Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: +RxntMF+IQDZyZLDpgI2t2bKoBLqlpK02l9mSmpISz0=
Subject key identifier: 30:95:10:E9:14:45:46:66:FD:43:AA:D1:C5:6B:7A:A5:5C:09:E1:DE
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 0199FB7CCF36D960C6CF11008726765824AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: 01A9
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: q6vN30Q77Fzvvrg1X/Kz6tBy4UUtpgUEHX8NcOLw8ok=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cf:36:d9:60:c6:cf:11:00:87:26:76:58:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=309510e914454666fd43aad1c56b7aa55c09e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:2b:3f:79:7a:e9:c0:12:1c:56:0e:83:4f:
e5:14:df:81:2a:d0:85:31:c2:70:59:94:48:ba:82:
16:5c:10:38:ed:db:e9:74:53:79:a6:3e:ca:a6:2f:
72:29:bb:f2:0a:18:cc:1a:d7:c6:ec:93:0d:ad:71:
95:59:b0:59:bd:c8:a0:44:9e:c2:d3:75:7c:1c:95:
21:3d:98:67:48:d3:e6:91:40:8f:4d:ab:45:fb:93:
aa:60:33:0d:70:32:b1:6a:ff:f5:54:42:ad:3f:ff:
f5:33:31:56:86:45:cd:1a:90:5a:be:cc:23:97:b0:
4f:26:60:d9:b0:1b:9b:af:c6:29:fe:18:14:cf:16:
b0:29:f2:b8:26:58:c2:d7:f7:a7:41:c4:23:5f:e7:
07:d4:ae:63:96:55:f7:d6:11:de:21:60:2c:15:4f:
59:fa:2f:55:1f:03:2d:5d:18:be:fd:50:ac:8c:bc:
6a:2d:c2:c1:9a:c5:59:23:73:78:12:c7:2b:54:79:
ca:81:e3:1b:8a:79:e2:4c:7e:70:f8:46:df:f6:20:
77:8f:9a:4a:80:cc:59:db:0d:72:d9:3f:bd:7f:9b:
60:a2:4f:ff:71:4c:09:17:d7:28:20:7e:7d:68:d9:
e8:06:12:f0:e2:52:7a:5f:d0:3e:87:2a:bb:26:2e:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:10:E9:14:45:46:66:FD:43:AA:D1:C5:6B:7A:A5:5C:09:E1:DE
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e5:6a:9e:0c:23:bf:9a:1e:24:67:0e:da:29:01:6e:c4:b3:
79:0b:8f:e8:ec:19:01:73:39:d4:22:db:53:b9:e4:33:82:4b:
67:24:d9:d4:74:10:c0:51:6a:dd:cf:ff:8e:5a:23:9a:ab:6c:
69:e6:22:8a:bd:e3:9e:25:1f:05:a8:5f:c7:62:f2:a6:ae:00:
82:e2:eb:11:11:ae:d9:51:cd:8d:06:21:2d:9a:01:09:f9:38:
2e:6d:a2:0f:65:51:a1:64:88:11:4a:51:0f:50:de:a3:0c:eb:
a4:0d:df:f1:f6:d9:47:17:c8:68:f3:01:9a:6e:22:a1:47:bf:
e7:ad:af:de:3a:7d:11:3d:b3:81:d7:89:ff:10:b5:41:01:d2:
03:76:a0:f3:a3:e4:85:df:3e:59:b2:05:17:c9:6d:ad:a7:41:
a7:2c:87:da:40:73:5a:a8:17:8d:8a:b8:f1:62:e8:7e:e9:72:
46:12:b9:70:67:17:05:0d:7d:c2:2d:5c:8d:c0:a7:3a:0e:b3:
1a:1c:bb:33:23:fd:60:01:10:0b:5d:ff:cf:92:4e:f7:0a:fd:
e3:f9:9b:3c:7f:e5:50:79:25:ee:75:d3:70:cf:02:05:6d:db:
65:cc:c1:ed:34:8c:b6:5b:78:52:23:c4:df:d1:43:f2:3b:fd:
40:79:d9:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fM822WDGzxEAhyZ2WCSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZWU2ZGY5NzI4Y2Q4YWYwZjM0YTAzZWQ2ZWEzMTUxYzNi
YzIyYzgwHhcNMjUxMDE5MDgwMTI0WhcNMjUxMDIwMDgwMTI0WjAzMTEwLwYDVQQD
EygzMDk1MTBlOTE0NDU0NjY2ZmQ0M2FhZDFjNTZiN2FhNTVjMDllMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTQrP3l66cASHFYOg0/lFN+BKtCF
McJwWZRIuoIWXBA47dvpdFN5pj7Kpi9yKbvyChjMGtfG7JMNrXGVWbBZvcigRJ7C
03V8HJUhPZhnSNPmkUCPTatF+5OqYDMNcDKxav/1VEKtP//1MzFWhkXNGpBavswj
l7BPJmDZsBubr8Yp/hgUzxawKfK4JljC1/enQcQjX+cH1K5jllX31hHeIWAsFU9Z
+i9VHwMtXRi+/VCsjLxqLcLBmsVZI3N4EscrVHnKgeMbinniTH5w+Ebf9iB3j5pK
gMxZ2w1y2T+9f5tgok//cUwJF9coIH59aNnoBhLw4lJ6X9A+hyq7Ji4pdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCVEOkURUZm/UOq0cVreqVcCeHeMB8GA1UdIwQY
MBaAFNrubflyjNivDzSgPtbqMVHDvCLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2Ut
NGQyMGUzNGQwOTkyLzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2UtNGQyMGUzNGQwOTky
LzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+Vqngwj
v5oeJGcO2ikBbsSzeQuP6OwZAXM51CLbU7nkM4JLZyTZ1HQQwFFq3c//jlojmqts
aeYiir3jniUfBahfx2Lypq4AguLrERGu2VHNjQYhLZoBCfk4Lm2iD2VRoWSIEUpR
D1DeowzrpA3f8fbZRxfIaPMBmm4ioUe/562v3jp9ET2zgdeJ/xC1QQHSA3ag86Pk
hd8+WbIFF8ltradBpyyH2kBzWqgXjYq48WLofulyRhK5cGcXBQ19wi1cjcCnOg6z
Ghy7MyP9YAEQC13/z5JO9wr94/mbPH/lUHkl7nXTcM8CBW3bZczB7TSMtlt4UiPE
39FD8jv9QHnZag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:19 2025 by rpki-client