Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: fHNicTsPQPbQj12PqOXe7vjCMARu0+7ARfYjkmZmg/s=
Subject key identifier: 39:C6:2E:4C:EF:4F:9A:EE:03:36:DE:75:94:FD:F0:1F:BF:DF:D4:97
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0199FF9034B41BB7508AE7A5275A5DB5DEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 0353
Signing time: Mon 20 Oct 2025 03:01:04 +0000
Manifest this update: Mon 20 Oct 2025 03:01:04 +0000
Manifest next update: Tue 21 Oct 2025 03:01:04 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: GcyNiakGKhNp8H93ZpJ9eMEjOmvOZh5aFXASc6m3WfY=)
2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:34:b4:1b:b7:50:8a:e7:a5:27:5a:5d:b5:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Oct 20 03:01:04 2025 GMT
Not After : Oct 21 03:01:04 2025 GMT
Subject: CN=39c62e4cef4f9aee0336de7594fdf01fbfdfd497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:2f:14:de:a9:09:ed:f4:f4:13:1d:37:aa:
cd:c4:bc:40:4c:4b:45:b9:df:7c:28:4b:03:d7:ae:
e8:d7:9a:00:e2:cd:b4:2d:d9:ba:48:a7:0e:16:13:
20:f5:b3:05:2d:ad:e5:15:6c:f4:6b:02:35:0f:68:
2c:d6:87:b4:35:76:d9:ff:5e:e0:5f:5b:8f:de:c0:
88:8a:8d:10:c6:33:2d:87:6a:d7:b6:ee:94:6d:34:
c6:09:63:bb:3d:01:5c:e2:ac:bd:85:a8:31:5e:b3:
79:c6:07:04:dc:ef:e2:f3:fd:9e:bb:4f:ce:33:1d:
99:10:97:7f:ad:85:be:28:ca:2c:20:96:35:ad:fe:
4c:a7:25:b4:ed:66:6e:e1:64:8b:b5:f3:31:44:77:
fa:6d:11:23:6f:74:46:bd:88:ce:12:19:ec:31:d3:
29:e3:15:44:8b:41:3e:5c:af:1e:98:52:49:6c:a2:
2a:c6:5a:07:a7:7e:fb:a2:c6:33:0e:65:f9:c2:72:
07:2e:e9:cf:97:1a:97:75:95:ef:ed:8a:bc:23:3f:
18:31:a7:da:0d:c8:ba:65:77:12:16:c6:3a:d0:78:
41:c3:14:7f:3d:c5:05:d0:0b:e6:74:44:be:df:4d:
a0:f8:c8:b6:0b:0f:73:56:d1:56:39:46:bd:db:97:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:2E:4C:EF:4F:9A:EE:03:36:DE:75:94:FD:F0:1F:BF:DF:D4:97
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:a4:ae:90:56:d5:51:f8:da:a2:07:6b:7f:81:97:f2:fa:
5d:38:04:86:9c:9e:dd:b0:87:9b:2e:a4:a8:6e:4b:4d:6d:17:
96:fa:ea:e0:12:6d:27:2b:61:e3:6f:0e:ff:a3:97:c0:f5:69:
99:95:b6:dc:36:cf:0e:0d:2b:73:63:99:91:51:68:ef:3c:53:
07:af:26:db:2d:fd:c7:42:0f:51:00:90:30:09:d8:3b:3c:68:
e2:16:cb:d7:80:5c:98:af:d3:dc:29:fc:5b:2b:75:79:0f:a1:
40:cc:1e:97:ac:63:f4:45:3d:18:c2:f9:0c:88:93:0f:dd:30:
ae:68:f2:6d:b6:82:05:32:9d:99:47:dc:7f:50:f9:ca:97:06:
a2:01:e6:b7:bd:7e:b0:5b:e7:ff:f2:0f:0c:77:a9:1f:91:30:
87:25:e3:2b:87:ba:a7:a5:5c:cc:54:ed:5d:a1:3e:ce:57:cc:
cf:64:88:9d:08:fc:f3:96:5b:f6:7a:0b:29:df:5b:de:22:60:
9c:9d:2a:7c:f7:54:58:c7:f4:7c:c4:20:fa:da:85:df:f5:dc:
fc:6d:bf:6f:cd:5a:40:17:9e:5a:1a:4a:e9:05:79:24:99:71:
19:b4:3d:2b:30:0a:48:76:bf:73:90:87:dd:34:69:66:46:a0:
ba:cb:00:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/kDS0G7dQiuelJ1pdtd68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz
OWEzNWUwHhcNMjUxMDIwMDMwMTA0WhcNMjUxMDIxMDMwMTA0WjAzMTEwLwYDVQQD
EygzOWM2MmU0Y2VmNGY5YWVlMDMzNmRlNzU5NGZkZjAxZmJmZGZkNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DMvFN6pCe309BMdN6rNxLxATEtF
ud98KEsD167o15oA4s20Ldm6SKcOFhMg9bMFLa3lFWz0awI1D2gs1oe0NXbZ/17g
X1uP3sCIio0QxjMth2rXtu6UbTTGCWO7PQFc4qy9hagxXrN5xgcE3O/i8/2eu0/O
Mx2ZEJd/rYW+KMosIJY1rf5MpyW07WZu4WSLtfMxRHf6bREjb3RGvYjOEhnsMdMp
4xVEi0E+XK8emFJJbKIqxloHp377osYzDmX5wnIHLunPlxqXdZXv7Yq8Iz8YMafa
Dci6ZXcSFsY60HhBwxR/PcUF0AvmdES+302g+Mi2Cw9zVtFWOUa925dbmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnGLkzvT5ruAzbedZT98B+/39SXMB8GA1UdIwQY
MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt
NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4
LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2ykrpBW
1VH42qIHa3+Bl/L6XTgEhpye3bCHmy6kqG5LTW0Xlvrq4BJtJyth428O/6OXwPVp
mZW23DbPDg0rc2OZkVFo7zxTB68m2y39x0IPUQCQMAnYOzxo4hbL14BcmK/T3Cn8
Wyt1eQ+hQMwel6xj9EU9GML5DIiTD90wrmjybbaCBTKdmUfcf1D5ypcGogHmt71+
sFvn//IPDHepH5EwhyXjK4e6p6VczFTtXaE+zlfMz2SInQj885Zb9noLKd9b3iJg
nJ0qfPdUWMf0fMQg+tqF3/Xc/G2/b81aQBeeWhpK6QV5JJlxGbQ9KzAKSHa/c5CH
3TRpZkagussAkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:43 2025 by rpki-client