Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: nzB43dc3pLqD8XlNqtShOd6d80+IVohGrkSz5B+DV7I=
Subject key identifier: BC:0A:8D:9A:16:83:F2:8A:DF:5C:D0:12:C5:FD:99:61:2E:A7:C8:8B
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019936F0AF159E46DCE6B759391DDAEE3817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0D27
Signing time: Thu 11 Sep 2025 04:02:47 +0000
Manifest this update: Thu 11 Sep 2025 04:02:47 +0000
Manifest next update: Fri 12 Sep 2025 04:02:47 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: L1kmQSfnFvvWTyXW/0mbfLwanCUbBAvGaDPhKV9FN+g=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:af:15:9e:46:dc:e6:b7:59:39:1d:da:ee:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Sep 11 04:02:47 2025 GMT
Not After : Sep 12 04:02:47 2025 GMT
Subject: CN=bc0a8d9a1683f28adf5cd012c5fd99612ea7c88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:aa:01:c6:84:96:19:03:29:05:fb:fe:05:
49:d4:58:3c:52:75:7f:46:e0:55:ec:62:5b:27:7d:
f3:38:b8:0b:07:d4:32:f0:4c:6b:ef:fb:0c:3e:4b:
af:13:b7:87:60:1c:fb:0e:be:0a:c2:e0:e7:75:a2:
18:67:13:27:97:49:03:40:bb:65:05:2c:42:df:cb:
78:09:34:53:e8:70:25:24:4e:4b:fa:a2:21:45:96:
2e:f6:8d:b7:2a:c3:ce:88:a6:57:4f:25:63:dd:69:
9c:28:f1:3a:e1:93:b5:d3:fa:a4:5b:e9:1e:da:f5:
bb:24:0c:01:ad:5f:e3:65:fc:cf:97:bb:b1:76:9b:
34:65:0a:db:4a:34:93:a8:12:d4:89:71:09:3f:e6:
b1:68:3b:d7:d7:88:10:37:87:34:e4:a6:0c:ee:9b:
4f:61:6a:88:a5:37:e4:86:17:3c:2f:0b:c0:92:0d:
16:d5:02:13:86:f8:cf:52:a5:87:25:b0:83:f3:e6:
66:bc:71:7e:81:c1:0f:a5:07:3b:b9:89:08:36:78:
c9:14:e1:6d:bb:88:d6:26:12:44:fb:d5:3f:2c:8b:
9a:ad:b0:fb:0a:08:00:f1:54:40:91:bd:95:d1:7d:
2b:d1:34:e7:a8:11:47:bb:e2:93:22:52:0a:8a:d6:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:8D:9A:16:83:F2:8A:DF:5C:D0:12:C5:FD:99:61:2E:A7:C8:8B
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:86:91:46:b5:ed:64:37:c9:11:b8:d6:81:ab:93:1f:53:
e7:a4:9a:a3:fc:ab:1f:ef:03:8b:4b:9c:86:1a:0d:44:28:10:
f7:41:ed:83:57:89:d3:0b:5f:22:0a:ba:79:80:ef:d6:7a:f5:
2f:62:e1:90:33:68:10:f3:d2:c7:79:c1:72:47:b9:3b:af:ce:
42:63:70:fa:13:02:91:03:eb:60:c5:76:56:27:0c:fb:12:d7:
5b:c0:3b:97:b3:de:c7:6b:f4:fb:ed:2d:7b:86:64:c5:f8:4c:
a4:09:56:66:04:6e:46:e2:5c:b3:17:b9:3c:30:96:5f:25:02:
51:83:ac:1e:87:ed:48:0a:d2:43:c1:ac:50:15:b4:83:cf:43:
54:67:88:08:98:ff:c4:6f:81:3d:c5:c9:e8:32:5a:ce:bc:86:
c5:67:fb:aa:92:ae:bb:02:83:82:95:6a:fa:72:94:b8:f6:e2:
d7:df:1f:b6:30:08:be:40:17:1a:04:9a:65:32:4d:9f:46:c0:
73:3d:ca:b5:8a:15:e9:85:f3:64:44:be:2f:b6:0b:d1:c5:47:
4f:1a:cc:8c:4d:5c:04:aa:1f:36:7f:13:30:c3:cb:ed:5f:c7:
50:69:37:d8:5e:85:f9:4f:ad:55:2a:1e:0e:40:ca:02:e9:c8:
aa:23:ac:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk28K8Vnkbc5rdZOR3a7jgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjUwOTExMDQwMjQ3WhcNMjUwOTEyMDQwMjQ3WjAzMTEwLwYDVQQD
EyhiYzBhOGQ5YTE2ODNmMjhhZGY1Y2QwMTJjNWZkOTk2MTJlYTdjODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAGqAcaElhkDKQX7/gVJ1Fg8UnV/
RuBV7GJbJ33zOLgLB9Qy8Exr7/sMPkuvE7eHYBz7Dr4KwuDndaIYZxMnl0kDQLtl
BSxC38t4CTRT6HAlJE5L+qIhRZYu9o23KsPOiKZXTyVj3WmcKPE64ZO10/qkW+ke
2vW7JAwBrV/jZfzPl7uxdps0ZQrbSjSTqBLUiXEJP+axaDvX14gQN4c05KYM7ptP
YWqIpTfkhhc8LwvAkg0W1QIThvjPUqWHJbCD8+ZmvHF+gcEPpQc7uYkINnjJFOFt
u4jWJhJE+9U/LIuarbD7CggA8VRAkb2V0X0r0TTnqBFHu+KTIlIKitYiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwKjZoWg/KK31zQEsX9mWEup8iLMB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGaGkUa1
7WQ3yRG41oGrkx9T56Sao/yrH+8Di0uchhoNRCgQ90Htg1eJ0wtfIgq6eYDv1nr1
L2LhkDNoEPPSx3nBcke5O6/OQmNw+hMCkQPrYMV2VicM+xLXW8A7l7Pex2v0++0t
e4ZkxfhMpAlWZgRuRuJcsxe5PDCWXyUCUYOsHoftSArSQ8GsUBW0g89DVGeICJj/
xG+BPcXJ6DJazryGxWf7qpKuuwKDgpVq+nKUuPbi198ftjAIvkAXGgSaZTJNn0bA
cz3KtYoV6YXzZES+L7YL0cVHTxrMjE1cBKofNn8TMMPL7V/HUGk32F6F+U+tVSoe
DkDKAunIqiOs9g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 07:40:59 2025 by rpki-client