Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier: aa8nS7TOnDRCAzMim0/B+DLR6l4uXCSgx2aNVD1khz8=
Subject key identifier: DF:7B:1D:7D:A3:04:58:10:59:FE:C5:B8:83:08:18:10:57:9B:F5:0E
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 0199345B4BD374FA381239DF459D717B5CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number: 0D9C
Signing time: Wed 10 Sep 2025 16:00:22 +0000
Manifest this update: Wed 10 Sep 2025 16:00:22 +0000
Manifest next update: Thu 11 Sep 2025 16:00:22 +0000
Files and hashes: 1: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: bbJ51U+fxRdYsrf4KI1Z12vLhuW6Dm4NdM0oIMML6AA=)
2: GhbIbk50hv6g93dh7hGhzK6K_74.roa (hash: nXi3Gj76e6GTyqlSijwexlGEZ4aKaxuj/QihrtfAHS8=)
3: R5r0xeVYQuyhFWywaHju63NvX88.roa (hash: gil6oFrijLp6JqgDOMjfduAOivvAur9Q9eunuVq1Ysg=)
4: TofwY-R4zO7hCFwhNRcFqFccDIA.roa (hash: CO89XYgmv4EUpm6JNaIOn/T7FUsKcLGJGFWRoloHQXo=)
5: kEveC8WkpMXtAhCjQYal_7N8cqU.roa (hash: 36t2IiG5a0ru6GNWxSIKI2twOH4WabuzXbDN7PDUMCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:4b:d3:74:fa:38:12:39:df:45:9d:71:7b:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Sep 10 16:00:22 2025 GMT
Not After : Sep 11 16:00:22 2025 GMT
Subject: CN=df7b1d7da304581059fec5b883081810579bf50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:50:f2:09:8b:f7:54:a9:cd:f1:fc:7c:04:
43:00:db:96:f9:97:9a:c4:43:98:7c:90:c3:8b:84:
bb:07:90:05:e1:57:37:e1:e4:0b:76:16:3d:a8:75:
e1:9b:2c:65:48:2a:f6:b3:94:f6:c4:4a:c0:a9:7a:
63:61:fb:88:0b:72:25:88:8e:bc:f3:e4:76:84:e3:
08:60:1b:8f:67:f1:85:c8:a5:e1:03:61:70:40:c6:
d0:b3:ca:55:df:e8:06:b7:5b:b9:71:da:2b:d3:0b:
bb:01:65:f0:af:39:08:54:a7:a1:c0:2d:49:8a:16:
6c:2f:05:81:c1:54:37:96:1e:20:58:96:d2:28:70:
8e:bf:10:66:ba:f0:ef:98:d8:92:be:98:f0:80:99:
f4:ba:c7:71:d9:be:0c:f5:0e:47:f8:ca:69:3b:59:
04:4d:cf:4a:9a:51:34:e1:f1:dc:ca:7d:80:57:11:
1d:01:a5:46:89:ba:a6:3d:da:f3:5c:c1:68:cf:b6:
09:02:4e:b4:38:d1:0c:45:8f:b5:22:01:5c:b3:04:
6e:b3:1b:03:d2:38:cb:6b:eb:ec:84:7a:30:6b:13:
1a:c0:01:f7:d7:3f:75:90:cf:80:e0:a5:87:24:4e:
66:3d:a8:2b:ac:21:06:06:8d:55:20:c0:0d:44:6b:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:1D:7D:A3:04:58:10:59:FE:C5:B8:83:08:18:10:57:9B:F5:0E
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:22:c6:6c:d7:9c:6b:3f:2c:19:aa:5f:c3:b0:c7:d6:72:
c2:75:1c:13:43:2d:b0:17:b3:7f:62:7e:02:7c:84:3f:f3:33:
5e:36:62:02:b1:04:93:1d:ac:f4:fa:9b:cd:d1:55:c2:e6:04:
1a:4a:75:6f:37:c5:e1:11:69:77:a0:8b:ae:84:c8:d6:5e:54:
53:1b:d9:65:8e:fd:49:34:23:d8:bc:8f:21:8d:e8:b0:3b:f0:
19:a5:83:3a:2e:d7:ef:21:e4:fc:5a:5b:40:54:79:eb:22:0e:
8d:6f:6f:ff:70:60:69:58:56:cf:de:cb:99:75:a9:3d:73:ee:
bc:e0:a5:3e:3c:cb:c0:32:f4:ee:4a:a3:ec:99:f7:fc:b0:33:
12:4d:dc:49:f1:2a:31:c9:17:6a:71:f9:0f:2f:57:3e:9d:cb:
2b:48:45:79:fb:d4:09:4f:f8:ad:ea:1c:7d:0a:89:68:85:d7:
5d:bd:be:00:4a:e9:16:09:94:12:7c:0b:51:3d:08:b4:35:2c:
6c:3a:0f:08:c7:84:6a:9f:63:46:d8:83:80:90:e6:5b:3b:ae:
5d:14:d3:db:fa:89:27:7e:ce:8c:5a:e9:5a:2a:c1:81:5a:23:
28:68:6d:87:71:10:2b:0a:c3:ed:94:25:3c:47:84:01:c7:d4:
91:87:db:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W0vTdPo4EjnfRZ1xe1zrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl
YjA4ODgwHhcNMjUwOTEwMTYwMDIyWhcNMjUwOTExMTYwMDIyWjAzMTEwLwYDVQQD
EyhkZjdiMWQ3ZGEzMDQ1ODEwNTlmZWM1Yjg4MzA4MTgxMDU3OWJmNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsNQ8gmL91SpzfH8fARDANuW+Zea
xEOYfJDDi4S7B5AF4Vc34eQLdhY9qHXhmyxlSCr2s5T2xErAqXpjYfuIC3IliI68
8+R2hOMIYBuPZ/GFyKXhA2FwQMbQs8pV3+gGt1u5cdor0wu7AWXwrzkIVKehwC1J
ihZsLwWBwVQ3lh4gWJbSKHCOvxBmuvDvmNiSvpjwgJn0usdx2b4M9Q5H+MppO1kE
Tc9KmlE04fHcyn2AVxEdAaVGibqmPdrzXMFoz7YJAk60ONEMRY+1IgFcswRusxsD
0jjLa+vshHowaxMawAH31z91kM+A4KWHJE5mPagrrCEGBo1VIMANRGvYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN97HX2jBFgQWf7FuIMIGBBXm/UOMB8GA1UdIwQY
MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt
YzI2NDczODVlNzI3LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3
LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+YixmzX
nGs/LBmqX8Owx9ZywnUcE0MtsBezf2J+AnyEP/MzXjZiArEEkx2s9PqbzdFVwuYE
Gkp1bzfF4RFpd6CLroTI1l5UUxvZZY79STQj2LyPIY3osDvwGaWDOi7X7yHk/Fpb
QFR56yIOjW9v/3BgaVhWz97LmXWpPXPuvOClPjzLwDL07kqj7Jn3/LAzEk3cSfEq
MckXanH5Dy9XPp3LK0hFefvUCU/4reocfQqJaIXXXb2+AErpFgmUEnwLUT0ItDUs
bDoPCMeEap9jRtiDgJDmWzuuXRTT2/qJJ37OjFrpWirBgVojKGhth3EQKwrD7ZQl
PEeEAcfUkYfbmg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:21:21 2025 by rpki-client