Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: ReE8gcJ/OZhPlT5x6ms785kAoNekHa5iCekLoyW/4vA=
Subject key identifier: 45:19:2F:C5:3B:E2:9F:2E:8D:06:B6:AB:22:C7:FC:B7:A0:DE:24:83
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 0199FF22704C8E1CA97B9AB7F84B7FF67550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 0522
Signing time: Mon 20 Oct 2025 01:01:10 +0000
Manifest this update: Mon 20 Oct 2025 01:01:10 +0000
Manifest next update: Tue 21 Oct 2025 01:01:10 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: PXdGpbruwHTcqP5PEFkiCjeYlOkdI8fj5kpAXr+UKOI=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:70:4c:8e:1c:a9:7b:9a:b7:f8:4b:7f:f6:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Oct 20 01:01:10 2025 GMT
Not After : Oct 21 01:01:10 2025 GMT
Subject: CN=45192fc53be29f2e8d06b6ab22c7fcb7a0de2483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:37:7b:f4:2c:7e:73:11:21:dc:c0:38:69:
e0:f2:9a:2a:61:09:2a:09:5f:6e:db:cd:d6:21:c2:
eb:ff:bd:fd:f2:d8:b8:1a:ab:ac:12:75:fc:1f:cf:
cc:ad:02:ba:a0:61:8b:83:3f:67:b5:4b:2d:50:47:
86:53:ed:2f:af:35:0a:c9:a6:80:52:d7:a1:da:ba:
be:36:f0:0e:2c:91:cc:61:61:3c:5c:a6:cd:fc:73:
7a:5f:04:d4:00:a7:cf:c0:28:d1:ba:9f:c5:d4:96:
57:f0:0f:2f:81:09:bf:f2:d1:77:15:04:15:f6:6d:
c2:77:02:36:3e:52:df:24:c6:24:cc:58:07:7e:92:
1d:22:a0:ef:c5:0a:1f:64:3e:f1:12:9d:1d:4e:3d:
30:b2:d3:b9:99:41:a2:5a:e6:1c:ad:1b:9e:fc:76:
89:a1:ab:f1:15:af:b8:6a:12:a7:1f:e3:9f:80:e2:
25:0f:ba:74:02:ce:2b:a1:6e:86:49:74:58:14:3e:
4f:6b:4e:18:39:e9:a5:57:9f:de:ff:b3:18:6f:63:
4a:19:ec:6b:bf:ab:81:5b:77:15:3b:ac:49:5e:8b:
01:ad:df:25:4d:42:35:2a:00:b6:46:a1:fe:b3:9c:
9f:f9:de:fe:66:57:ac:93:11:c6:6a:91:ae:5a:3b:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:2F:C5:3B:E2:9F:2E:8D:06:B6:AB:22:C7:FC:B7:A0:DE:24:83
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:87:75:6b:37:ac:0f:78:e4:d6:a3:4b:cf:2b:82:b7:62:3f:
f5:4b:c5:89:a0:ee:10:4a:b9:da:4d:1a:84:37:1b:02:51:80:
99:f2:4f:e3:d9:18:e1:b5:a9:e1:86:91:70:05:24:df:c2:2a:
17:d1:ed:f1:00:db:95:20:f1:5c:b4:d9:7c:c0:ce:40:1a:e8:
e1:ad:45:f9:d5:93:90:9e:e6:00:9c:7b:37:b1:5a:4f:fa:d3:
1a:50:55:d4:cb:7c:74:b7:00:ae:81:93:f5:b1:78:23:14:00:
4a:3b:97:dd:2f:76:11:26:72:83:8c:7b:cf:ec:fc:09:8e:79:
b0:e1:0d:a1:f0:70:6f:e3:f3:1b:6f:2c:92:46:17:07:e3:fa:
56:b0:c0:f2:9a:04:19:d9:f6:8e:b5:d9:9f:22:6f:6f:ac:f8:
30:e4:99:3d:5f:23:3a:9f:5a:13:a5:df:94:ee:16:e4:0b:0d:
40:f6:b6:43:0d:bb:13:71:70:22:2b:51:ac:c6:ae:eb:a6:50:
98:36:b0:50:99:9a:27:18:35:95:c7:1e:7b:cd:fa:b4:48:79:
2b:11:80:88:06:06:93:8f:0d:48:57:b1:cb:1e:0b:e6:ff:22:
d7:05:a1:4d:99:9e:4d:5b:a2:20:0d:b3:58:cf:1b:a8:2f:e2:
26:e5:90:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/InBMjhype5q3+Et/9nVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5
NDNhNDYwHhcNMjUxMDIwMDEwMTEwWhcNMjUxMDIxMDEwMTEwWjAzMTEwLwYDVQQD
Eyg0NTE5MmZjNTNiZTI5ZjJlOGQwNmI2YWIyMmM3ZmNiN2EwZGUyNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7w3e/QsfnMRIdzAOGng8poqYQkq
CV9u283WIcLr/7398ti4GqusEnX8H8/MrQK6oGGLgz9ntUstUEeGU+0vrzUKyaaA
Uteh2rq+NvAOLJHMYWE8XKbN/HN6XwTUAKfPwCjRup/F1JZX8A8vgQm/8tF3FQQV
9m3CdwI2PlLfJMYkzFgHfpIdIqDvxQofZD7xEp0dTj0wstO5mUGiWuYcrRue/HaJ
oavxFa+4ahKnH+OfgOIlD7p0As4roW6GSXRYFD5Pa04YOemlV5/e/7MYb2NKGexr
v6uBW3cVO6xJXosBrd8lTUI1KgC2RqH+s5yf+d7+ZleskxHGapGuWjt6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUZL8U74p8ujQa2qyLH/Leg3iSDMB8GA1UdIwQY
MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt
OWY0N2M3NDEwZDQxLzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx
LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYd1azes
D3jk1qNLzyuCt2I/9UvFiaDuEEq52k0ahDcbAlGAmfJP49kY4bWp4YaRcAUk38Iq
F9Ht8QDblSDxXLTZfMDOQBro4a1F+dWTkJ7mAJx7N7FaT/rTGlBV1Mt8dLcAroGT
9bF4IxQASjuX3S92ESZyg4x7z+z8CY55sOENofBwb+PzG28skkYXB+P6VrDA8poE
Gdn2jrXZnyJvb6z4MOSZPV8jOp9aE6XflO4W5AsNQPa2Qw27E3FwIitRrMau66ZQ
mDawUJmaJxg1lccee836tEh5KxGAiAYGk48NSFexyx4L5v8i1wWhTZmeTVuiIA2z
WM8bqC/iJuWQlA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:57 2025 by rpki-client