Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: ccl5dhT2r9eXr5obk0fZftiQw83kxQfX9ySLzJary2o=
Subject key identifier: 2F:8E:5C:C2:35:93:2E:8E:EB:31:CE:74:C0:D2:A4:57:03:7D:FF:68
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0198D9992E8F02AC2F7D4D13F0302DA23422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1650
Signing time: Sun 24 Aug 2025 01:02:31 +0000
Manifest this update: Sun 24 Aug 2025 01:02:31 +0000
Manifest next update: Mon 25 Aug 2025 01:02:31 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: mFqfMHbg4iRzAHoFR3N41cSVhtplz2yFCOhpWWCiprM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:2e:8f:02:ac:2f:7d:4d:13:f0:30:2d:a2:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Aug 24 01:02:31 2025 GMT
Not After : Aug 25 01:02:31 2025 GMT
Subject: CN=2f8e5cc235932e8eeb31ce74c0d2a457037dff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:53:4e:08:fd:33:03:86:77:d9:3e:ff:d6:
cd:fd:1a:ff:ad:f1:fe:23:f2:2b:fc:8f:59:1e:2f:
24:dc:b6:21:8e:c5:46:f3:9b:26:73:53:7f:ec:ba:
28:a1:84:03:b9:f7:21:97:0a:e6:66:2d:cc:f4:ce:
6d:dc:95:ae:27:d2:64:83:c9:74:a7:6d:03:a6:34:
c3:19:36:27:81:74:98:14:d9:2b:f4:57:fe:bd:59:
1e:b0:65:e1:d1:94:7b:47:21:ee:91:aa:63:8c:95:
4f:37:b1:27:3d:ca:aa:56:fa:2f:b3:59:5a:fb:08:
af:06:a4:ba:b8:58:21:a4:23:ff:f4:0b:79:9c:db:
42:d0:cb:3f:a7:d6:27:25:0b:5a:b2:59:57:e4:f1:
67:c6:35:3c:59:92:5f:7f:36:d3:6c:40:3f:5c:e0:
98:72:a5:96:39:f2:44:6c:21:b3:d9:83:44:85:17:
21:e0:73:e9:ee:5e:da:81:4f:82:e7:f7:a6:e1:95:
24:16:8a:7f:73:14:f1:d6:db:ee:74:27:11:c1:80:
49:e8:0c:d4:05:15:39:15:20:39:90:f8:1f:8b:65:
68:00:e0:25:e9:fe:42:7f:2f:3d:63:d7:05:05:c5:
ea:d0:d6:d1:ef:ba:1a:b4:e5:44:aa:7c:30:b8:18:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:5C:C2:35:93:2E:8E:EB:31:CE:74:C0:D2:A4:57:03:7D:FF:68
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:32:6d:03:4e:7e:cf:07:95:b7:f4:04:85:ae:9d:03:6e:
dd:9b:e2:2e:28:2e:2d:e1:34:27:5f:69:25:30:e5:63:ab:fe:
b3:68:27:f4:a6:74:b6:03:f6:22:ec:23:d7:4a:51:fd:ff:52:
76:8e:10:03:01:7b:28:72:da:1f:ea:61:88:38:02:e6:19:9e:
58:d2:8a:c8:69:3e:86:6d:49:4c:26:a4:1d:0a:76:b7:fc:8a:
44:bc:b1:35:dd:98:63:33:50:96:33:bd:81:17:90:33:4d:92:
97:21:bf:43:04:2d:0c:e0:68:de:37:88:17:47:c6:95:e2:3d:
94:bf:bf:0a:16:c4:0d:6d:ab:3f:8d:68:09:0b:5c:a2:80:18:
87:df:d4:c0:4c:53:d3:9d:95:d7:63:de:6f:43:0f:d5:f0:a6:
a3:e8:8f:71:c5:c8:75:37:e7:93:75:ae:74:bb:cb:14:32:78:
81:a2:6e:42:26:e7:c2:5f:cc:e4:35:80:b7:9d:bd:c4:52:18:
3a:0e:25:27:fd:ed:84:8d:cc:28:10:86:c7:47:d5:25:b1:af:
7c:8a:2b:31:3d:9d:3f:e0:ee:af:7a:32:06:78:01:12:d6:10:
3e:f0:f7:8c:b5:f6:ed:11:8c:61:23:03:22:7a:e6:73:36:49:
a3:76:ce:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZmS6PAqwvfU0T8DAtojQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3
Njc1NTMwHhcNMjUwODI0MDEwMjMxWhcNMjUwODI1MDEwMjMxWjAzMTEwLwYDVQQD
EygyZjhlNWNjMjM1OTMyZThlZWIzMWNlNzRjMGQyYTQ1NzAzN2RmZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL9TTgj9MwOGd9k+/9bN/Rr/rfH+
I/Ir/I9ZHi8k3LYhjsVG85smc1N/7LoooYQDufchlwrmZi3M9M5t3JWuJ9Jkg8l0
p20DpjTDGTYngXSYFNkr9Ff+vVkesGXh0ZR7RyHukapjjJVPN7EnPcqqVvovs1la
+wivBqS6uFghpCP/9At5nNtC0Ms/p9YnJQtasllX5PFnxjU8WZJffzbTbEA/XOCY
cqWWOfJEbCGz2YNEhRch4HPp7l7agU+C5/em4ZUkFop/cxTx1tvudCcRwYBJ6AzU
BRU5FSA5kPgfi2VoAOAl6f5Cfy89Y9cFBcXq0NbR77oatOVEqnwwuBgD1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+OXMI1ky6O6zHOdMDSpFcDff9oMB8GA1UdIwQY
MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt
YzgxNzQzYjJjYWU2LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2
LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP8ybQNO
fs8Hlbf0BIWunQNu3ZviLiguLeE0J19pJTDlY6v+s2gn9KZ0tgP2Iuwj10pR/f9S
do4QAwF7KHLaH+phiDgC5hmeWNKKyGk+hm1JTCakHQp2t/yKRLyxNd2YYzNQljO9
gReQM02SlyG/QwQtDOBo3jeIF0fGleI9lL+/ChbEDW2rP41oCQtcooAYh9/UwExT
052V12Peb0MP1fCmo+iPccXIdTfnk3WudLvLFDJ4gaJuQibnwl/M5DWAt529xFIY
Og4lJ/3thI3MKBCGx0fVJbGvfIorMT2dP+Dur3oyBngBEtYQPvD3jLX27RGMYSMD
InrmczZJo3bOhg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:51:58 2025 by rpki-client