Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: 1cgNFA9CZwbqsSqxAI6SUOzXdW2JL97Em++ZWnsUVU4=
Subject key identifier: 97:99:B2:94:19:82:BB:F5:E8:6E:44:AA:C1:27:DE:99:59:44:70:B4
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 01992255DC56576EEC66FE9AA4B72C15112C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 148C
Signing time: Sun 07 Sep 2025 04:01:16 +0000
Manifest this update: Sun 07 Sep 2025 04:01:16 +0000
Manifest next update: Mon 08 Sep 2025 04:01:16 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: D/3h0NEZWz9OOgiQrA0Y7SQk2B2oyLzl818qVZ48Ig4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:dc:56:57:6e:ec:66:fe:9a:a4:b7:2c:15:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Sep 7 04:01:16 2025 GMT
Not After : Sep 8 04:01:16 2025 GMT
Subject: CN=9799b2941982bbf5e86e44aac127de99594470b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:1e:b0:60:96:46:b9:3e:ed:4f:02:54:ae:
81:db:01:f5:f2:2b:d4:6a:48:14:ef:16:7c:65:c0:
aa:3e:ac:18:31:cb:a2:62:33:be:88:6f:f6:68:16:
cb:18:db:5c:34:7a:f1:88:8f:b1:4d:ed:a0:f7:d4:
4e:a6:a4:92:96:f5:89:e2:c6:62:65:a3:bd:94:ee:
9a:35:ac:5f:b1:8f:f7:e0:cf:48:09:be:a8:9a:1f:
e3:57:99:d9:02:b4:c2:83:14:3b:6c:ea:8c:a3:4a:
d3:13:26:10:5b:63:ab:64:f6:34:f7:2c:86:dd:9e:
03:d0:48:c6:5b:32:ab:42:2a:5e:3e:91:df:de:9a:
d4:12:5d:30:e1:a7:76:c5:f5:e4:09:df:98:15:76:
f4:52:85:b0:25:64:1a:58:28:83:d8:e6:fe:d1:27:
b4:7b:35:88:55:4e:58:fd:89:72:d9:4b:1d:4d:e9:
00:f0:e3:b0:38:58:27:39:c1:90:18:8a:c6:03:77:
00:8a:ff:4a:59:b3:a5:e7:85:33:ab:26:8d:50:37:
fb:5d:34:b8:7d:fb:07:f2:75:e0:e7:c0:db:fb:d3:
11:f0:20:4f:2d:ec:3b:47:22:9d:52:89:ce:01:2c:
28:2c:5d:2d:9d:1f:2a:a9:b0:f8:d3:00:80:47:40:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:B2:94:19:82:BB:F5:E8:6E:44:AA:C1:27:DE:99:59:44:70:B4
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:77:93:c7:b1:ba:6d:2e:ec:65:e1:c2:ce:cc:5a:8b:a8:
47:c1:8e:b0:54:c4:ca:55:18:74:65:d5:9c:fd:df:b0:4d:ef:
16:ba:ee:f8:24:e8:7d:9e:23:42:6f:da:75:20:16:cc:64:09:
f7:91:c5:36:e0:a0:fc:70:0e:8f:40:87:8c:e1:6f:e1:47:ca:
e6:6e:5f:1f:3b:6f:69:b2:38:88:b4:16:64:fb:1c:87:f5:ca:
26:a5:51:b4:fd:20:92:69:6b:cf:53:8e:70:56:24:9c:d6:06:
b4:46:c0:65:87:20:5d:ae:0a:a8:dc:d7:4b:a2:2b:8e:a6:05:
56:aa:3e:bc:32:11:51:e0:7a:91:e8:00:bb:a7:58:b3:2c:62:
9a:75:ea:cd:d5:2d:5a:0f:6a:95:c2:0c:89:be:f3:6e:ec:35:
c8:83:af:a5:ff:ab:d2:de:a3:ae:f3:35:79:58:15:81:fa:ab:
42:41:2c:32:68:c5:33:44:4c:f9:a4:d2:39:67:10:df:b5:41:
9a:c4:43:f3:83:c2:d4:02:83:eb:ec:4c:54:a5:12:3f:f6:db:
57:12:0f:05:fb:34:fa:73:3f:9f:31:22:85:8f:a7:19:cd:50:
27:f7:85:ce:53:ce:58:61:01:c3:c2:6c:1a:27:4b:77:fc:3e:
a5:99:78:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVdxWV27sZv6apLcsFREsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5
ZjllNGMwHhcNMjUwOTA3MDQwMTE2WhcNMjUwOTA4MDQwMTE2WjAzMTEwLwYDVQQD
Eyg5Nzk5YjI5NDE5ODJiYmY1ZTg2ZTQ0YWFjMTI3ZGU5OTU5NDQ3MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMMesGCWRrk+7U8CVK6B2wH18ivU
akgU7xZ8ZcCqPqwYMcuiYjO+iG/2aBbLGNtcNHrxiI+xTe2g99ROpqSSlvWJ4sZi
ZaO9lO6aNaxfsY/34M9ICb6omh/jV5nZArTCgxQ7bOqMo0rTEyYQW2OrZPY09yyG
3Z4D0EjGWzKrQipePpHf3prUEl0w4ad2xfXkCd+YFXb0UoWwJWQaWCiD2Ob+0Se0
ezWIVU5Y/Yly2UsdTekA8OOwOFgnOcGQGIrGA3cAiv9KWbOl54UzqyaNUDf7XTS4
ffsH8nXg58Db+9MR8CBPLew7RyKdUonOASwoLF0tnR8qqbD40wCAR0AF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeZspQZgrv16G5EqsEn3plZRHC0MB8GA1UdIwQY
MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt
NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh
LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6p3k8ex
um0u7GXhws7MWouoR8GOsFTEylUYdGXVnP3fsE3vFrru+CTofZ4jQm/adSAWzGQJ
95HFNuCg/HAOj0CHjOFv4UfK5m5fHztvabI4iLQWZPsch/XKJqVRtP0gkmlrz1OO
cFYknNYGtEbAZYcgXa4KqNzXS6IrjqYFVqo+vDIRUeB6kegAu6dYsyximnXqzdUt
Wg9qlcIMib7zbuw1yIOvpf+r0t6jrvM1eVgVgfqrQkEsMmjFM0RM+aTSOWcQ37VB
msRD84PC1AKD6+xMVKUSP/bbVxIPBfs0+nM/nzEihY+nGc1QJ/eFzlPOWGEBw8Js
GidLd/w+pZl4Ig==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:57 2025 by rpki-client