Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: KtROWOtV4uIopCk292QQ9/lgBbjDRsWMv66CoH344Fs=
Subject key identifier: B8:37:16:C5:1F:77:F2:D7:5F:7F:60:54:A9:EF:79:88:39:60:07:AC
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 019921E7E0141069014045AC0842EC4BE571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 02:01:08 +0000
Manifest this update: Sun 07 Sep 2025 02:01:08 +0000
Manifest next update: Mon 08 Sep 2025 02:01:08 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: yChQmgUyAqy3VIx2OccJDfO15eLuVCnyFR0ka40bKxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e0:14:10:69:01:40:45:ac:08:42:ec:4b:e5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Sep 7 02:01:08 2025 GMT
Not After : Sep 8 02:01:08 2025 GMT
Subject: CN=b83716c51f77f2d75f7f6054a9ef7988396007ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:0a:3e:3e:d2:cd:41:51:9c:07:ed:82:3c:
1d:11:17:65:eb:ab:c4:f6:55:3b:65:09:10:73:f4:
1f:9b:58:97:67:2f:04:bc:92:b9:75:ac:42:c5:51:
2e:5c:b0:c1:ae:9f:57:b1:ea:5c:3d:e8:7c:33:4a:
53:4c:dc:ce:c8:79:17:ed:ec:8d:28:d3:12:c4:0a:
06:91:d6:4f:ea:bb:79:11:d1:62:0d:6a:fe:97:23:
f6:b8:a6:68:b9:a3:0a:d2:60:78:ed:66:40:e0:7c:
e4:c8:78:ed:c4:24:3b:17:4a:34:70:5a:5b:f1:d5:
6b:1e:0d:84:cd:01:83:34:5a:5d:2a:93:f2:59:0e:
70:e0:6f:4f:c7:6f:cb:63:13:8d:62:5f:b9:e2:9f:
d2:d3:9a:c3:48:86:bf:6a:3a:46:b0:bd:c1:2e:02:
ed:12:ec:a4:3e:fa:91:1e:01:92:8c:ac:c8:43:f9:
51:66:55:24:70:d6:42:4d:db:be:22:29:3d:70:54:
2b:99:51:e8:ef:e3:25:7c:b5:e9:c4:8a:81:6a:18:
5c:5f:80:6a:e2:12:73:9e:af:95:ac:1f:fb:f6:bd:
a4:3e:ae:75:58:35:6d:80:9e:41:d4:16:bc:30:c8:
bf:07:82:18:bf:d6:79:c5:14:8b:1c:32:b5:6e:a2:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:16:C5:1F:77:F2:D7:5F:7F:60:54:A9:EF:79:88:39:60:07:AC
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:9b:30:c5:89:c2:13:72:87:58:61:80:49:46:68:c8:77:
d3:cc:4b:d2:71:8a:24:0e:9b:1b:7b:b6:eb:e6:28:c4:6d:4e:
ce:d6:15:f8:fd:07:06:0c:6c:f3:e2:18:7c:3c:fe:2e:67:0c:
2f:32:18:a2:4f:4f:ee:d7:5e:12:2b:9a:4f:57:25:1a:e1:e1:
e9:46:ac:06:21:6c:8e:95:57:df:e8:dd:1d:97:f4:68:f7:3f:
22:48:53:e8:e2:26:bf:90:8f:33:49:0b:3a:dd:28:1d:59:a7:
5e:dd:c0:18:8b:bd:92:f0:61:89:f9:f9:b4:12:58:3e:3f:09:
eb:4c:e1:20:aa:5b:82:ad:18:a9:9e:26:31:94:7f:76:e3:57:
69:57:7e:65:55:f8:c2:c6:04:b2:0c:28:48:0f:7e:18:69:e4:
4e:be:12:b6:b9:75:01:bb:e6:b4:a6:76:2d:c5:b5:7b:9b:cd:
bb:55:c9:fa:53:c0:c4:46:fd:58:bf:aa:0e:43:13:40:15:a3:
53:c3:d4:c6:58:1c:07:56:f5:74:50:b0:e0:eb:8d:5e:76:1b:
aa:a3:b0:5e:66:db:20:08:27:75:51:8d:39:d9:6a:40:eb:a3:
fc:26:8f:52:b1:70:59:5e:6d:3c:c9:b5:88:36:5e:d9:7d:5c:
d0:b3:e2:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5+AUEGkBQEWsCELsS+VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh
Yzc3MzIwHhcNMjUwOTA3MDIwMTA4WhcNMjUwOTA4MDIwMTA4WjAzMTEwLwYDVQQD
EyhiODM3MTZjNTFmNzdmMmQ3NWY3ZjYwNTRhOWVmNzk4ODM5NjAwN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ysKPj7SzUFRnAftgjwdERdl66vE
9lU7ZQkQc/Qfm1iXZy8EvJK5daxCxVEuXLDBrp9XsepcPeh8M0pTTNzOyHkX7eyN
KNMSxAoGkdZP6rt5EdFiDWr+lyP2uKZouaMK0mB47WZA4HzkyHjtxCQ7F0o0cFpb
8dVrHg2EzQGDNFpdKpPyWQ5w4G9Px2/LYxONYl+54p/S05rDSIa/ajpGsL3BLgLt
EuykPvqRHgGSjKzIQ/lRZlUkcNZCTdu+Iik9cFQrmVHo7+MlfLXpxIqBahhcX4Bq
4hJznq+VrB/79r2kPq51WDVtgJ5B1Ba8MMi/B4IYv9Z5xRSLHDK1bqK9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg3FsUfd/LXX39gVKnveYg5YAesMB8GA1UdIwQY
MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt
MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi
LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm6bMMWJ
whNyh1hhgElGaMh308xL0nGKJA6bG3u26+YoxG1OztYV+P0HBgxs8+IYfDz+LmcM
LzIYok9P7tdeEiuaT1clGuHh6UasBiFsjpVX3+jdHZf0aPc/IkhT6OImv5CPM0kL
Ot0oHVmnXt3AGIu9kvBhifn5tBJYPj8J60zhIKpbgq0YqZ4mMZR/duNXaVd+ZVX4
wsYEsgwoSA9+GGnkTr4Strl1AbvmtKZ2LcW1e5vNu1XJ+lPAxEb9WL+qDkMTQBWj
U8PUxlgcB1b1dFCw4OuNXnYbqqOwXmbbIAgndVGNOdlqQOuj/CaPUrFwWV5tPMm1
iDZe2X1c0LPiww==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client