Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: SCDnXbSPL21yAmbtzcs5piPV+QcAmbkauqvSLj1GSN4=
Subject key identifier: DA:94:A2:31:CA:9F:3A:8A:B1:98:BE:C0:13:DA:3F:B9:53:54:D1:B6
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019A03A4627A0E1980DCF762AA771FB7F75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 06A6
Signing time: Mon 20 Oct 2025 22:01:35 +0000
Manifest this update: Mon 20 Oct 2025 22:01:35 +0000
Manifest next update: Tue 21 Oct 2025 22:01:35 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: ++XrV6USXHYxSLF0hpy3ykyPquF8yTpEg3YXJWuv/ss=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:62:7a:0e:19:80:dc:f7:62:aa:77:1f:b7:f7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Oct 20 22:01:35 2025 GMT
Not After : Oct 21 22:01:35 2025 GMT
Subject: CN=da94a231ca9f3a8ab198bec013da3fb95354d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:db:15:06:fa:e7:11:17:9b:fd:a8:95:79:
d4:74:dd:c7:a1:08:0c:6f:9b:98:d1:56:bc:89:f5:
95:68:03:dd:72:7b:7a:97:f3:1c:74:59:c2:4d:13:
95:37:38:2e:93:ef:cd:1a:5e:74:5f:4e:02:bc:31:
35:be:a9:9b:71:28:bc:e5:c9:c3:fa:5b:5c:41:af:
af:df:94:46:54:22:aa:9d:1e:14:8d:7f:5d:78:a1:
ac:89:1a:32:85:3a:fb:27:0c:80:1f:af:e9:73:09:
5e:8d:f1:77:ee:6e:34:20:c4:c8:0d:5b:a9:46:7c:
f9:14:97:ba:5b:12:36:a1:80:9b:b5:22:28:a2:c8:
e1:f6:bc:13:cd:d8:84:71:b8:8d:1d:ce:49:48:d6:
19:0a:35:dc:b4:9e:66:14:48:f3:b3:03:af:62:e9:
d7:b2:af:0b:08:17:ea:b1:0d:ff:de:1f:d9:70:ec:
e1:1c:73:7b:1c:78:23:ec:d6:f3:fa:8f:79:77:78:
67:0a:31:05:a9:f2:ae:1f:63:84:a7:b8:6d:8b:76:
f5:3a:96:c8:99:eb:10:e5:fe:c0:cb:4e:ea:86:e2:
c0:21:bc:b8:84:e8:49:74:e6:6f:97:fb:61:35:b3:
8c:3c:3e:6f:08:8e:fb:bf:11:14:ce:97:39:d6:c2:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:A2:31:CA:9F:3A:8A:B1:98:BE:C0:13:DA:3F:B9:53:54:D1:B6
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:78:af:93:20:08:79:c8:81:fb:c5:1a:f1:6a:d3:30:62:ea:
fc:28:d6:c4:4d:fa:b8:f0:1e:06:be:34:4d:6a:86:77:c6:70:
65:d9:71:cc:8b:ac:6c:68:6e:e1:b7:d7:d0:bb:37:49:40:79:
21:0b:64:d7:1f:8f:0c:7d:b1:a5:46:92:70:1a:32:d9:02:f1:
3d:52:76:41:d6:28:58:00:df:55:5f:58:fb:6b:b6:fa:52:b5:
d9:50:8f:d6:7f:5e:dc:a4:a5:ea:bd:2c:f2:d1:db:03:72:f7:
d3:3f:c2:19:56:16:83:b1:2a:4b:81:43:d1:63:2f:c2:cd:af:
44:cf:32:d1:66:a4:12:76:7b:da:d4:27:be:c5:6c:91:c2:06:
81:2b:d9:cd:3a:bf:5c:5b:54:30:05:58:21:0f:eb:05:46:85:
f0:c9:1a:25:4d:21:80:b3:cd:ca:f8:eb:95:22:01:56:7f:01:
d0:c4:fb:a8:d3:a1:c5:07:70:ba:88:9e:3f:9b:20:53:f8:aa:
e6:39:bd:e7:d2:61:21:8a:dc:3a:a2:07:da:37:b2:5c:0b:5f:
90:c6:69:8a:35:a2:ff:f6:0e:d2:fb:be:93:13:02:94:36:f7:
72:74:5f:bc:8e:59:37:74:33:10:05:b9:8a:d1:bf:7b:73:0a:
ae:25:17:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpGJ6DhmA3Pdiqncft/deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjUxMDIwMjIwMTM1WhcNMjUxMDIxMjIwMTM1WjAzMTEwLwYDVQQD
EyhkYTk0YTIzMWNhOWYzYThhYjE5OGJlYzAxM2RhM2ZiOTUzNTRkMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR7bFQb65xEXm/2olXnUdN3HoQgM
b5uY0Va8ifWVaAPdcnt6l/McdFnCTROVNzguk+/NGl50X04CvDE1vqmbcSi85cnD
+ltcQa+v35RGVCKqnR4UjX9deKGsiRoyhTr7JwyAH6/pcwlejfF37m40IMTIDVup
Rnz5FJe6WxI2oYCbtSIoosjh9rwTzdiEcbiNHc5JSNYZCjXctJ5mFEjzswOvYunX
sq8LCBfqsQ3/3h/ZcOzhHHN7HHgj7Nbz+o95d3hnCjEFqfKuH2OEp7hti3b1OpbI
mesQ5f7Ay07qhuLAIby4hOhJdOZvl/thNbOMPD5vCI77vxEUzpc51sIf8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqUojHKnzqKsZi+wBPaP7lTVNG2MB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnivkyAI
eciB+8Ua8WrTMGLq/CjWxE36uPAeBr40TWqGd8ZwZdlxzIusbGhu4bfX0Ls3SUB5
IQtk1x+PDH2xpUaScBoy2QLxPVJ2QdYoWADfVV9Y+2u2+lK12VCP1n9e3KSl6r0s
8tHbA3L30z/CGVYWg7EqS4FD0WMvws2vRM8y0WakEnZ72tQnvsVskcIGgSvZzTq/
XFtUMAVYIQ/rBUaF8MkaJU0hgLPNyvjrlSIBVn8B0MT7qNOhxQdwuoieP5sgU/iq
5jm959JhIYrcOqIH2jeyXAtfkMZpijWi//YO0vu+kxMClDb3cnRfvI5ZN3QzEAW5
itG/e3MKriUXtA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:45 2025 by rpki-client