Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: 56O+J/XqRBx/AGaxe6gJG8dy8xlxyiWNSmVMIqO8LpY=
Subject key identifier: D1:CE:90:82:6D:36:A7:DF:88:9B:FC:65:90:2B:BF:CA:FD:4E:6C:A6
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 0198D65F3000BBBC3DEC5B53D8AC0B75D7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 060A
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: GEPPfIDEIV2V33s5ZZ+1R3U58lodyDtA12Bw6hlk/3w=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:30:00:bb:bc:3d:ec:5b:53:d8:ac:0b:75:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=d1ce90826d36a7df889bfc65902bbfcafd4e6ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:bf:44:78:7a:ba:2c:cb:13:e6:93:00:da:
b4:46:cd:db:c2:e3:3c:0f:45:c3:9a:4c:f6:40:e9:
00:15:7e:96:b0:e9:b8:c6:f9:f7:e8:8c:68:f6:dd:
1e:6b:3f:2a:08:45:c4:30:aa:7c:18:6d:8c:27:2f:
0d:e9:dc:b7:79:aa:b4:b5:19:8a:8b:cd:3c:c3:33:
22:04:4e:9b:33:ad:92:9e:9c:bc:fc:02:06:64:4c:
d7:0a:1d:46:c6:f4:cb:11:18:f3:00:b6:4c:8b:51:
39:f0:af:30:31:2b:cd:ad:ff:ff:d5:a9:eb:7d:c7:
48:2a:81:7b:45:e1:72:9e:c7:83:d4:26:bb:43:66:
73:49:fc:f8:36:b9:78:36:87:15:32:22:94:5c:40:
df:34:e7:38:81:15:60:dd:1f:28:ba:30:c9:86:c6:
68:84:ee:ad:0f:0f:78:1b:50:04:69:e9:0d:27:6c:
44:49:9b:0f:7a:f8:e0:33:c5:17:9b:30:fc:af:41:
a5:5f:b0:56:e0:dc:41:27:bf:e4:c8:9f:58:5e:75:
d6:97:ae:54:0e:4a:ac:64:3a:5d:00:f3:90:20:78:
84:00:4d:15:b4:00:3d:d5:ed:7b:97:4a:dc:86:e8:
6d:b9:a7:52:1f:dc:7d:67:10:9e:e3:a4:32:cc:dd:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:90:82:6D:36:A7:DF:88:9B:FC:65:90:2B:BF:CA:FD:4E:6C:A6
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:1e:c8:16:87:5f:40:b6:0f:a4:c7:27:68:ec:1b:c5:71:
4c:dc:2f:39:34:35:e8:d4:51:cb:41:ec:95:92:f5:b8:ff:1d:
f3:d4:a8:a2:41:20:08:73:b1:51:b9:6e:2f:c0:22:bf:26:ae:
c6:60:9d:12:a3:22:72:77:5e:c7:b2:5c:d2:65:5f:0a:2b:d6:
35:63:29:83:37:11:a3:fe:e7:00:bc:31:e5:04:39:da:0a:30:
71:27:53:55:15:0c:a3:d7:f6:39:20:50:8f:78:14:62:61:6f:
d1:62:41:db:4e:18:2e:99:e4:67:f8:0c:ce:40:94:bd:9c:de:
80:0c:1f:a6:92:ee:d3:d6:ee:01:57:2d:a8:be:d3:8f:10:dc:
b3:2e:4b:6c:09:39:25:b0:35:13:8d:cf:42:9c:d6:03:87:94:
8f:ea:24:08:81:0c:97:c9:86:cb:b8:93:60:75:22:78:ba:e3:
78:80:20:87:f3:ec:f4:82:a0:85:14:35:55:1c:ad:7f:17:e1:
a8:dd:57:dd:c7:ff:f5:d9:7d:af:d9:b8:35:38:67:24:d8:5e:
53:0d:0e:9d:f4:8a:26:64:92:a6:6b:ec:10:5d:1c:c2:cc:53:
86:4e:c3:fa:80:5d:48:05:07:b1:b8:bf:1d:bb:e5:83:a4:67:
62:cb:97:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzAAu7w97FtT2KwLddfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjUwODIzMTAwMDE5WhcNMjUwODI0MTAwMDE5WjAzMTEwLwYDVQQD
EyhkMWNlOTA4MjZkMzZhN2RmODg5YmZjNjU5MDJiYmZjYWZkNGU2Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQS/RHh6uizLE+aTANq0Rs3bwuM8
D0XDmkz2QOkAFX6WsOm4xvn36Ixo9t0eaz8qCEXEMKp8GG2MJy8N6dy3eaq0tRmK
i808wzMiBE6bM62Snpy8/AIGZEzXCh1GxvTLERjzALZMi1E58K8wMSvNrf//1anr
fcdIKoF7ReFynseD1Ca7Q2ZzSfz4Nrl4NocVMiKUXEDfNOc4gRVg3R8oujDJhsZo
hO6tDw94G1AEaekNJ2xESZsPevjgM8UXmzD8r0GlX7BW4NxBJ7/kyJ9YXnXWl65U
DkqsZDpdAPOQIHiEAE0VtAA91e17l0rchuhtuadSH9x9ZxCe46QyzN1bAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHOkIJtNqffiJv8ZZArv8r9TmymMB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD8eyBaH
X0C2D6THJ2jsG8VxTNwvOTQ16NRRy0HslZL1uP8d89SookEgCHOxUbluL8Aivyau
xmCdEqMicndex7Jc0mVfCivWNWMpgzcRo/7nALwx5QQ52gowcSdTVRUMo9f2OSBQ
j3gUYmFv0WJB204YLpnkZ/gMzkCUvZzegAwfppLu09buAVctqL7TjxDcsy5LbAk5
JbA1E43PQpzWA4eUj+okCIEMl8mGy7iTYHUieLrjeIAgh/Ps9IKghRQ1VRytfxfh
qN1X3cf/9dl9r9m4NThnJNheUw0OnfSKJmSSpmvsEF0cwsxThk7D+oBdSAUHsbi/
Hbvlg6RnYsuXOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:08:29 2025 by rpki-client