
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: HM1lXtxppX5Bq8HfY+nXY/XqYv5q3vcBuvaB5AiomLY=
Subject key identifier: A9:CF:DE:71:E8:9D:CF:4E:7F:9B:EE:2F:2C:48:E0:02:15:D0:C6:5C
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0198D69839DB6227C6FD422E3C993D38DEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0ADD
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: oLVyTe66TcSgRgo/bkHsJ1rKsYjETV3AzRcddcGSXA8=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:39:db:62:27:c6:fd:42:2e:3c:99:3d:38:de:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=a9cfde71e89dcf4e7f9bee2f2c48e00215d0c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:18:eb:67:28:f1:62:b3:6c:88:c3:db:a7:
19:63:4f:7a:77:04:82:10:c0:de:85:80:ce:8b:37:
20:07:d1:94:41:ad:20:79:08:43:75:0c:37:2b:fb:
70:2d:0f:86:3c:ad:4a:3d:bc:ba:17:17:7b:6f:86:
88:f9:4b:87:76:49:08:97:5d:2b:75:ee:c4:17:e4:
63:73:b1:7c:5c:c5:5e:84:63:78:0b:3f:d1:00:ad:
84:4b:c9:70:f0:5d:ac:d6:1f:50:c9:46:fa:6e:fb:
ff:74:bf:87:16:e4:2f:0c:ce:cf:74:7c:c1:09:2a:
b3:cb:2a:c1:01:4c:25:fd:b5:88:fa:53:94:51:83:
e1:8e:b3:6e:81:e3:8c:8b:86:77:ab:3d:41:a4:32:
59:84:20:b5:cf:42:1e:e1:5a:91:28:4c:48:f5:3c:
01:36:41:24:85:45:7a:ac:ba:b5:1f:3e:68:71:23:
80:70:39:1e:f7:9e:37:dc:cc:b0:24:6d:b0:20:db:
a1:9e:44:65:f7:1e:12:84:29:1d:10:3f:3a:01:80:
c5:c8:fa:d6:e1:26:0f:e3:90:c2:cd:68:bb:62:91:
5e:f4:38:16:a9:1e:66:7f:57:27:a5:c5:e0:f2:cf:
b5:81:dd:e3:bb:05:1a:11:b5:4b:74:27:b7:f8:68:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:DE:71:E8:9D:CF:4E:7F:9B:EE:2F:2C:48:E0:02:15:D0:C6:5C
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f6:91:0c:55:61:f3:49:8c:8d:3f:ee:1b:87:23:b2:fa:31:
76:e3:96:37:d9:1c:c1:b0:90:b8:3c:bb:18:3c:43:05:0b:95:
59:1f:c7:f0:32:39:47:be:78:d8:21:f1:ce:dd:23:e4:e9:59:
31:50:b6:cc:d5:db:19:6f:45:f0:e8:4d:b1:40:8e:9c:4c:73:
d0:5a:ba:d7:7a:80:0a:5b:cc:c5:16:ac:0d:a1:0e:0a:f0:47:
57:28:99:5b:5f:74:7d:5f:53:29:ea:08:8d:be:fc:b4:9c:6d:
75:4f:a4:9d:7b:40:24:0d:ea:04:5d:22:c8:03:52:9c:a8:14:
5a:42:ee:7f:15:0c:b4:25:9c:70:27:0a:d4:1a:ff:1e:f8:17:
38:1f:34:88:2f:ec:3f:5d:9a:e7:83:23:0e:7c:28:ab:f8:1f:
2c:cf:83:b2:44:bf:a3:75:49:39:04:a3:07:e4:ef:9b:6a:13:
da:b3:95:27:60:31:08:4c:86:20:83:8a:c8:a7:93:5c:e9:1a:
d7:2f:60:60:2d:7c:87:ed:85:39:2e:2e:80:67:a0:a0:82:08:
d8:25:4c:cd:86:42:c7:3e:63:33:a0:fd:f0:57:21:f4:14:48:
48:21:c2:19:5d:8e:df:9c:a0:3a:c8:41:cc:70:81:66:23:e9:
8b:d1:95:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDnbYifG/UIuPJk9ON6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm
NjI1NTEwHhcNMjUwODIzMTEwMjM3WhcNMjUwODI0MTEwMjM3WjAzMTEwLwYDVQQD
EyhhOWNmZGU3MWU4OWRjZjRlN2Y5YmVlMmYyYzQ4ZTAwMjE1ZDBjNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj8Y62co8WKzbIjD26cZY096dwSC
EMDehYDOizcgB9GUQa0geQhDdQw3K/twLQ+GPK1KPby6Fxd7b4aI+UuHdkkIl10r
de7EF+Rjc7F8XMVehGN4Cz/RAK2ES8lw8F2s1h9QyUb6bvv/dL+HFuQvDM7PdHzB
CSqzyyrBAUwl/bWI+lOUUYPhjrNugeOMi4Z3qz1BpDJZhCC1z0Ie4VqRKExI9TwB
NkEkhUV6rLq1Hz5ocSOAcDke95433MywJG2wINuhnkRl9x4ShCkdED86AYDFyPrW
4SYP45DCzWi7YpFe9DgWqR5mf1cnpcXg8s+1gd3juwUaEbVLdCe3+Gg8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnP3nHonc9Of5vuLyxI4AIV0MZcMB8GA1UdIwQY
MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt
YzRjZTNlODA3M2RiLzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri
LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPaRDFVh
80mMjT/uG4cjsvoxduOWN9kcwbCQuDy7GDxDBQuVWR/H8DI5R7542CHxzt0j5OlZ
MVC2zNXbGW9F8OhNsUCOnExz0Fq613qAClvMxRasDaEOCvBHVyiZW190fV9TKeoI
jb78tJxtdU+knXtAJA3qBF0iyANSnKgUWkLufxUMtCWccCcK1Br/HvgXOB80iC/s
P12a54MjDnwoq/gfLM+DskS/o3VJOQSjB+Tvm2oT2rOVJ2AxCEyGIIOKyKeTXOka
1y9gYC18h+2FOS4ugGegoIII2CVMzYZCxz5jM6D98Fch9BRISCHCGV2O35ygOshB
zHCBZiPpi9GVNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:15 2025 by rpki-client