Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: 7OVZXLdNhKYvOxHJCyDUzBtGY+tVHZ9GwHBnLIN6y5w=
Subject key identifier: F3:09:08:B0:6F:21:63:AF:E1:4D:1E:CA:BB:FE:C0:BD:BD:F6:8E:C0
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 0199228D0CFC5D9F331AFEDAF05F20DF7A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0C4A
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: aIl2iw3mT7XUHnrrbDqW0NbZ4IF3pCk4s1J87S4SZsM=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0c:fc:5d:9f:33:1a:fe:da:f0:5f:20:df:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=f30908b06f2163afe14d1ecabbfec0bdbdf68ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:ed:10:7d:40:8d:79:56:f1:b2:36:e6:d7:
59:88:cb:ea:04:5e:82:dc:d1:c2:92:84:eb:b0:e7:
ce:15:eb:8c:d1:e9:5c:f9:bc:04:90:55:ee:57:ca:
54:e0:32:49:f9:8a:c2:4e:d6:7c:68:2d:04:9a:fd:
7b:72:75:33:37:04:88:ce:fe:fe:16:6e:27:09:32:
2f:05:9c:a4:3f:8b:27:42:a8:08:1c:d8:16:02:fc:
f3:d1:b5:1c:a4:73:ea:30:6c:f6:3a:29:c1:11:09:
5a:cc:55:14:df:fc:77:e2:f5:fb:72:ff:fb:99:06:
69:9e:eb:39:34:20:87:45:0e:3a:41:cb:87:b1:b7:
c1:f6:a9:8d:3c:55:04:cf:4b:54:3c:69:3e:9e:69:
9c:a7:a1:27:45:c2:b3:a1:78:74:17:6b:23:f2:2f:
18:cb:e3:93:1d:b3:9a:21:c2:1f:a1:30:16:8f:9f:
af:33:2c:a6:a2:97:1f:3d:ce:c1:9d:fc:0d:56:ac:
8c:00:5e:e6:23:72:e3:f3:db:d8:55:f2:33:67:62:
5e:a2:94:2d:94:9f:2d:ba:6d:42:38:1c:9c:10:ee:
5e:68:dd:1c:92:c1:49:91:02:19:ee:a0:6e:f6:02:
96:f0:9a:7b:07:0a:c7:d6:44:81:3e:87:83:04:7e:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:08:B0:6F:21:63:AF:E1:4D:1E:CA:BB:FE:C0:BD:BD:F6:8E:C0
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:22:df:94:c6:15:b4:3c:fc:aa:5d:91:f0:54:12:bf:15:7e:
e8:0d:4d:26:ca:09:19:bc:90:74:66:ec:06:2f:27:f4:d8:f3:
a5:6b:d2:27:a9:a9:8a:67:79:11:63:93:a3:3f:0a:43:87:ff:
86:78:d9:09:ad:c0:3f:52:6a:b0:42:ea:f3:3a:1b:5e:a9:e7:
f0:26:49:39:ab:54:38:00:28:2b:69:52:b6:16:ab:7b:cb:3f:
ca:2c:f4:12:b2:42:b5:68:45:2e:dc:d4:75:c5:eb:05:b9:98:
43:71:ae:e8:ec:6f:7d:9e:27:70:96:68:1a:a4:a5:49:d0:ed:
a7:d2:80:ed:40:5b:15:e0:7e:aa:13:72:ad:4c:ca:38:d3:70:
91:8f:f2:92:9d:9e:0c:1b:fe:ce:1a:b3:fc:65:f6:51:0f:25:
22:2f:dd:29:87:fc:34:82:d1:e0:d1:8e:73:bc:ad:35:f3:fd:
b9:e9:80:09:bd:26:90:60:b4:d4:50:e8:1a:79:cf:c9:4f:51:
5d:d7:a9:f3:d2:73:a0:dd:2a:19:3a:80:ea:7b:66:31:e2:15:
8f:81:93:0f:1c:4c:1a:67:d6:a2:1c:ca:73:ef:81:67:81:8d:
62:6f:5d:fc:d2:1f:0f:05:ea:e0:07:f0:60:de:35:1d:9d:b4:
d9:9e:3a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijQz8XZ8zGv7a8F8g33qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjUwOTA3MDUwMTMzWhcNMjUwOTA4MDUwMTMzWjAzMTEwLwYDVQQD
EyhmMzA5MDhiMDZmMjE2M2FmZTE0ZDFlY2FiYmZlYzBiZGJkZjY4ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/tEH1AjXlW8bI25tdZiMvqBF6C
3NHCkoTrsOfOFeuM0elc+bwEkFXuV8pU4DJJ+YrCTtZ8aC0Emv17cnUzNwSIzv7+
Fm4nCTIvBZykP4snQqgIHNgWAvzz0bUcpHPqMGz2OinBEQlazFUU3/x34vX7cv/7
mQZpnus5NCCHRQ46QcuHsbfB9qmNPFUEz0tUPGk+nmmcp6EnRcKzoXh0F2sj8i8Y
y+OTHbOaIcIfoTAWj5+vMyymopcfPc7BnfwNVqyMAF7mI3Lj89vYVfIzZ2JeopQt
lJ8tum1COBycEO5eaN0cksFJkQIZ7qBu9gKW8Jp7BwrH1kSBPoeDBH4ucQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMJCLBvIWOv4U0eyrv+wL299o7AMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESLflMYV
tDz8ql2R8FQSvxV+6A1NJsoJGbyQdGbsBi8n9NjzpWvSJ6mpimd5EWOToz8KQ4f/
hnjZCa3AP1JqsELq8zobXqnn8CZJOatUOAAoK2lSthare8s/yiz0ErJCtWhFLtzU
dcXrBbmYQ3Gu6OxvfZ4ncJZoGqSlSdDtp9KA7UBbFeB+qhNyrUzKONNwkY/ykp2e
DBv+zhqz/GX2UQ8lIi/dKYf8NILR4NGOc7ytNfP9uemACb0mkGC01FDoGnnPyU9R
Xdep89JzoN0qGTqA6ntmMeIVj4GTDxxMGmfWohzKc++BZ4GNYm9d/NIfDwXq4Afw
YN41HZ202Z46mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:12 2025 by rpki-client