Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: A5bxhqCRpvcMAlgewbrsj1cGsSRr2XiwlHNyawL7/I4=
Subject key identifier: C5:7A:D4:68:2D:5E:6E:27:8C:1C:0E:54:D1:63:E3:A0:81:1E:D4:7C
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 0199FC21C5A357C7D9CAF3BDEA7936FED788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 0691
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: 7ZXqXJ/g5dktuf8rW175PA+qHm2/mHvEZwNFvq/R/zA=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:a3:57:c7:d9:ca:f3:bd:ea:79:36:fe:d7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=c57ad4682d5e6e278c1c0e54d163e3a0811ed47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:1b:ef:63:cc:da:67:a7:62:05:05:f4:c0:
34:29:b7:61:5f:14:ff:5a:71:3d:3b:91:5f:f9:34:
cf:ed:d6:d3:77:b5:c1:35:cd:41:b5:a3:6f:2e:7a:
92:a7:41:06:56:03:15:2d:a3:de:ba:b9:33:72:68:
97:d2:2e:a8:48:f1:61:fc:b9:44:42:e0:f8:19:5b:
21:6e:4e:c8:07:73:c9:c7:eb:fd:fa:78:6d:61:ae:
9f:4c:ad:93:4c:c3:b5:67:12:3a:e3:b0:60:e8:9e:
96:1a:bb:72:9a:37:e7:9c:c3:0b:e2:87:34:cf:df:
cb:c5:6b:fd:7c:ac:83:66:12:69:74:e3:70:a1:eb:
3b:53:57:43:d8:25:13:15:83:a9:19:aa:a2:b8:59:
b9:a9:fe:ee:65:45:ab:a7:4e:89:95:48:33:0d:74:
34:14:2b:b4:17:03:35:1c:33:f9:32:13:8e:92:ee:
28:aa:d7:74:ae:c2:df:ac:70:20:8c:52:9d:69:58:
29:dd:82:76:5b:94:f0:b6:b2:23:c8:f2:0b:36:ad:
fb:7e:e5:83:d5:73:af:00:f0:a8:b0:15:f8:2f:64:
88:f9:71:05:8f:ca:20:c5:8a:7d:89:1b:c5:7d:11:
70:1c:bb:a4:e3:33:33:8c:11:61:d2:3e:15:a8:be:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:D4:68:2D:5E:6E:27:8C:1C:0E:54:D1:63:E3:A0:81:1E:D4:7C
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:c3:0b:f3:aa:c9:56:3a:c3:df:95:33:9a:79:9e:74:17:
be:2f:79:21:b5:5a:1c:47:47:89:93:65:99:00:64:6b:73:72:
8d:ee:76:ef:b0:66:df:6b:99:87:60:7c:81:42:f5:93:a7:36:
e3:02:f3:79:a3:8c:ab:86:b4:88:ef:e3:51:2a:93:94:53:1f:
da:24:ef:ce:be:7f:ad:0a:aa:78:86:58:3c:5e:e1:c6:1f:d7:
47:3d:ba:25:8e:f2:de:9e:9c:f4:72:bc:e1:c1:eb:d6:38:9e:
d9:5a:5c:19:cc:95:07:8c:70:9b:d7:33:e3:66:a2:2c:57:04:
e3:3f:f8:ab:0a:f9:4b:55:4d:f6:14:4f:44:0a:15:48:77:ab:
f5:0b:2a:d2:37:a2:ed:69:f8:74:76:64:2b:84:d9:2c:09:39:
17:7e:4f:78:e5:00:6c:e7:b9:63:ae:8c:4f:f2:28:99:c3:36:
08:28:25:54:ac:87:29:ab:ad:17:e6:8d:71:53:13:22:17:22:
5d:1f:6a:ea:57:48:c6:f3:b7:05:f7:94:27:bf:1a:0c:9f:5a:
27:4f:42:96:5f:bd:24:1f:08:ce:f0:62:65:5a:bb:6d:f5:0a:
bd:c5:f6:25:46:d5:d3:99:23:51:49:37:c6:da:54:91:40:46:
93:af:34:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcWjV8fZyvO96nk2/teIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjUxMDE5MTEwMTM1WhcNMjUxMDIwMTEwMTM1WjAzMTEwLwYDVQQD
EyhjNTdhZDQ2ODJkNWU2ZTI3OGMxYzBlNTRkMTYzZTNhMDgxMWVkNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvsb72PM2menYgUF9MA0KbdhXxT/
WnE9O5Ff+TTP7dbTd7XBNc1BtaNvLnqSp0EGVgMVLaPeurkzcmiX0i6oSPFh/LlE
QuD4GVshbk7IB3PJx+v9+nhtYa6fTK2TTMO1ZxI647Bg6J6WGrtymjfnnMML4oc0
z9/LxWv9fKyDZhJpdONwoes7U1dD2CUTFYOpGaqiuFm5qf7uZUWrp06JlUgzDXQ0
FCu0FwM1HDP5MhOOku4oqtd0rsLfrHAgjFKdaVgp3YJ2W5TwtrIjyPILNq37fuWD
1XOvAPCosBX4L2SI+XEFj8ogxYp9iRvFfRFwHLuk4zMzjBFh0j4VqL4GXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV61GgtXm4njBwOVNFj46CBHtR8MB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJnDC/Oq
yVY6w9+VM5p5nnQXvi95IbVaHEdHiZNlmQBka3Nyje5277Bm32uZh2B8gUL1k6c2
4wLzeaOMq4a0iO/jUSqTlFMf2iTvzr5/rQqqeIZYPF7hxh/XRz26JY7y3p6c9HK8
4cHr1jie2VpcGcyVB4xwm9cz42aiLFcE4z/4qwr5S1VN9hRPRAoVSHer9Qsq0jei
7Wn4dHZkK4TZLAk5F35PeOUAbOe5Y66MT/IomcM2CCglVKyHKautF+aNcVMTIhci
XR9q6ldIxvO3BfeUJ78aDJ9aJ09Cll+9JB8IzvBiZVq7bfUKvcX2JUbV05kjUUk3
xtpUkUBGk680qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:55 2025 by rpki-client