Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: ArJkufpDkHUJaKgMXQI/zWI84VeIoIInxfwsm3E9z8o=
Subject key identifier: 8E:C1:49:5A:F8:0E:10:C2:E3:6D:C9:34:C1:80:87:1E:04:78:06:1F
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019923A0D39585783B3FE099B4EA8C26E7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 07CF
Signing time: Sun 07 Sep 2025 10:02:46 +0000
Manifest this update: Sun 07 Sep 2025 10:02:46 +0000
Manifest next update: Mon 08 Sep 2025 10:02:46 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: fiK2Nof7dLnZ+PdSd65Iz7AdXU3RqAcX9IYFB3O+ePU=)
2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d3:95:85:78:3b:3f:e0:99:b4:ea:8c:26:e7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Sep 7 10:02:46 2025 GMT
Not After : Sep 8 10:02:46 2025 GMT
Subject: CN=8ec1495af80e10c2e36dc934c180871e0478061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:f4:31:70:ee:39:a8:6d:24:d5:e7:04:81:
4a:66:c6:a1:13:49:cc:2b:b0:0d:80:41:db:b4:03:
32:2d:c0:de:1a:b0:42:ad:9c:9b:80:a6:ed:56:b5:
a7:5f:d6:69:d5:08:9f:f3:1e:70:4c:4c:be:2b:71:
28:2e:b0:e3:f4:6f:b8:08:45:81:fd:1b:aa:1a:6e:
38:43:7c:4a:51:aa:90:31:3c:c9:30:7e:ef:38:44:
a5:95:8d:2f:a8:0e:31:88:82:3e:1b:83:1c:e3:aa:
5a:f3:10:30:41:13:b8:45:6c:80:86:30:22:0d:55:
6d:aa:1d:42:05:fd:65:e6:8b:e8:4f:ba:33:8d:f6:
36:d0:9a:50:8a:8f:0b:56:26:06:0f:e8:01:3c:cc:
9a:b2:78:0e:c6:48:b5:85:9d:b0:67:de:e7:79:80:
22:be:07:e3:25:0a:ca:3e:b8:f1:70:48:a0:29:59:
19:b3:52:e2:4a:cc:7b:63:25:30:15:7b:96:62:44:
7b:50:c9:fc:80:1e:4f:4f:a0:65:f7:57:86:28:de:
03:c9:ba:11:31:0d:87:57:0a:0b:81:9d:9a:c2:59:
6e:64:9b:46:d4:63:3b:d3:3a:c0:1f:84:5d:e3:d2:
dd:94:ac:7b:63:0d:fc:15:80:92:15:a3:09:53:2e:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:49:5A:F8:0E:10:C2:E3:6D:C9:34:C1:80:87:1E:04:78:06:1F
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:d1:02:02:1f:8c:ef:0e:3f:94:48:99:bd:9b:6c:fc:81:
87:48:c5:24:9a:6d:54:26:7a:cb:59:6a:45:3b:1e:e7:54:9e:
8e:b8:c2:0c:c8:84:c9:08:52:92:bf:9c:c9:8a:9b:3f:fd:da:
75:1f:49:66:d8:e5:9e:48:3f:cd:90:19:84:1f:5b:2a:17:97:
b5:ce:ff:4c:7f:ef:c6:59:56:61:63:d8:5f:22:b2:97:1b:bd:
6c:5f:8c:a3:7c:9b:d2:3e:04:75:35:87:f8:ee:e6:6d:ea:87:
c4:bc:0a:61:3a:91:1e:f6:51:bf:fb:b0:9c:cd:0c:b7:2f:d1:
55:2a:ac:c4:07:7b:84:28:7d:69:e5:b1:6d:ee:b4:86:64:a8:
9d:28:59:98:c8:e1:c8:57:99:d1:20:33:e3:14:da:93:3d:df:
fb:65:36:41:67:7c:60:14:50:43:df:4e:bf:17:b8:93:d2:21:
c7:74:b8:a2:29:e8:79:c3:99:1b:62:60:f1:3a:e6:a7:e7:7d:
8e:7b:b4:f3:4e:f6:f1:80:5a:e5:56:ac:b9:04:69:7d:f4:6b:
ad:ec:41:29:d8:9f:72:e1:38:9a:33:e9:b6:80:62:ec:23:0e:
f0:45:d6:b4:4e:0d:63:5a:3d:28:7f:da:2e:a3:8b:00:64:33:
c2:0e:31:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoNOVhXg7P+CZtOqMJuelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0
Yzc2NjQwHhcNMjUwOTA3MTAwMjQ2WhcNMjUwOTA4MTAwMjQ2WjAzMTEwLwYDVQQD
Eyg4ZWMxNDk1YWY4MGUxMGMyZTM2ZGM5MzRjMTgwODcxZTA0NzgwNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y30MXDuOahtJNXnBIFKZsahE0nM
K7ANgEHbtAMyLcDeGrBCrZybgKbtVrWnX9Zp1Qif8x5wTEy+K3EoLrDj9G+4CEWB
/RuqGm44Q3xKUaqQMTzJMH7vOESllY0vqA4xiII+G4Mc46pa8xAwQRO4RWyAhjAi
DVVtqh1CBf1l5ovoT7ozjfY20JpQio8LViYGD+gBPMyasngOxki1hZ2wZ97neYAi
vgfjJQrKPrjxcEigKVkZs1LiSsx7YyUwFXuWYkR7UMn8gB5PT6Bl91eGKN4DyboR
MQ2HVwoLgZ2awlluZJtG1GM70zrAH4Rd49LdlKx7Yw38FYCSFaMJUy5SzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7BSVr4DhDC423JNMGAhx4EeAYfMB8GA1UdIwQY
MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt
ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl
LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6fRAgIf
jO8OP5RImb2bbPyBh0jFJJptVCZ6y1lqRTse51SejrjCDMiEyQhSkr+cyYqbP/3a
dR9JZtjlnkg/zZAZhB9bKheXtc7/TH/vxllWYWPYXyKylxu9bF+Mo3yb0j4EdTWH
+O7mbeqHxLwKYTqRHvZRv/uwnM0Mty/RVSqsxAd7hCh9aeWxbe60hmSonShZmMjh
yFeZ0SAz4xTakz3f+2U2QWd8YBRQQ99Ovxe4k9Ihx3S4oinoecOZG2Jg8Trmp+d9
jnu080728YBa5VasuQRpffRrrexBKdifcuE4mjPptoBi7CMO8EXWtE4NY1o9KH/a
LqOLAGQzwg4xsQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client