Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: slEclYAIl+Axx+D7vUHtc3kVaXsvNKjd2Co6UqLRb0E=
Subject key identifier: 89:25:A8:E8:61:FB:AF:59:39:EB:95:F5:97:69:27:35:16:59:C1:15
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0199FBEB318E59CDE8D636770D219D3A6FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 091E
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: d4S9jWR7LwFh10OnwPKceBEUtT4Zjz+cxKzVmM+hsj4=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:31:8e:59:cd:e8:d6:36:77:0d:21:9d:3a:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=8925a8e861fbaf5939eb95f5976927351659c115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:c7:2b:32:3a:e3:5e:c1:6b:e9:0e:47:2c:
00:f0:ef:2b:22:87:a9:e2:99:ef:7e:24:0e:54:91:
6e:6e:27:07:bc:2d:3b:99:33:30:af:a5:8c:67:22:
38:12:bf:a1:91:47:8a:5e:06:ac:62:e8:67:d8:32:
c2:27:03:7b:6a:cb:17:b7:89:ce:9e:c1:93:d6:99:
cc:f9:49:0a:eb:68:2c:82:68:67:90:5d:04:5e:4e:
d0:37:ba:2d:bd:62:ac:b4:78:8d:8a:e3:77:1c:18:
e7:10:45:d6:55:b6:de:28:ee:46:5b:b7:55:28:65:
63:ae:91:f1:7c:e9:13:8f:44:e5:98:1f:d7:23:8c:
ea:85:6d:b4:13:72:40:ce:c5:b5:8d:e1:14:67:34:
63:37:f4:8f:71:f3:bd:7c:f2:ef:93:aa:a4:77:8f:
81:c6:8c:a6:55:d6:3e:28:3d:76:b0:99:e0:ac:86:
a6:c5:e2:1c:0d:e2:10:b1:63:52:6e:d2:3e:ac:97:
09:62:91:71:f4:4d:5a:b3:6f:6c:46:a1:1e:2a:76:
6e:93:e2:03:e2:82:42:71:0c:a7:84:a2:92:5b:59:
ff:14:f9:9c:06:65:63:04:6a:bf:a3:6a:a9:36:25:
0b:95:8d:be:b2:be:99:f9:e4:61:53:ac:8f:d9:6e:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:A8:E8:61:FB:AF:59:39:EB:95:F5:97:69:27:35:16:59:C1:15
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:c7:aa:1e:8b:73:bb:d9:86:fb:44:44:60:85:11:b9:e1:
a6:f2:81:f7:f9:9a:6e:f6:da:91:1f:f2:cf:ca:65:fb:90:ca:
b9:0f:3f:7c:31:c0:a8:fa:19:03:82:d5:6f:77:f7:8c:0c:57:
7c:db:6b:ce:89:1f:fa:b6:15:48:03:fd:ee:db:8f:dd:c0:9b:
bd:f4:73:75:92:78:6d:4a:7f:cd:75:db:74:12:7a:08:bf:90:
96:3c:46:b4:b6:34:be:ea:bb:1f:be:db:f8:3a:7b:b6:0d:34:
22:83:5e:99:78:f2:cf:dd:b3:8e:6b:6c:3c:6d:44:5a:a0:96:
9a:97:10:29:48:5d:35:8d:83:b0:3c:42:10:32:cd:44:68:66:
d6:13:bb:81:ca:f1:3b:e3:8a:a9:64:09:32:18:1e:19:0f:9f:
b1:c1:c6:3e:52:14:5b:c9:ef:e4:e9:ab:b8:92:e0:7a:d6:84:
39:d4:ad:8b:38:0f:e2:f9:c7:a9:c7:14:99:61:8c:c6:7d:82:
63:e5:ab:64:81:6a:a4:35:72:a9:a7:72:0a:82:58:fd:9c:98:
6f:e6:5b:81:63:1d:12:28:52:aa:5b:ee:11:d5:f3:bf:9c:08:
ec:89:51:1f:29:1d:38:46:be:b2:09:fb:51:f1:7f:1a:25:3d:
e8:2a:62:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zGOWc3o1jZ3DSGdOm++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjcwMGVlYjA1Mjc0YjMxZGMxZGFmMzBjZDdjODEzMTBh
YjQ1MmQwHhcNMjUxMDE5MTAwMTU4WhcNMjUxMDIwMTAwMTU4WjAzMTEwLwYDVQQD
Eyg4OTI1YThlODYxZmJhZjU5MzllYjk1ZjU5NzY5MjczNTE2NTljMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqfHKzI6417Ba+kORywA8O8rIoep
4pnvfiQOVJFubicHvC07mTMwr6WMZyI4Er+hkUeKXgasYuhn2DLCJwN7assXt4nO
nsGT1pnM+UkK62gsgmhnkF0EXk7QN7otvWKstHiNiuN3HBjnEEXWVbbeKO5GW7dV
KGVjrpHxfOkTj0TlmB/XI4zqhW20E3JAzsW1jeEUZzRjN/SPcfO9fPLvk6qkd4+B
xoymVdY+KD12sJngrIamxeIcDeIQsWNSbtI+rJcJYpFx9E1as29sRqEeKnZuk+ID
4oJCcQynhKKSW1n/FPmcBmVjBGq/o2qpNiULlY2+sr6Z+eRhU6yP2W7X6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIklqOhh+69ZOeuV9ZdpJzUWWcEVMB8GA1UdIwQY
MBaAFNj3AO6wUnSzHcHa8wzXyBMQq0UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzct
MzcxYjkwNzQ4ODdmLzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzctMzcxYjkwNzQ4ODdm
LzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPLHqh6L
c7vZhvtERGCFEbnhpvKB9/mabvbakR/yz8pl+5DKuQ8/fDHAqPoZA4LVb3f3jAxX
fNtrzokf+rYVSAP97tuP3cCbvfRzdZJ4bUp/zXXbdBJ6CL+QljxGtLY0vuq7H77b
+Dp7tg00IoNemXjyz92zjmtsPG1EWqCWmpcQKUhdNY2DsDxCEDLNRGhm1hO7gcrx
O+OKqWQJMhgeGQ+fscHGPlIUW8nv5OmruJLgetaEOdStizgP4vnHqccUmWGMxn2C
Y+WrZIFqpDVyqadyCoJY/ZyYb+ZbgWMdEihSqlvuEdXzv5wI7IlRHykdOEa+sgn7
UfF/GiU96CpiRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:54 2025 by rpki-client