Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: RsEQifSKaNMZX+6aw27OvKPRLTNLuI6moKFOeT2IDoM=
Subject key identifier: 01:51:32:4C:63:C1:AC:60:94:C7:85:97:FB:5D:D5:BA:B3:8C:B5:47
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 01992443899561D20694F2844210C91882A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 13:00:29 +0000
Manifest this update: Sun 07 Sep 2025 13:00:29 +0000
Manifest next update: Mon 08 Sep 2025 13:00:29 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: QZG5ONS+GRhgtfyQVFimk705d4AVZQZDXlva5yMTg7I=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:89:95:61:d2:06:94:f2:84:42:10:c9:18:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Sep 7 13:00:29 2025 GMT
Not After : Sep 8 13:00:29 2025 GMT
Subject: CN=0151324c63c1ac6094c78597fb5dd5bab38cb547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:c3:83:3f:28:44:72:ff:6b:b9:7d:9c:e2:
f4:1e:4e:4e:4d:55:fb:36:db:7f:56:35:63:a2:7b:
e7:b7:d8:ba:ec:e7:58:ab:9a:33:1a:e1:33:84:14:
a0:f0:3f:d8:0e:5e:da:3c:d5:28:4a:65:90:13:08:
e9:10:99:9f:fe:24:a5:d2:ea:ed:c7:50:dd:a6:e0:
a8:be:4c:10:af:57:66:4f:0b:93:50:0a:f8:f2:9e:
7d:4f:a4:0f:eb:73:d7:0b:af:7b:47:78:01:26:70:
75:70:61:2b:c6:d6:02:66:34:78:30:86:c6:bd:48:
11:db:e3:f4:53:c3:38:39:a9:89:2a:c2:6e:b8:b3:
58:0e:3f:0e:81:38:fc:c4:10:37:1a:a0:93:fc:57:
7c:18:8c:32:ce:93:62:1b:4e:41:b2:07:05:65:ed:
4c:4d:cb:4c:a1:bc:1e:2c:e0:bf:10:74:c2:01:df:
69:d3:aa:f6:40:75:f8:c4:97:c5:4b:ee:96:6d:43:
c6:cc:55:7f:f5:27:23:16:49:f8:6d:85:31:64:8a:
40:a2:58:96:84:fd:63:ac:45:6e:8a:7a:38:47:3c:
43:8d:95:08:72:1d:18:5f:e6:85:48:06:dc:dd:ea:
46:96:cd:cc:86:50:1e:f1:99:68:18:d4:d3:90:a3:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:51:32:4C:63:C1:AC:60:94:C7:85:97:FB:5D:D5:BA:B3:8C:B5:47
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:b6:5e:ea:f5:8c:16:08:f7:2a:a7:fe:c1:8f:24:f3:07:
51:e8:75:31:70:0a:2d:2f:d5:fd:36:6a:52:1f:ad:22:8f:23:
b0:13:58:1d:d4:3a:1d:9b:c3:8f:7f:41:25:bd:ec:57:3b:f1:
4d:90:05:d0:c2:b4:76:02:bd:6b:0f:cc:ef:5a:1b:79:86:fe:
9d:44:eb:da:03:7f:66:ed:7a:42:f5:00:34:e7:b4:17:f8:87:
29:19:72:ef:44:82:ee:9e:f6:0d:b5:30:5f:e4:f2:90:f7:23:
3e:1d:90:e4:84:35:cc:29:17:8c:2c:a2:24:32:44:b3:18:97:
3e:cc:c4:42:c5:f3:b0:82:18:10:e6:a9:e6:e1:4a:2b:a7:8e:
2d:24:d2:75:14:20:7e:64:5d:76:26:fd:5b:15:b4:88:51:1f:
01:71:7b:6d:bd:04:38:8a:ab:f5:7a:63:0f:68:f2:fd:d1:eb:
4f:55:76:de:e1:80:eb:ac:1b:06:86:e5:04:10:e0:5a:e7:53:
05:c6:7f:2f:61:fd:97:d5:9e:50:a5:45:ab:0a:62:d0:a1:7b:
82:1b:95:97:c7:e8:c5:67:f7:ac:c5:87:7c:00:94:6e:1f:1f:
03:36:e3:4a:85:0f:82:d5:d8:36:01:af:11:2c:aa:f5:df:18:
82:d0:6a:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ4mVYdIGlPKEQhDJGIKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw
MDc0MjYwHhcNMjUwOTA3MTMwMDI5WhcNMjUwOTA4MTMwMDI5WjAzMTEwLwYDVQQD
EygwMTUxMzI0YzYzYzFhYzYwOTRjNzg1OTdmYjVkZDViYWIzOGNiNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOfDgz8oRHL/a7l9nOL0Hk5OTVX7
Ntt/VjVjonvnt9i67OdYq5ozGuEzhBSg8D/YDl7aPNUoSmWQEwjpEJmf/iSl0urt
x1DdpuCovkwQr1dmTwuTUAr48p59T6QP63PXC697R3gBJnB1cGErxtYCZjR4MIbG
vUgR2+P0U8M4OamJKsJuuLNYDj8OgTj8xBA3GqCT/Fd8GIwyzpNiG05BsgcFZe1M
TctMobweLOC/EHTCAd9p06r2QHX4xJfFS+6WbUPGzFV/9ScjFkn4bYUxZIpAoliW
hP1jrEVuino4RzxDjZUIch0YX+aFSAbc3epGls3MhlAe8ZloGNTTkKP6FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFRMkxjwaxglMeFl/td1bqzjLVHMB8GA1UdIwQY
MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt
YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1
LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCe2Xur1
jBYI9yqn/sGPJPMHUeh1MXAKLS/V/TZqUh+tIo8jsBNYHdQ6HZvDj39BJb3sVzvx
TZAF0MK0dgK9aw/M71obeYb+nUTr2gN/Zu16QvUANOe0F/iHKRly70SC7p72DbUw
X+TykPcjPh2Q5IQ1zCkXjCyiJDJEsxiXPszEQsXzsIIYEOap5uFKK6eOLSTSdRQg
fmRddib9WxW0iFEfAXF7bb0EOIqr9XpjD2jy/dHrT1V23uGA66wbBoblBBDgWudT
BcZ/L2H9l9WeUKVFqwpi0KF7ghuVl8foxWf3rMWHfACUbh8fAzbjSoUPgtXYNgGv
ESyq9d8YgtBq3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client