Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: OBP9JkKpfw9v0kWDMg5LsxOlvxJ2D8/6KeI+2IR7IBw=
Subject key identifier: F8:88:86:CA:4D:63:67:A6:35:10:59:88:B5:2C:49:13:42:4E:89:AB
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 0199FB0F4999DDDB218D8E081DE85D172AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0FB4
Signing time: Sun 19 Oct 2025 06:01:47 +0000
Manifest this update: Sun 19 Oct 2025 06:01:47 +0000
Manifest next update: Mon 20 Oct 2025 06:01:47 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: keqBdvCY67W4GYNR0Qvl/1iSbFb3uPIfJAxclSJWLo4=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:49:99:dd:db:21:8d:8e:08:1d:e8:5d:17:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Oct 19 06:01:47 2025 GMT
Not After : Oct 20 06:01:47 2025 GMT
Subject: CN=f88886ca4d6367a635105988b52c4913424e89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:5e:e2:4c:4b:ea:27:98:17:0f:d4:3c:3d:
b3:95:f8:02:b9:da:34:d7:0f:85:17:77:a8:d6:86:
25:23:64:7b:d6:0a:1d:f3:05:64:1e:d4:20:2a:f2:
ad:42:32:9c:be:cb:aa:23:5d:ff:d3:54:cd:23:72:
55:45:cf:a2:45:30:92:60:40:c3:43:da:6d:2b:30:
a0:42:0e:f3:39:bf:ac:63:d1:37:81:bb:bc:a8:5f:
74:70:3b:be:19:b3:ac:3f:e0:c7:86:4b:65:4f:c2:
3d:08:5b:4f:74:a8:fd:49:b9:ad:84:da:da:83:30:
70:1f:c7:04:76:1d:e9:1e:ff:35:67:2f:93:a0:71:
84:b4:41:f6:7f:9a:c9:e9:26:f4:74:38:ab:01:68:
9f:6d:4a:27:11:f8:75:38:a5:63:68:b2:d4:26:11:
9f:a6:67:78:f4:f2:eb:eb:75:b1:07:eb:d4:36:5e:
c7:79:2b:f6:40:a8:f1:49:f5:81:f4:a0:55:1d:93:
80:e2:0b:59:33:0d:6a:9d:84:fb:62:2e:67:e8:8a:
93:c6:d2:ec:b1:69:60:ae:ad:ae:a3:9b:ab:a3:03:
2f:39:7f:71:e5:2c:0b:a8:0f:94:70:53:09:8b:16:
43:61:f5:33:ee:29:20:13:71:97:b6:4e:a1:c8:c6:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:86:CA:4D:63:67:A6:35:10:59:88:B5:2C:49:13:42:4E:89:AB
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:31:c0:62:84:2e:bd:72:90:5f:37:15:81:cc:87:10:44:
4d:07:30:1b:98:8e:24:16:4c:b3:df:ef:e8:17:56:8f:a2:51:
e5:ee:32:3c:98:25:1c:23:e6:23:ed:32:6a:fe:a3:5b:96:00:
d7:81:04:95:2d:1b:f7:ce:e8:5a:fd:7b:06:c2:81:8b:46:01:
d8:77:43:87:22:e3:b4:34:c8:34:a4:66:10:1c:40:29:79:6c:
ed:92:fb:85:c2:76:bd:be:38:34:5b:ec:95:81:2b:7d:d1:2a:
91:cb:60:48:23:64:6e:98:16:e5:f0:9b:05:45:29:74:03:51:
b2:dc:1e:0d:c0:af:0a:13:5d:78:f9:d4:59:0c:26:83:e1:38:
ea:b6:82:06:60:84:9e:2f:07:b8:54:f4:4f:16:fe:d1:28:0d:
63:15:d3:cc:d6:69:57:87:97:53:05:9e:fb:c2:5f:3e:8b:43:
01:9f:22:6e:91:43:b0:bf:91:8d:85:30:73:22:97:e3:f5:14:
9a:aa:1d:a1:e9:06:c1:1b:00:ea:36:d4:75:e7:f9:67:1d:7d:
66:75:39:ef:2a:c3:a6:b2:7c:d7:cd:32:fe:1b:63:e7:13:e0:
45:e6:5b:ec:0d:16:47:e1:e5:d5:5a:9a:2e:5e:bd:e9:df:26:
88:b4:2c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D0mZ3dshjY4IHehdFyrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4
NzA3NmUwHhcNMjUxMDE5MDYwMTQ3WhcNMjUxMDIwMDYwMTQ3WjAzMTEwLwYDVQQD
EyhmODg4ODZjYTRkNjM2N2E2MzUxMDU5ODhiNTJjNDkxMzQyNGU4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zte4kxL6ieYFw/UPD2zlfgCudo0
1w+FF3eo1oYlI2R71god8wVkHtQgKvKtQjKcvsuqI13/01TNI3JVRc+iRTCSYEDD
Q9ptKzCgQg7zOb+sY9E3gbu8qF90cDu+GbOsP+DHhktlT8I9CFtPdKj9SbmthNra
gzBwH8cEdh3pHv81Zy+ToHGEtEH2f5rJ6Sb0dDirAWifbUonEfh1OKVjaLLUJhGf
pmd49PLr63WxB+vUNl7HeSv2QKjxSfWB9KBVHZOA4gtZMw1qnYT7Yi5n6IqTxtLs
sWlgrq2uo5urowMvOX9x5SwLqA+UcFMJixZDYfUz7ikgE3GXtk6hyMbVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiIhspNY2emNRBZiLUsSRNCTomrMB8GA1UdIwQY
MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt
MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3
LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9ExwGKE
Lr1ykF83FYHMhxBETQcwG5iOJBZMs9/v6BdWj6JR5e4yPJglHCPmI+0yav6jW5YA
14EElS0b987oWv17BsKBi0YB2HdDhyLjtDTINKRmEBxAKXls7ZL7hcJ2vb44NFvs
lYErfdEqkctgSCNkbpgW5fCbBUUpdANRstweDcCvChNdePnUWQwmg+E46raCBmCE
ni8HuFT0Txb+0SgNYxXTzNZpV4eXUwWe+8JfPotDAZ8ibpFDsL+RjYUwcyKX4/UU
mqodoekGwRsA6jbUdef5Zx19ZnU57yrDprJ8180y/htj5xPgReZb7A0WR+Hl1Vqa
Ll696d8miLQsfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:56 2025 by rpki-client