Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: q5gZUsY3xjwAx3DpdckHv6j8NN4xNqjh0dYw5g1dlQI=
Subject key identifier: 26:9F:A8:95:14:D0:7A:0A:A7:EF:10:68:FE:F8:A0:D5:73:A2:6F:CA
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 0198D660CB0BB8321041DE25C51BFC8649D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0898
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: IoTkZINvVazujqvXu8+0t+FG08DfHE+syw9tb67TlOk=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cb:0b:b8:32:10:41:de:25:c5:1b:fc:86:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=269fa89514d07a0aa7ef1068fef8a0d573a26fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:6b:27:e4:91:8f:e4:f8:e3:5e:22:52:0e:
5e:d0:08:c1:06:37:ff:f0:2a:fb:80:d4:15:e6:fa:
e1:02:51:a0:95:f8:7d:99:af:a3:e4:0c:65:3c:2d:
42:de:34:96:ad:4b:30:70:b3:05:b1:5c:3a:68:ce:
6b:25:d4:04:00:ca:da:c0:70:2a:4a:56:1a:93:05:
cd:30:54:bf:8f:bf:32:43:22:82:f6:93:19:37:49:
71:af:12:c6:ad:72:d1:62:2d:c3:ec:ed:13:df:b2:
5b:2a:77:30:f2:46:7c:8d:b7:46:82:0a:08:12:59:
5d:cf:90:31:7c:eb:20:d7:da:11:8d:94:b5:ea:60:
78:55:ff:2b:80:a3:53:70:f7:07:77:26:f8:ba:d5:
9b:6e:75:d8:f6:22:09:58:51:cc:67:9d:5a:0d:29:
bf:7f:e6:cf:01:5f:3c:e7:9e:96:35:79:36:67:3c:
20:5e:87:04:db:89:95:10:fa:0d:db:8c:b5:47:67:
47:fc:da:5a:b9:94:c0:f7:e1:33:77:23:e1:2b:ef:
6f:bb:ca:a8:1c:e5:e6:14:a9:8f:3e:28:76:ab:04:
23:de:54:b4:17:8d:5e:e5:c8:bb:13:e3:65:99:6a:
26:55:16:48:fe:16:fd:6f:c7:2e:62:76:fc:ed:09:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:A8:95:14:D0:7A:0A:A7:EF:10:68:FE:F8:A0:D5:73:A2:6F:CA
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8e:e8:d9:29:0b:c6:86:5d:ff:38:1c:f5:95:50:34:e4:85:
3f:7d:99:a5:09:f1:4a:eb:d2:e7:7f:ac:c3:6d:89:26:5c:b7:
ae:7c:b8:54:5f:6a:1c:6d:82:dc:68:f0:57:a4:7d:77:66:9e:
41:50:ce:db:38:5d:85:8a:4c:d8:31:11:e4:79:4c:1c:34:f0:
e6:52:e3:80:3a:2c:a7:91:35:58:4a:8f:3c:82:b3:9e:34:e6:
1c:99:9d:02:2d:8d:2f:96:de:5f:93:93:f1:ae:f3:00:8c:73:
30:36:09:62:a5:e4:d8:6c:c5:0a:0d:80:bc:80:92:ce:55:80:
c2:62:01:12:3a:00:5d:ba:52:7d:c1:6d:a7:cb:bd:24:82:e8:
50:7e:df:8c:86:26:5d:91:06:48:b2:94:94:b3:be:15:fd:f2:
dc:99:47:8b:32:1b:ba:b3:b3:8a:09:b3:08:9e:f6:dc:32:e7:
0d:ee:79:48:d5:95:36:54:02:1b:6e:7b:b2:1f:e4:a9:de:2a:
83:bc:18:a3:f0:65:e4:db:a9:01:df:54:4e:a8:64:52:0e:af:
73:dd:ea:15:4b:15:10:bf:ca:dd:2b:11:93:88:03:00:82:b5:
08:c0:cd:bf:3c:84:12:08:c4:4b:4e:3b:c3:db:08:7d:ed:68:
a7:04:5f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMsLuDIQQd4lxRv8hknYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4
MzRhMGIwHhcNMjUwODIzMTAwMjA0WhcNMjUwODI0MTAwMjA0WjAzMTEwLwYDVQQD
EygyNjlmYTg5NTE0ZDA3YTBhYTdlZjEwNjhmZWY4YTBkNTczYTI2ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQprJ+SRj+T4414iUg5e0AjBBjf/
8Cr7gNQV5vrhAlGglfh9ma+j5AxlPC1C3jSWrUswcLMFsVw6aM5rJdQEAMrawHAq
SlYakwXNMFS/j78yQyKC9pMZN0lxrxLGrXLRYi3D7O0T37JbKncw8kZ8jbdGggoI
Elldz5AxfOsg19oRjZS16mB4Vf8rgKNTcPcHdyb4utWbbnXY9iIJWFHMZ51aDSm/
f+bPAV88556WNXk2ZzwgXocE24mVEPoN24y1R2dH/NpauZTA9+EzdyPhK+9vu8qo
HOXmFKmPPih2qwQj3lS0F41e5ci7E+NlmWomVRZI/hb9b8cuYnb87QndiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCafqJUU0HoKp+8QaP74oNVzom/KMB8GA1UdIwQY
MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt
MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3
LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAno7o2SkL
xoZd/zgc9ZVQNOSFP32ZpQnxSuvS53+sw22JJly3rny4VF9qHG2C3GjwV6R9d2ae
QVDO2zhdhYpM2DER5HlMHDTw5lLjgDosp5E1WEqPPIKznjTmHJmdAi2NL5beX5OT
8a7zAIxzMDYJYqXk2GzFCg2AvICSzlWAwmIBEjoAXbpSfcFtp8u9JILoUH7fjIYm
XZEGSLKUlLO+Ff3y3JlHizIburOzigmzCJ723DLnDe55SNWVNlQCG257sh/kqd4q
g7wYo/Bl5NupAd9UTqhkUg6vc93qFUsVEL/K3SsRk4gDAIK1CMDNvzyEEgjES047
w9sIfe1opwRftg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:19 2025 by rpki-client