Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: YKS0OJHEOS6YAzMBQI6w1Q6gIiJaZUqHnqdjxgu7xIk=
Subject key identifier: 4E:15:55:E5:FE:4C:FB:A9:BE:EA:FF:16:05:49:09:95:81:AB:2B:71
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 0198D6CD8F1CF4E5C62CF0C05F0782F6945A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: PwbUG+hWrFET+uB6hPFpSKW/4vklZtdlDWojiczOALw=)
2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8f:1c:f4:e5:c6:2c:f0:c0:5f:07:82:f6:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=4e1555e5fe4cfba9beeaff160549099581ab2b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:ed:37:2c:5b:c5:d0:6d:19:31:18:24:2e:
4d:d7:c7:f2:3a:a2:c8:e1:92:0b:10:f2:23:fa:34:
50:8c:2d:60:52:e0:32:4b:60:36:13:24:3f:99:0b:
a2:dc:b6:11:21:3b:85:64:8b:e6:1a:8b:09:ba:34:
6b:04:20:d0:7e:9f:10:92:a6:21:3f:a8:f3:47:85:
07:43:64:cc:e5:8b:af:89:7f:4c:1b:4c:53:98:0b:
22:67:b8:08:b8:d9:73:44:92:2a:8b:4a:7e:be:b0:
30:ef:1c:32:42:e7:2e:16:09:1e:cb:d9:4d:8a:e9:
a7:d4:92:24:04:e3:88:d7:22:35:d4:3b:e5:d7:f9:
3a:f3:30:db:af:d6:65:a6:94:c9:1a:55:27:2a:a3:
a0:24:2a:b0:ae:a9:3d:b1:66:dc:17:ee:a3:02:5e:
12:f5:3b:4d:2f:1e:eb:2f:06:ae:d5:ca:d0:9b:0c:
57:8c:cb:a4:07:23:6e:0a:bc:60:ba:48:6b:68:11:
e2:bd:2a:12:13:c3:1f:90:31:c7:f0:5f:d0:3b:22:
11:f3:61:de:93:7e:3b:67:e8:ed:03:1e:e0:78:9f:
ad:4e:a1:97:54:d5:ad:ed:57:5e:81:b2:91:11:78:
61:ec:70:ee:63:04:0a:e2:1c:76:5c:57:ad:5d:ae:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:55:E5:FE:4C:FB:A9:BE:EA:FF:16:05:49:09:95:81:AB:2B:71
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:51:d9:7a:c1:75:20:04:fc:7c:5c:11:f0:3b:4d:c8:ee:
d7:5a:20:7d:10:de:0d:e2:c9:e8:43:85:29:d7:12:3e:48:df:
8b:4d:4b:67:54:f0:2b:82:12:27:0f:e4:f9:e6:1c:9a:eb:64:
76:53:b1:2a:3f:b0:10:0a:62:79:ac:9b:02:c6:f7:49:e0:7f:
b5:05:38:49:d4:20:f2:71:fd:61:c6:20:f3:66:e3:4a:f7:91:
85:e6:06:e1:65:bc:75:4b:40:e0:2e:d2:45:a6:23:f5:ec:84:
fa:fc:88:b0:7a:df:08:71:22:bc:e1:37:5a:e4:7f:af:7b:59:
ab:70:c5:49:77:b7:56:82:40:4e:21:6f:ff:0b:e7:b6:8c:02:
c7:f0:04:f3:bf:8c:a6:bd:94:07:44:f9:1a:8b:46:5c:d0:1d:
b8:83:1c:63:52:0a:89:2c:28:9c:54:2e:e1:da:ba:09:2c:58:
d6:17:2d:73:4e:37:99:fe:01:69:35:63:33:14:4a:8b:34:b6:
a9:d3:16:f5:ca:82:78:85:98:f0:5e:21:36:a3:df:f9:7a:f5:
9b:c6:36:1c:34:aa:c3:d5:a0:67:30:20:97:3b:dd:53:95:a8:
29:ca:b6:f3:a4:9d:d8:43:01:1c:4c:f0:4e:61:25:9b:48:04:
4f:e7:68:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzY8c9OXGLPDAXweC9pRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2Iz
MzNhMDUwHhcNMjUwODIzMTIwMDUyWhcNMjUwODI0MTIwMDUyWjAzMTEwLwYDVQQD
Eyg0ZTE1NTVlNWZlNGNmYmE5YmVlYWZmMTYwNTQ5MDk5NTgxYWIyYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/tNyxbxdBtGTEYJC5N18fyOqLI
4ZILEPIj+jRQjC1gUuAyS2A2EyQ/mQui3LYRITuFZIvmGosJujRrBCDQfp8QkqYh
P6jzR4UHQ2TM5YuviX9MG0xTmAsiZ7gIuNlzRJIqi0p+vrAw7xwyQucuFgkey9lN
iumn1JIkBOOI1yI11Dvl1/k68zDbr9ZlppTJGlUnKqOgJCqwrqk9sWbcF+6jAl4S
9TtNLx7rLwau1crQmwxXjMukByNuCrxgukhraBHivSoSE8MfkDHH8F/QOyIR82He
k347Z+jtAx7geJ+tTqGXVNWt7VdegbKREXhh7HDuYwQK4hx2XFetXa51fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4VVeX+TPupvur/FgVJCZWBqytxMB8GA1UdIwQY
MBaAFNmWgCnxJAluq5Vd+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMt
NmVlYTEyMjA1NzIwLzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIw
LzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYNR2XrB
dSAE/HxcEfA7Tcju11ogfRDeDeLJ6EOFKdcSPkjfi01LZ1TwK4ISJw/k+eYcmutk
dlOxKj+wEApieaybAsb3SeB/tQU4SdQg8nH9YcYg82bjSveRheYG4WW8dUtA4C7S
RaYj9eyE+vyIsHrfCHEivOE3WuR/r3tZq3DFSXe3VoJATiFv/wvntowCx/AE87+M
pr2UB0T5GotGXNAduIMcY1IKiSwonFQu4dq6CSxY1hctc043mf4BaTVjMxRKizS2
qdMW9cqCeIWY8F4hNqPf+Xr1m8Y2HDSqw9WgZzAglzvdU5WoKcq286Sd2EMBHEzw
TmElm0gET+do/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:39 2025 by rpki-client