Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: 4s5AaTGAcmwvWg5MpZz/22sMsACGOVAi/dUHZBlJKsA=
Subject key identifier: E4:B1:87:0E:84:D3:7B:F3:37:D3:35:AD:ED:2F:8F:E2:DB:E1:88:EF
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0199FEEBA78E8920904B13645DFAD096EC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 078F
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: CD3AEDy7l+GVP8S+5A3Ublqg/A4A5ZAC1MFBm7XPPtQ=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a7:8e:89:20:90:4b:13:64:5d:fa:d0:96:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=e4b1870e84d37bf337d335aded2f8fe2dbe188ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:0b:af:39:85:59:26:dd:24:a8:ff:2b:a1:
ca:e8:1a:bf:97:58:9a:3b:d1:23:2c:65:cf:e5:61:
0a:2b:aa:f7:da:77:4d:36:e2:f5:13:3e:79:e0:60:
22:7a:0f:fb:64:99:e7:4c:30:4c:a9:f1:1f:28:a4:
35:64:4a:51:6d:cf:58:1e:c0:26:f5:8c:37:12:3b:
04:0d:0d:48:c7:9f:ff:fc:74:c0:2d:94:50:4a:27:
f9:de:19:75:48:f9:0e:71:c3:ba:43:bd:96:52:36:
eb:6e:19:85:69:1e:3f:ff:c6:ae:d7:37:cd:da:d1:
2f:e5:32:cf:57:e3:67:23:48:da:b4:2d:93:10:91:
c3:83:71:e0:52:71:65:3f:cf:f1:f1:8a:21:44:2a:
9b:9a:86:7d:17:51:0e:7a:1b:ae:47:f7:c7:fc:b7:
0e:f4:32:e2:a3:32:4f:49:8f:9b:d3:a6:8e:71:dd:
83:d4:f7:10:db:6a:03:d5:81:bd:33:aa:76:15:a2:
87:74:d3:a3:a7:9f:30:a4:c8:01:2e:12:cb:ad:db:
99:c3:17:74:4c:d1:f8:dd:0f:5e:42:80:3f:2b:cb:
d4:f2:98:90:fd:87:12:9a:17:17:73:d4:6e:4b:e8:
83:4a:36:b0:15:21:83:5f:58:58:0f:8f:db:16:8d:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:87:0E:84:D3:7B:F3:37:D3:35:AD:ED:2F:8F:E2:DB:E1:88:EF
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f4:72:3e:a3:74:0c:c9:be:1e:ea:b8:08:d5:e6:a1:f1:be:
77:ac:ab:cf:ff:a4:66:c6:d8:a4:cb:06:90:e2:2e:66:43:d0:
1f:f4:b5:2e:b6:84:5e:6d:95:55:9a:28:9d:19:a0:f6:11:91:
3d:36:47:92:74:8d:e0:bf:3d:96:75:94:fa:c3:a2:b2:06:15:
d9:53:0c:53:c2:ab:e3:a3:b6:f7:e0:ae:0a:83:22:52:01:35:
1b:98:21:49:4b:4d:6b:bd:1f:e2:99:13:93:90:62:ae:76:42:
75:3f:74:e2:67:e3:60:72:e1:8c:9e:a9:db:c9:4b:32:df:f1:
2f:6d:a3:dd:80:50:7a:85:1c:5a:11:a2:e5:42:8a:ad:ee:44:
d9:29:1c:ce:73:e8:41:0a:cf:17:8b:b0:d4:04:1e:bd:c6:84:
17:b1:b3:81:1a:dd:50:45:25:94:49:68:83:e9:31:66:95:58:
62:97:2e:5b:e1:eb:b9:74:bd:9c:18:7b:3c:32:35:5b:73:66:
c9:cf:50:f9:02:62:ef:e4:af:67:ef:97:c5:16:9c:a2:2a:31:
c4:81:1c:47:62:2e:16:fb:0c:3c:3e:76:f3:e9:1f:b1:fd:ce:
f7:20:8f:23:d0:05:fe:25:64:11:3b:bd:7f:56:8f:2b:1c:6f:
96:ac:58:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+66eOiSCQSxNkXfrQlux/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjUxMDIwMDAwMTIwWhcNMjUxMDIxMDAwMTIwWjAzMTEwLwYDVQQD
EyhlNGIxODcwZTg0ZDM3YmYzMzdkMzM1YWRlZDJmOGZlMmRiZTE4OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkULrzmFWSbdJKj/K6HK6Bq/l1ia
O9EjLGXP5WEKK6r32ndNNuL1Ez554GAieg/7ZJnnTDBMqfEfKKQ1ZEpRbc9YHsAm
9Yw3EjsEDQ1Ix5///HTALZRQSif53hl1SPkOccO6Q72WUjbrbhmFaR4//8au1zfN
2tEv5TLPV+NnI0jatC2TEJHDg3HgUnFlP8/x8YohRCqbmoZ9F1EOehuuR/fH/LcO
9DLiozJPSY+b06aOcd2D1PcQ22oD1YG9M6p2FaKHdNOjp58wpMgBLhLLrduZwxd0
TNH43Q9eQoA/K8vU8piQ/YcSmhcXc9RuS+iDSjawFSGDX1hYD4/bFo3jWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSxhw6E03vzN9M1re0vj+Lb4YjvMB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvRyPqN0
DMm+Huq4CNXmofG+d6yrz/+kZsbYpMsGkOIuZkPQH/S1LraEXm2VVZoonRmg9hGR
PTZHknSN4L89lnWU+sOisgYV2VMMU8Kr46O29+CuCoMiUgE1G5ghSUtNa70f4pkT
k5BirnZCdT904mfjYHLhjJ6p28lLMt/xL22j3YBQeoUcWhGi5UKKre5E2SkcznPo
QQrPF4uw1AQevcaEF7GzgRrdUEUllElog+kxZpVYYpcuW+HruXS9nBh7PDI1W3Nm
yc9Q+QJi7+SvZ++XxRacoioxxIEcR2IuFvsMPD528+kfsf3O9yCPI9AF/iVkETu9
f1aPKxxvlqxYzw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:24 2025 by rpki-client