb:f8:50:29:
11:96:07:9b:27:f0:0a:62:59:59:b1:98:57:19:b9:ef:5b:2d:
a1:8c:59:79:c9:36:9a:46:52:c2:36:52:75:fb:b9:ca:56:2e:
4d:72:5b:e8:44:81:7c:06:6c:87:d3:a5:f3:dc:55:96:2f:fe:
82:c9:a0:89:e9:28:c4:dc:7f:13:3c:35:b6:d4:fb:79:73:4e:
f1:2d:f3:70:09:c3:e1:1b:b1:fc:12:de:c9:06:69:b1:22:9e:
54:58:25:b9:3c:0c:34:05:4d:71:8a:2b:b1:4b:55:a5:81:17:
0e:9c:5b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9tLfzwfLr0h/P+57K6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5
NDNhNDYwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
Eyg4NWQ3ZDYxMjAwODEzMzZhYjM1NjIxNzBkNDVhZGRhYmJjYWQ5M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXYuxKI8Kb9isF7w04XJGXy+kvlq
Ce1I0lbAnp7P2nFBtFc6aw6FFnbEKuS6ugo6mAt51HDheT87wkDyQmW7UkYCk5HH
LkJmIbH4kPATtqQcHsT2vOU/waUSvb/h9tQBVFaTqAz6UYDCKsMKp6oZoFee5SXu
Sbq9TWdnfUXCY6uiXK3mWZrLSL+3efuOEiewp+DlXp222J1DAHMc1NXYogIy7uaX
+KgWbxNOvqEs/AM4VyU0tqTC+sWkQ1Ekjk6bPOJATnvqk0dN1HFGzzSjz3A9tKiu
Q4i59i9HNqTARA4Cer8hhqEMpQiov+uo6CPqqDf0vIFcqraQWQ6mitrJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXX1hIAgTNqs1YhcNRa3au8rZP3MB8GA1UdIwQY
MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt
OWY0N2M3NDEwZDQxLzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx
LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8AjRhSk
uJctBc9kcLZxx694mv6bSLf1qM+c4vZ207V9V90HgJHlFsXQhcjk+Ecbt/nMfZAJ
mO5/NXI46/kNRkXE6cZ84taESuFEnEqlBL9NHD6fnteYxrIFzF1HGNBFcS608whJ
dK5u4DK+5NIQisHrMb9Eu/iUxHk74b4AJqmALiKYGitAnixqsufr+FApEZYHmyfw
CmJZWbGYVxm571stoYxZeck2mkZSwjZSdfu5ylYuTXJb6ESBfAZsh9Ol89xVli/+
gsmgiekoxNx/Ezw1ttT7eXNO8S3zcAnD4Rux/BLeyQZpsSKeVFgluTwMNAVNcYor
sUtVpYEXDpxbgA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:15 2025 by rpki-client