Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: f9aZqLqbutejsPdoS+ug4+jLWqN86kz9ybCvsKP7IyI=
Subject key identifier: 0E:5D:99:0B:2F:4E:29:CE:8B:88:0D:8B:DE:38:44:A6:53:08:A5:13
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 0198D697EA9C80947804963C5C28F348AF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 05F9
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: p3YB55fUvt0FWmRpqv2i+xd0BK/XKxNfXRb0piIve9Q=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ea:9c:80:94:78:04:96:3c:5c:28:f3:48:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=0e5d990b2f4e29ce8b880d8bde3844a65308a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:4d:da:e3:e9:49:f1:fc:bb:29:99:bc:e4:
e4:b8:bc:4a:86:da:73:6a:3b:62:cc:a7:1b:13:85:
2d:f6:d9:fe:39:2a:f0:dd:e5:94:42:b3:fc:65:77:
b0:86:6d:8b:0e:90:38:82:ea:7f:82:fb:d2:c3:5e:
db:4a:67:89:02:b5:72:5b:2c:d1:4b:83:71:2b:0a:
ef:5e:8b:b8:6d:eb:4e:1f:41:be:00:1d:7d:05:d9:
91:e6:69:80:38:b2:34:d6:59:62:e4:c3:ef:61:08:
a8:14:ad:6a:61:c3:e3:63:b0:c8:33:44:4a:77:f1:
3c:fa:7f:61:c8:36:2c:2d:d3:56:0f:a7:10:d0:a1:
1b:f7:7f:e4:58:8d:6c:9c:d2:e5:c5:ff:43:c8:49:
4e:66:e4:fc:12:07:c4:fa:49:32:61:cf:1d:5a:43:
4c:5e:f0:47:38:11:3b:84:39:b2:f9:10:9b:68:69:
d9:50:3a:35:4a:7b:f3:f0:6f:06:a2:4a:56:94:66:
d0:c5:49:9e:15:a3:27:30:01:47:b4:50:28:b3:6e:
62:cb:2d:65:62:ca:3f:57:eb:25:94:d6:b2:a2:6b:
0c:f9:c3:99:ff:58:e1:ef:e4:19:d5:ac:d8:cc:64:
56:0d:9f:c7:07:fa:70:fe:b2:5a:8e:26:dd:f1:42:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:99:0B:2F:4E:29:CE:8B:88:0D:8B:DE:38:44:A6:53:08:A5:13
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:f9:2d:5a:5e:a6:38:c3:f2:d8:f3:8a:c5:86:55:fc:d6:
dd:15:d2:cc:17:1f:22:97:cb:e0:3a:8d:9c:e6:3a:19:70:a0:
0c:00:e5:c7:7f:56:bb:42:18:9a:f1:08:38:6e:ea:93:89:c2:
46:27:d5:bf:73:69:42:43:a7:ca:37:47:6c:b8:df:f1:4d:f0:
08:40:6e:04:c0:59:22:e8:c3:a1:ca:13:fc:c9:7d:db:e6:c0:
8a:95:36:c5:b2:fa:7a:c1:55:59:c3:92:31:8c:3e:14:ca:56:
19:a8:54:04:c4:9e:8d:9e:24:68:2f:a0:76:c2:aa:46:04:45:
47:66:4f:e6:4b:7e:44:65:59:7e:0e:80:99:c7:0d:80:76:cb:
8a:1a:40:9e:a3:76:24:c3:04:80:c8:d2:18:f6:42:fe:25:8a:
a2:11:8d:54:16:9c:26:d7:f4:63:7e:a0:71:55:13:d7:55:c6:
b5:f4:de:44:8d:a5:fd:08:d9:3a:c9:dd:8c:49:55:42:a6:af:
e9:0a:dd:91:d2:e4:73:8a:ac:0e:e6:ab:77:8b:cb:cf:3b:0f:
b7:c3:03:f8:61:ad:88:33:42:5b:b2:80:e9:59:e5:28:38:3c:
c2:8f:06:b1:68:8e:d4:55:3c:2a:cb:a8:8f:2d:12:0b:4d:cc:
7b:36:ad:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl+qcgJR4BJY8XCjzSK8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjUwODIzMTEwMjE2WhcNMjUwODI0MTEwMjE2WjAzMTEwLwYDVQQD
EygwZTVkOTkwYjJmNGUyOWNlOGI4ODBkOGJkZTM4NDRhNjUzMDhhNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwFN2uPpSfH8uymZvOTkuLxKhtpz
ajtizKcbE4Ut9tn+OSrw3eWUQrP8ZXewhm2LDpA4gup/gvvSw17bSmeJArVyWyzR
S4NxKwrvXou4betOH0G+AB19BdmR5mmAOLI01lli5MPvYQioFK1qYcPjY7DIM0RK
d/E8+n9hyDYsLdNWD6cQ0KEb93/kWI1snNLlxf9DyElOZuT8EgfE+kkyYc8dWkNM
XvBHOBE7hDmy+RCbaGnZUDo1Snvz8G8GokpWlGbQxUmeFaMnMAFHtFAos25iyy1l
Yso/V+sllNayomsM+cOZ/1jh7+QZ1azYzGRWDZ/HB/pw/rJajibd8UK1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5dmQsvTinOi4gNi944RKZTCKUTMB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUP5LVpe
pjjD8tjzisWGVfzW3RXSzBcfIpfL4DqNnOY6GXCgDADlx39Wu0IYmvEIOG7qk4nC
RifVv3NpQkOnyjdHbLjf8U3wCEBuBMBZIujDocoT/Ml92+bAipU2xbL6esFVWcOS
MYw+FMpWGahUBMSejZ4kaC+gdsKqRgRFR2ZP5kt+RGVZfg6AmccNgHbLihpAnqN2
JMMEgMjSGPZC/iWKohGNVBacJtf0Y36gcVUT11XGtfTeRI2l/QjZOsndjElVQqav
6QrdkdLkc4qsDuard4vLzzsPt8MD+GGtiDNCW7KA6VnlKDg8wo8GsWiO1FU8Ksuo
jy0SC03Mezat1A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:33 2025 by rpki-client