Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: yj0qXINWVYbCJhT0Rm7zc8QTcfLSQAvnXuV/MF4XEZY=
Subject key identifier: 19:4B:35:9A:DC:C1:77:F6:46:2D:14:D9:3E:DD:DF:0D:40:C4:24:3F
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 0199FBEBA36018ED024F68AC30AF5320C5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1086
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: fDZois+C/TG6Uek19W6Jhw1k/ZaCxuxtF3g5tyWbeME=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a3:60:18:ed:02:4f:68:ac:30:af:53:20:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=194b359adcc177f6462d14d93edddf0d40c4243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:de:5b:81:b5:ab:5b:26:0d:ae:06:86:4a:
f0:ab:9a:a2:64:b5:61:6b:09:5a:f9:73:4a:34:fe:
39:01:a8:77:6a:cf:90:71:ac:9b:7d:51:db:af:cb:
cc:e5:6f:52:16:bc:fe:ec:cf:23:36:bb:a9:da:7c:
cd:4c:77:f0:b9:33:21:b6:71:14:97:ce:48:ed:58:
f8:d2:5b:ff:88:1b:fa:53:26:a2:d3:79:9b:f7:14:
a0:f8:74:78:c0:51:57:4f:f9:20:c0:19:c1:30:5d:
ae:29:00:22:84:40:77:cc:c0:fb:28:5d:99:c9:3c:
53:93:38:62:0f:e4:95:70:77:10:3b:db:da:cd:19:
8e:44:8a:5a:7a:c8:66:73:51:ac:83:74:c7:6e:85:
e4:79:c4:60:75:26:01:3b:53:e1:e4:ae:31:ee:da:
a3:f5:dd:39:ec:71:f3:aa:a6:96:8c:31:ab:a2:0f:
84:9a:77:9b:f2:aa:f8:3a:a0:22:94:47:96:dc:ed:
f6:7d:7c:25:3f:83:9c:30:94:bd:69:b6:63:10:36:
6a:91:44:cb:22:9a:54:52:79:98:a3:f6:65:8f:4c:
9a:32:26:93:bb:9e:c9:fc:f1:b3:f2:ed:f3:1c:be:
10:e4:8c:5f:a6:ff:c7:e1:21:ee:dd:1a:54:60:aa:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:35:9A:DC:C1:77:F6:46:2D:14:D9:3E:DD:DF:0D:40:C4:24:3F
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:e2:c7:bd:a1:e8:c4:d4:3e:d1:24:ed:c9:81:9c:27:f4:
9f:46:1b:91:83:ba:83:a8:3e:59:11:79:1a:a3:05:cd:ee:1a:
79:01:33:d0:45:60:4f:85:58:c0:a5:0f:65:49:57:5a:47:51:
10:4b:d5:10:9e:eb:39:4a:b7:1f:4b:2f:72:1a:c9:fd:04:ab:
69:b1:c3:3e:d5:83:29:73:0e:9f:f4:29:df:07:cc:57:d0:25:
32:c1:71:b4:37:5d:ac:ee:04:ef:6b:5c:02:de:7a:ba:eb:d1:
1a:99:da:e4:e0:15:6b:f3:af:55:2b:ef:f7:b5:4a:2f:72:f2:
2b:b8:ad:b5:60:d2:f8:f7:33:a7:a4:2a:e7:14:04:9a:40:a6:
df:25:cd:31:b0:a8:83:06:c1:f4:6b:ed:24:3e:93:93:32:10:
56:e4:1d:da:f9:f9:8e:b9:c7:61:5d:54:85:b7:66:b6:fb:91:
a0:c6:6f:e7:55:16:00:e5:e9:ab:47:98:19:a8:fd:d8:12:a9:
5d:e4:d8:bf:bc:41:df:8f:02:9b:8d:c5:4e:58:4c:3b:fc:47:
1b:85:73:20:bd:46:04:de:49:40:76:c7:8e:d0:02:5d:8a:27:
44:c3:0a:ae:d4:43:9c:59:c8:61:0d:74:a5:ba:5a:93:be:2c:
49:03:9a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766NgGO0CT2isMK9TIMWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjUxMDE5MTAwMjI3WhcNMjUxMDIwMTAwMjI3WjAzMTEwLwYDVQQD
EygxOTRiMzU5YWRjYzE3N2Y2NDYyZDE0ZDkzZWRkZGYwZDQwYzQyNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTeW4G1q1smDa4Ghkrwq5qiZLVh
awla+XNKNP45Aah3as+QcaybfVHbr8vM5W9SFrz+7M8jNrup2nzNTHfwuTMhtnEU
l85I7Vj40lv/iBv6Uyai03mb9xSg+HR4wFFXT/kgwBnBMF2uKQAihEB3zMD7KF2Z
yTxTkzhiD+SVcHcQO9vazRmORIpaeshmc1Gsg3THboXkecRgdSYBO1Ph5K4x7tqj
9d057HHzqqaWjDGrog+Emneb8qr4OqAilEeW3O32fXwlP4OcMJS9abZjEDZqkUTL
IppUUnmYo/Zlj0yaMiaTu57J/PGz8u3zHL4Q5Ixfpv/H4SHu3RpUYKobOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlLNZrcwXf2Ri0U2T7d3w1AxCQ/MB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOzix72h
6MTUPtEk7cmBnCf0n0YbkYO6g6g+WRF5GqMFze4aeQEz0EVgT4VYwKUPZUlXWkdR
EEvVEJ7rOUq3H0svchrJ/QSrabHDPtWDKXMOn/Qp3wfMV9AlMsFxtDddrO4E72tc
At56uuvRGpna5OAVa/OvVSvv97VKL3LyK7ittWDS+Pczp6Qq5xQEmkCm3yXNMbCo
gwbB9GvtJD6TkzIQVuQd2vn5jrnHYV1UhbdmtvuRoMZv51UWAOXpq0eYGaj92BKp
XeTYv7xB348Cm43FTlhMO/xHG4VzIL1GBN5JQHbHjtACXYonRMMKrtRDnFnIYQ10
pbpak74sSQOaXQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:15 2025 by rpki-client