Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: dw+5haf7iVL+ctTV5qJMBSP+klqVVKw16H8ekiT9T2Q=
Subject key identifier: 51:28:29:D4:AF:02:A0:75:10:DC:9A:70:C8:B9:4F:C5:70:E3:FC:EB
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019923A0D156DA382DAA0A774F6614BBE85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0BD8
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: JVlJD4iUfU3Lh72ICUDtZLCyar/br8kyjJvkFiIGhjc=)
2: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (hash: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d1:56:da:38:2d:aa:0a:77:4f:66:14:bb:e8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=512829d4af02a07510dc9a70c8b94fc570e3fceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:94:9c:1b:f7:b7:e0:30:3e:05:99:40:8e:
8f:9a:91:6f:ad:08:ac:b5:d0:14:85:00:3a:3d:6f:
f5:1a:c7:7d:35:8f:f4:e9:f0:68:6a:f2:d2:dd:d1:
1f:33:c2:f9:5c:fe:2a:49:5a:b2:fd:ce:d7:3d:09:
84:c4:7e:4b:56:4b:b6:0c:9e:a6:b4:5d:2e:54:33:
dd:a8:09:fd:79:b0:81:c0:58:3a:d1:8a:f8:d7:91:
55:93:59:fd:f6:bd:fd:3c:45:3d:9a:6d:03:8b:b5:
08:84:09:6f:8b:87:19:53:47:9e:d3:1e:3f:30:97:
5c:3e:bd:fd:eb:6a:30:29:2d:16:9b:5f:aa:51:76:
2c:ef:96:2c:7b:19:e9:7a:ef:b0:67:ed:f5:6e:fb:
d3:f2:33:f4:42:9c:d0:6b:fc:a2:15:0b:a4:aa:dd:
ee:2f:c5:56:3d:bd:3d:15:e7:f2:c9:49:b1:fa:91:
f4:5d:f3:a5:01:b8:c7:31:e1:77:c8:cb:4d:4c:92:
b3:61:16:21:63:5f:19:c1:76:7f:a5:e9:97:cf:44:
3c:54:83:4e:6d:1f:4c:6a:c1:8b:ef:51:0a:e1:b4:
88:41:14:4c:43:1e:03:6d:b3:db:8d:f6:ad:8a:77:
1d:a2:b9:2f:ca:81:eb:d2:c9:50:31:86:43:2d:11:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:29:D4:AF:02:A0:75:10:DC:9A:70:C8:B9:4F:C5:70:E3:FC:EB
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d5:18:f5:05:5e:ad:cb:9f:c0:d1:03:06:f6:e5:d4:85:99:
05:19:8b:01:ce:13:ba:a5:04:b5:e1:33:a8:4b:26:59:53:1b:
f3:3a:fd:84:75:fa:bf:e1:42:ba:6d:46:a8:bd:97:8b:c9:f0:
91:66:9d:aa:ac:bb:d6:9c:bb:b4:5f:26:19:7c:f3:dd:55:5a:
ff:90:5b:62:c7:2d:41:7e:05:09:9d:de:39:c7:df:5e:74:65:
84:25:0a:de:cf:b1:8d:28:cf:73:da:26:d8:0f:cd:97:85:4a:
b9:f5:2b:35:47:af:19:71:1d:de:13:ae:81:8e:c3:da:c9:61:
97:62:a1:74:a5:68:3c:50:40:4c:32:4d:f8:a7:6c:c2:31:8d:
6d:67:5d:29:7e:26:e5:65:cb:c9:77:0f:b8:c2:a2:ad:30:02:
85:90:fd:87:51:f2:e4:f3:e8:30:73:a5:59:5a:f7:5d:72:45:
cf:38:c2:4b:ec:81:98:02:71:8e:ac:29:94:4c:6e:32:e5:cc:
2f:c9:0c:a0:6c:85:3b:a6:88:28:3e:21:5a:0f:02:69:0a:fe:
c7:d2:91:c7:31:cf:5f:8b:02:a9:07:df:05:c0:e7:cd:38:39:
4f:24:33:36:f8:74:41:b3:2c:ac:fe:0f:fd:d0:bc:38:b9:0c:
78:33:9e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoNFW2jgtqgp3T2YUu+hcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWI0NGUyYzA1N2YwMWE5OTI2MWY5NGJiZjZkYTFiZjE4
NjVmMzkwHhcNMjUwOTA3MTAwMjQ1WhcNMjUwOTA4MTAwMjQ1WjAzMTEwLwYDVQQD
Eyg1MTI4MjlkNGFmMDJhMDc1MTBkYzlhNzBjOGI5NGZjNTcwZTNmY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKeUnBv3t+AwPgWZQI6PmpFvrQis
tdAUhQA6PW/1Gsd9NY/06fBoavLS3dEfM8L5XP4qSVqy/c7XPQmExH5LVku2DJ6m
tF0uVDPdqAn9ebCBwFg60Yr415FVk1n99r39PEU9mm0Di7UIhAlvi4cZU0ee0x4/
MJdcPr3962owKS0Wm1+qUXYs75Ysexnpeu+wZ+31bvvT8jP0QpzQa/yiFQukqt3u
L8VWPb09FefyyUmx+pH0XfOlAbjHMeF3yMtNTJKzYRYhY18ZwXZ/pemXz0Q8VINO
bR9MasGL71EK4bSIQRRMQx4DbbPbjfatincdorkvyoHr0slQMYZDLRHakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEoKdSvAqB1ENyacMi5T8Vw4/zrMB8GA1UdIwQY
MBaAFNibROLAV/AamSYflLv22hvxhl85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTkt
YjYwZmJiMTRjMTlkLzEvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTktYjYwZmJiMTRjMTlk
LzEvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidUY9QVe
rcufwNEDBvbl1IWZBRmLAc4TuqUEteEzqEsmWVMb8zr9hHX6v+FCum1GqL2Xi8nw
kWadqqy71py7tF8mGXzz3VVa/5BbYsctQX4FCZ3eOcffXnRlhCUK3s+xjSjPc9om
2A/Nl4VKufUrNUevGXEd3hOugY7D2slhl2KhdKVoPFBATDJN+KdswjGNbWddKX4m
5WXLyXcPuMKirTAChZD9h1Hy5PPoMHOlWVr3XXJFzzjCS+yBmAJxjqwplExuMuXM
L8kMoGyFO6aIKD4hWg8CaQr+x9KRxzHPX4sCqQffBcDnzTg5TyQzNvh0QbMsrP4P
/dC8OLkMeDOejQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:16 2025 by rpki-client