
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: B83luUYNJsbSIIhpI0E9Z/Ksi0k/Wl9wGZnkLy/R97U=
Subject key identifier: C8:5C:D2:C6:C2:02:B4:74:80:83:3A:1E:80:81:18:CC:D2:37:91:B2
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 0198D5F16BD018EFF25A4A2FFE2FDC3FE66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0F2D
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: N4znd3s1XwIYF1g84KIgRVGB6pgIL+BPLt30DbgJCV4=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6b:d0:18:ef:f2:5a:4a:2f:fe:2f:dc:3f:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=c85cd2c6c202b47480833a1e808118ccd23791b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:da:22:13:25:9c:31:27:00:6b:47:a7:83:
5a:15:02:b1:74:c0:76:af:d3:d6:cc:bf:9d:bf:3c:
ad:44:48:3f:78:f6:4e:44:7c:ef:42:6c:b7:da:ec:
e8:14:c6:c7:47:51:1e:56:ad:04:3b:ea:32:d1:32:
b7:c8:bd:6d:99:64:ad:35:69:15:26:85:ab:06:c5:
f5:84:c9:45:2a:d4:67:29:69:52:08:9f:d3:a3:44:
15:8a:d9:18:97:db:a3:d7:16:a4:b9:72:fb:74:c2:
01:d7:f6:1d:af:15:4b:f2:01:19:ec:ee:a2:94:65:
1a:ba:8e:03:cc:fd:d3:31:db:5c:57:49:8f:fb:5a:
38:cf:9b:88:db:34:b9:f0:ac:5e:d5:e9:5d:28:91:
c8:df:fb:42:64:ba:fe:88:68:0e:b9:2d:ba:cc:c1:
ae:23:be:f1:b6:6d:51:94:ad:8c:30:69:c8:29:f9:
0a:6f:99:fe:9c:55:2f:f2:87:34:36:d0:49:1d:e4:
0c:eb:d0:96:86:a8:20:ab:78:a9:ed:4d:2c:18:5c:
df:0f:59:50:32:86:6a:a6:fa:4e:50:af:2e:56:3e:
14:0e:3d:58:64:82:19:8a:d8:fa:fc:ad:2d:1c:e1:
69:4e:7e:f3:4d:4a:fa:fe:38:bd:d5:dc:dc:81:ef:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:D2:C6:C2:02:B4:74:80:83:3A:1E:80:81:18:CC:D2:37:91:B2
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:30:eb:fa:08:e4:b9:24:c2:7d:4a:91:6a:68:ae:43:1e:
fc:8c:06:86:b5:5c:db:c2:33:93:b5:94:12:a5:aa:3b:f1:59:
9c:46:90:6b:97:99:72:4b:2f:fa:f8:cd:13:bd:8a:38:39:b5:
0f:b7:13:b0:d4:36:ba:fd:a5:3f:5d:08:3a:20:e5:f8:6a:1b:
c1:f4:47:91:96:b9:be:f0:b9:9b:9f:cb:42:f2:04:24:9e:08:
63:17:cd:94:af:53:f7:bf:f6:9f:9f:5b:fa:fb:08:e5:f3:b3:
23:9a:40:6d:04:33:43:bb:f5:9f:e5:1d:26:c3:c5:28:f5:f9:
9c:52:61:e0:2d:95:e9:25:f4:62:0f:6d:77:d2:ee:8d:26:17:
6a:22:9a:0d:b4:f2:b9:24:17:9c:58:dc:3d:15:36:a4:bc:5e:
0a:fd:04:4f:10:99:7f:85:20:2d:6a:69:7b:e7:81:cf:dc:de:
1c:35:98:7a:90:f2:0c:19:bb:1b:8d:fa:9a:66:c9:f4:79:ea:
96:70:d0:b0:01:23:d1:16:80:a5:61:83:fb:e2:b6:c7:88:9e:
d3:b9:2c:67:74:da:35:ed:51:81:24:85:48:af:c0:11:2d:68:
7f:9b:f7:70:4d:8e:d8:c7:55:ec:52:4a:84:54:f8:52:b2:16:
1c:f9:63:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WvQGO/yWkov/i/cP+ZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk
YThhOWYwHhcNMjUwODIzMDgwMDI1WhcNMjUwODI0MDgwMDI1WjAzMTEwLwYDVQQD
EyhjODVjZDJjNmMyMDJiNDc0ODA4MzNhMWU4MDgxMThjY2QyMzc5MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w3aIhMlnDEnAGtHp4NaFQKxdMB2
r9PWzL+dvzytREg/ePZORHzvQmy32uzoFMbHR1EeVq0EO+oy0TK3yL1tmWStNWkV
JoWrBsX1hMlFKtRnKWlSCJ/To0QVitkYl9uj1xakuXL7dMIB1/YdrxVL8gEZ7O6i
lGUauo4DzP3TMdtcV0mP+1o4z5uI2zS58Kxe1eldKJHI3/tCZLr+iGgOuS26zMGu
I77xtm1RlK2MMGnIKfkKb5n+nFUv8oc0NtBJHeQM69CWhqggq3ip7U0sGFzfD1lQ
MoZqpvpOUK8uVj4UDj1YZIIZitj6/K0tHOFpTn7zTUr6/ji91dzcge972QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhc0sbCArR0gIM6HoCBGMzSN5GyMB8GA1UdIwQY
MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt
NzY1MzMyNDVmMmJlLzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl
LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6gw6/oI
5Lkkwn1KkWporkMe/IwGhrVc28Izk7WUEqWqO/FZnEaQa5eZcksv+vjNE72KODm1
D7cTsNQ2uv2lP10IOiDl+GobwfRHkZa5vvC5m5/LQvIEJJ4IYxfNlK9T97/2n59b
+vsI5fOzI5pAbQQzQ7v1n+UdJsPFKPX5nFJh4C2V6SX0Yg9td9LujSYXaiKaDbTy
uSQXnFjcPRU2pLxeCv0ETxCZf4UgLWppe+eBz9zeHDWYepDyDBm7G436mmbJ9Hnq
lnDQsAEj0RaApWGD++K2x4ie07ksZ3TaNe1RgSSFSK/AES1of5v3cE2O2MdV7FJK
hFT4UrIWHPljow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:20 2025 by rpki-client