Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: mtOQRYZ7i+hFKWkCd8pJoqA4mTPWWgYPpM8skzmElAI=
Subject key identifier: 4E:00:39:5F:24:77:F4:03:50:E3:93:B6:E7:32:D6:13:4E:6C:F6:2B
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 0198D5160611440691924F227AB4D53AC642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1125
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: FKZNIA2tQuXk+YxtqKtHL5KWjQ2epl3m+2nfCgY0wB0=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:06:11:44:06:91:92:4f:22:7a:b4:d5:3a:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=4e00395f2477f40350e393b6e732d6134e6cf62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:bd:a8:e6:64:b2:0a:3a:a3:8b:4d:eb:43:
90:64:19:ea:c2:27:7d:e9:2f:c6:db:4e:72:d5:d7:
2c:ac:c8:31:44:08:d7:89:6c:8c:b4:5e:89:8f:b9:
a1:f9:de:c0:f0:3a:1c:01:7b:2f:1d:b7:14:a2:26:
b1:a0:09:3a:5f:ca:d8:e3:29:5d:db:c9:fc:8b:f3:
45:a2:d0:f6:11:51:7e:60:e4:f8:43:0e:62:5a:1d:
05:e1:b5:6f:9f:47:d5:38:33:3b:41:a1:06:12:c4:
af:82:e5:ab:9f:ef:83:bc:7e:ac:c7:a2:de:89:d7:
32:65:c1:a6:b7:cf:44:32:56:2a:a4:25:8f:03:69:
c8:65:5f:9c:dc:21:fe:1d:0a:f9:1e:db:69:6e:c5:
aa:9d:27:94:89:d8:cd:5a:67:c9:4e:b4:23:dc:37:
05:4d:f0:52:2b:22:03:d8:7f:e5:4c:fb:de:24:e3:
f6:d3:7a:85:83:a7:03:70:45:c1:4b:80:cd:14:92:
ad:f1:d8:71:89:69:d0:d9:73:b3:ea:cf:6a:9d:ca:
ef:71:cf:cc:3f:0d:01:71:f0:e8:f0:0f:88:bf:66:
95:60:ca:ee:24:d7:9b:22:0f:93:b5:41:ab:74:39:
2d:3d:c0:d6:be:7f:7d:76:ee:58:ac:40:79:8a:33:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:00:39:5F:24:77:F4:03:50:E3:93:B6:E7:32:D6:13:4E:6C:F6:2B
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:90:7e:2e:dc:8a:05:7e:f7:fb:ff:fb:6b:ad:5d:c8:21:6f:
62:b1:c7:1a:91:a4:bc:ba:e6:d2:32:5f:93:41:88:a4:ec:70:
df:01:a4:6f:b8:06:69:d9:2f:77:74:34:81:3d:28:95:ac:f1:
85:6b:0a:09:fa:36:ee:67:2e:0e:b9:32:66:d6:98:d6:36:07:
1c:f4:ac:27:f6:61:fe:f8:df:87:c4:ce:28:65:ec:f3:62:ac:
77:62:91:15:49:93:ad:6b:07:31:d3:b2:b8:f4:4f:3e:4a:7f:
39:83:1a:bb:d6:30:ca:48:9f:2b:58:a6:9d:b8:17:7c:d0:c1:
39:4f:4c:6d:56:1e:fc:0d:9e:bc:17:45:f7:f0:bd:5f:ff:13:
1a:08:7c:bb:84:e7:b0:98:51:d7:90:9e:6d:4e:98:a5:d1:ea:
9d:dc:f0:02:53:0a:73:c9:72:2f:94:4a:f4:c4:6c:40:ac:ff:
ab:3d:ad:46:f4:45:bb:e5:f8:fc:1b:09:f5:91:72:05:bf:e0:
63:ee:c7:64:5c:2a:4b:9a:7f:ab:c8:ce:3e:9e:96:a3:60:39:
3c:47:46:d8:fc:4c:8c:00:af:d6:b2:8e:7f:93:fc:a1:2f:4d:
a8:ee:c5:3a:80:2a:6a:e4:52:73:9d:84:2a:72:73:bf:68:57:
2e:1a:c1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgYRRAaRkk8ierTVOsZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjUwODIzMDQwMDQ2WhcNMjUwODI0MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZTAwMzk1ZjI0NzdmNDAzNTBlMzkzYjZlNzMyZDYxMzRlNmNmNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/O9qOZksgo6o4tN60OQZBnqwid9
6S/G205y1dcsrMgxRAjXiWyMtF6Jj7mh+d7A8DocAXsvHbcUoiaxoAk6X8rY4yld
28n8i/NFotD2EVF+YOT4Qw5iWh0F4bVvn0fVODM7QaEGEsSvguWrn++DvH6sx6Le
idcyZcGmt89EMlYqpCWPA2nIZV+c3CH+HQr5HttpbsWqnSeUidjNWmfJTrQj3DcF
TfBSKyID2H/lTPveJOP203qFg6cDcEXBS4DNFJKt8dhxiWnQ2XOz6s9qncrvcc/M
Pw0BcfDo8A+Iv2aVYMruJNebIg+TtUGrdDktPcDWvn99du5YrEB5ijM3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4AOV8kd/QDUOOTtucy1hNObPYrMB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupB+LtyK
BX73+//7a61dyCFvYrHHGpGkvLrm0jJfk0GIpOxw3wGkb7gGadkvd3Q0gT0olazx
hWsKCfo27mcuDrkyZtaY1jYHHPSsJ/Zh/vjfh8TOKGXs82Ksd2KRFUmTrWsHMdOy
uPRPPkp/OYMau9YwykifK1imnbgXfNDBOU9MbVYe/A2evBdF9/C9X/8TGgh8u4Tn
sJhR15CebU6YpdHqndzwAlMKc8lyL5RK9MRsQKz/qz2tRvRFu+X4/BsJ9ZFyBb/g
Y+7HZFwqS5p/q8jOPp6Wo2A5PEdG2PxMjACv1rKOf5P8oS9NqO7FOoAqauRSc52E
KnJzv2hXLhrBcA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:20 2025 by rpki-client