Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: dv1Ci+/md5AdFhiwxWZxBI1gSIJUCHmnY/Q/nL38Rp4=
Subject key identifier: 60:CC:C8:C6:09:9D:60:B2:A3:CE:8B:1F:F4:B5:9E:20:5F:54:C5:68
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 0199FC587D8650210B60E0C55DF44AB2E13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0666
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: beaw4GDzme4vVVAi/57+s+oUTXntkYJvjXCapqAh1ek=)
2: VNw8205zgqcsxDx8DssKyxJ_Gm8.roa (hash: onGjCH5MTTCmNABzkUzCYNGE5La3bQEkwo6cvlWLyCk=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7d:86:50:21:0b:60:e0:c5:5d:f4:4a:b2:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=60ccc8c6099d60b2a3ce8b1ff4b59e205f54c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:8a:55:15:0a:69:24:fc:6b:e3:ea:26:72:
64:51:97:1f:22:4f:c3:c7:71:66:fb:90:1a:c8:cb:
51:be:11:d1:ff:ca:86:64:bc:3a:51:1f:f8:be:33:
25:5c:78:8c:73:c6:93:fd:d5:b6:73:90:5a:3e:8e:
d7:56:88:fe:60:93:5b:58:7c:6d:3a:fe:66:8b:58:
0d:0e:4f:4d:dd:47:6b:06:09:17:59:d8:f6:a6:4f:
a8:55:a0:38:a8:fd:60:2e:9c:81:1c:02:1f:8a:98:
bc:f6:01:93:df:eb:a2:2f:14:63:8f:76:15:0d:03:
44:41:9f:ed:2e:ec:8e:19:45:cf:f3:3d:f9:1a:cc:
d9:bd:80:f6:80:ef:c6:52:15:be:93:ac:b1:f8:c0:
4c:c1:bc:32:59:37:b9:54:3a:8c:5e:4a:f4:1e:5b:
74:b0:7d:da:a7:8e:ce:21:eb:64:98:c9:e9:34:04:
ad:10:e4:6c:2f:02:59:1a:a3:e8:9b:43:f1:d9:4a:
9c:95:fb:b6:fb:8c:79:84:31:35:0c:ed:b1:bb:64:
9c:fe:f2:be:1a:6a:5b:d6:37:f0:02:24:45:45:da:
7b:9f:c0:7c:ec:00:bd:27:60:1d:99:21:6c:b5:fb:
db:7b:56:dc:5e:80:44:e6:4b:8c:02:d7:4f:fe:26:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CC:C8:C6:09:9D:60:B2:A3:CE:8B:1F:F4:B5:9E:20:5F:54:C5:68
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:b5:ec:00:39:e6:bf:81:9b:00:2a:86:d6:0d:cf:79:e9:
7a:46:bd:fb:7c:00:25:df:5a:1d:ba:29:ae:d0:af:6a:48:b7:
2f:cd:9b:d0:51:ff:9c:cc:bf:e7:5c:1f:75:42:5f:39:7b:3a:
5c:6a:2d:6c:90:b6:e1:35:5d:90:c3:8c:1b:ec:a9:59:af:6a:
92:5e:d9:c3:18:57:8d:13:48:b0:96:1e:c3:26:03:53:81:ec:
67:64:d4:de:ae:6f:9e:05:f4:60:1f:05:bd:ec:a7:8f:87:a2:
c8:9c:f3:09:4c:ef:51:6e:b1:0a:df:25:30:cf:1d:22:36:38:
9b:70:d9:1f:48:4c:a5:57:55:f4:58:ac:f5:ff:48:b6:36:23:
10:73:06:a1:00:54:8d:4e:ae:f8:f0:66:89:60:e2:7e:01:d9:
81:e1:39:30:ff:bd:0f:42:eb:78:7d:d9:f3:df:9d:88:0d:a4:
7f:4f:d5:fc:c1:4c:3d:7c:6e:2b:13:54:70:ff:10:dc:cf:b8:
b7:77:b5:65:8c:6e:94:12:95:21:6b:bd:9e:76:d9:66:0c:16:
eb:8f:e2:52:a5:2e:d5:5c:2f:d6:72:0d:19:d0:02:b7:23:fc:
8a:7a:db:17:bd:4b:5f:7a:81:65:14:ef:f0:6f:72:07:ac:bc:
7f:8e:c4:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WH2GUCELYODFXfRKsuE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5
ZTQ3YTAwHhcNMjUxMDE5MTIwMTIxWhcNMjUxMDIwMTIwMTIxWjAzMTEwLwYDVQQD
Eyg2MGNjYzhjNjA5OWQ2MGIyYTNjZThiMWZmNGI1OWUyMDVmNTRjNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iqKVRUKaST8a+PqJnJkUZcfIk/D
x3Fm+5AayMtRvhHR/8qGZLw6UR/4vjMlXHiMc8aT/dW2c5BaPo7XVoj+YJNbWHxt
Ov5mi1gNDk9N3UdrBgkXWdj2pk+oVaA4qP1gLpyBHAIfipi89gGT3+uiLxRjj3YV
DQNEQZ/tLuyOGUXP8z35GszZvYD2gO/GUhW+k6yx+MBMwbwyWTe5VDqMXkr0Hlt0
sH3ap47OIetkmMnpNAStEORsLwJZGqPom0Px2Uqclfu2+4x5hDE1DO2xu2Sc/vK+
Gmpb1jfwAiRFRdp7n8B87AC9J2AdmSFstfvbe1bcXoBE5kuMAtdP/iaFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDMyMYJnWCyo86LH/S1niBfVMVoMB8GA1UdIwQY
MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt
MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2
LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhi17AA5
5r+BmwAqhtYNz3npeka9+3wAJd9aHboprtCvaki3L82b0FH/nMy/51wfdUJfOXs6
XGotbJC24TVdkMOMG+ypWa9qkl7ZwxhXjRNIsJYewyYDU4HsZ2TU3q5vngX0YB8F
veynj4eiyJzzCUzvUW6xCt8lMM8dIjY4m3DZH0hMpVdV9Fis9f9ItjYjEHMGoQBU
jU6u+PBmiWDifgHZgeE5MP+9D0LreH3Z89+diA2kf0/V/MFMPXxuKxNUcP8Q3M+4
t3e1ZYxulBKVIWu9nnbZZgwW64/iUqUu1Vwv1nINGdACtyP8inrbF71LX3qBZRTv
8G9yB6y8f47E0g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:46 2025 by rpki-client