Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: F/kOlYfSSdm4WFjDztkUbV2Yuo+LPXRbZsHYLPAhIk0=
Subject key identifier: F6:75:D9:AC:15:15:53:D9:8F:BA:6D:11:FB:FB:9D:2B:D0:0A:F9:E5
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019921B206FA970349CD901345C5A7443E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:02:19 +0000
Manifest this update: Sun 07 Sep 2025 01:02:19 +0000
Manifest next update: Mon 08 Sep 2025 01:02:19 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: Dg00d39OiEV9s5PBcgPWnQ80dj9e3uqf2ob9AJs75Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:06:fa:97:03:49:cd:90:13:45:c5:a7:44:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Sep 7 01:02:19 2025 GMT
Not After : Sep 8 01:02:19 2025 GMT
Subject: CN=f675d9ac151553d98fba6d11fbfb9d2bd00af9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:7d:d8:27:8c:0a:7a:0b:e5:10:0d:3f:97:
d0:93:09:78:a6:82:7d:a4:ec:17:6b:c6:91:00:b3:
66:16:66:31:ce:51:29:53:8b:e4:55:e3:c9:cc:c2:
3b:ed:ec:b3:12:01:94:83:27:c2:bf:45:0c:9a:ef:
50:8b:17:54:68:22:84:2e:b6:98:bc:63:2f:04:5e:
5b:40:51:97:fa:48:7c:d0:2c:c1:ad:38:32:75:e2:
82:9b:25:6a:0d:93:64:2c:29:c5:bd:75:b9:73:86:
04:c4:f2:73:0a:7f:e0:b9:e7:6a:66:f5:5c:63:bf:
f0:2e:11:62:bb:57:78:c1:da:c4:05:d4:76:71:e6:
a4:c5:95:ac:5c:fe:7d:fc:43:e5:da:6e:4c:ef:8c:
59:2c:a0:c2:b5:62:88:c3:80:a0:41:a1:b1:f9:ce:
a4:24:f6:3f:55:aa:4e:7e:7b:76:0b:eb:43:57:88:
e8:4b:47:ae:ab:da:d8:b2:d8:f3:6c:b6:74:3d:3a:
4f:a7:8a:33:a2:81:ce:66:90:ce:2e:2b:eb:16:49:
08:22:18:d9:96:65:d4:2d:a8:15:f7:5d:f3:5b:e7:
3a:bc:f3:85:13:ef:ad:b5:40:e5:af:21:aa:0e:d8:
95:8c:68:46:b4:85:0f:db:16:de:9d:71:5c:ee:a8:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:D9:AC:15:15:53:D9:8F:BA:6D:11:FB:FB:9D:2B:D0:0A:F9:E5
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:d2:8b:9e:f6:2a:d4:1c:7c:c1:b0:56:dc:ac:6b:af:bf:
cd:0a:94:28:e5:64:d0:58:85:48:c7:77:fb:ee:5e:c3:d0:46:
51:b0:83:33:47:c8:e9:91:bc:21:cd:d7:61:7e:cd:b0:26:2b:
1c:90:e0:24:e3:7e:0c:3b:f5:a2:d9:85:81:f8:a7:00:3a:76:
2a:a6:85:d0:76:d6:cb:56:1e:b6:84:38:69:2d:a1:24:9f:ac:
47:24:23:8a:cd:9e:eb:8b:72:5a:80:d4:e5:7a:8b:1a:67:1d:
ec:9a:ff:6a:d8:12:3b:29:f2:2b:ff:67:d9:f2:85:c7:a1:a6:
8e:1c:44:23:28:76:09:72:7f:34:a8:d5:56:fd:b4:56:c9:47:
3c:f9:67:67:a6:26:87:52:15:65:23:ea:a4:6d:d7:5d:31:a5:
d7:88:c8:f1:a6:88:b1:5a:a2:7d:75:3f:12:90:fc:92:d4:2f:
ef:c6:b1:f4:2c:8e:b2:00:68:63:13:42:ee:ae:72:88:fe:0c:
9a:cd:92:1d:1c:6e:ec:88:ff:c0:65:8c:3e:80:dc:3c:81:ff:
90:ca:ef:17:34:12:07:84:6c:d3:f6:fe:54:f6:09:ed:a6:b2:
ff:78:30:d9:12:69:d4:6c:68:d5:ab:e4:c8:6b:ab:d6:9b:c8:
40:31:8e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsgb6lwNJzZATRcWnRD6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk
M2EzNDcwHhcNMjUwOTA3MDEwMjE5WhcNMjUwOTA4MDEwMjE5WjAzMTEwLwYDVQQD
EyhmNjc1ZDlhYzE1MTU1M2Q5OGZiYTZkMTFmYmZiOWQyYmQwMGFmOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5t92CeMCnoL5RANP5fQkwl4poJ9
pOwXa8aRALNmFmYxzlEpU4vkVePJzMI77eyzEgGUgyfCv0UMmu9QixdUaCKELraY
vGMvBF5bQFGX+kh80CzBrTgydeKCmyVqDZNkLCnFvXW5c4YExPJzCn/guedqZvVc
Y7/wLhFiu1d4wdrEBdR2ceakxZWsXP59/EPl2m5M74xZLKDCtWKIw4CgQaGx+c6k
JPY/VapOfnt2C+tDV4joS0euq9rYstjzbLZ0PTpPp4ozooHOZpDOLivrFkkIIhjZ
lmXULagV913zW+c6vPOFE++ttUDlryGqDtiVjGhGtIUP2xbenXFc7qg1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ12awVFVPZj7ptEfv7nSvQCvnlMB8GA1UdIwQY
MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt
ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx
LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbc/Si572
KtQcfMGwVtysa6+/zQqUKOVk0FiFSMd3++5ew9BGUbCDM0fI6ZG8Ic3XYX7NsCYr
HJDgJON+DDv1otmFgfinADp2KqaF0HbWy1YetoQ4aS2hJJ+sRyQjis2e64tyWoDU
5XqLGmcd7Jr/atgSOynyK/9n2fKFx6GmjhxEIyh2CXJ/NKjVVv20VslHPPlnZ6Ym
h1IVZSPqpG3XXTGl14jI8aaIsVqifXU/EpD8ktQv78ax9CyOsgBoYxNC7q5yiP4M
ms2SHRxu7Ij/wGWMPoDcPIH/kMrvFzQSB4Rs0/b+VPYJ7aay/3gw2RJp1Gxo1avk
yGur1pvIQDGOhg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:01 2025 by rpki-client