Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: rgGPqgHWKE/n9Ay6LdxTNoOtawWblgdq/7QlJghqvKI=
Subject key identifier: E7:7D:D6:5D:47:A8:B2:34:8E:1B:32:43:E1:13:3D:EF:1E:5A:DC:15
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 019932A407D192798849435B8EAB5618FA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: 0141
Signing time: Wed 10 Sep 2025 08:00:34 +0000
Manifest this update: Wed 10 Sep 2025 08:00:34 +0000
Manifest next update: Thu 11 Sep 2025 08:00:34 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: uZ98WcJPsLd2GoQK1bMWXF3I2Qyv4L2A+QtlSqVdMlQ=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:07:d1:92:79:88:49:43:5b:8e:ab:56:18:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Sep 10 08:00:34 2025 GMT
Not After : Sep 11 08:00:34 2025 GMT
Subject: CN=e77dd65d47a8b2348e1b3243e1133def1e5adc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:47:68:dc:21:bb:76:21:52:46:9c:da:b5:
a4:5b:51:7f:2d:55:ec:6a:6b:c9:a1:be:28:76:1f:
4d:89:06:b6:71:db:c0:e0:c0:01:4e:2f:ff:eb:b8:
c4:ba:4e:35:14:ed:9c:b3:69:05:3b:ba:5a:d8:6d:
76:cd:3a:66:e3:ff:41:b0:6f:3c:6a:45:3b:dc:bf:
01:16:c9:bf:dc:21:8e:c8:6f:82:e7:65:8d:65:e2:
5e:34:30:f2:b7:67:26:e8:09:01:c3:57:2d:54:53:
26:cd:a7:19:68:92:2a:b2:ea:e9:b9:e1:f4:dd:fa:
b8:7a:66:3c:60:00:5c:22:15:45:a4:2a:ec:fb:54:
d8:bc:e5:07:cc:6f:41:3d:36:45:2f:5b:f7:a8:12:
88:ee:30:49:55:77:54:ea:e3:55:c9:17:9e:2c:06:
d2:90:c2:9d:9e:27:09:cb:ec:35:79:5c:77:92:35:
07:15:dc:4e:54:0d:bf:39:11:67:56:09:2b:25:01:
7d:ce:41:fd:f8:ec:5e:ae:9a:38:7d:49:35:40:93:
ec:75:e6:0e:4f:b1:5d:8c:e1:a2:8d:d3:fa:6f:db:
a9:23:6c:57:2b:27:80:c2:86:7c:75:14:22:5a:8d:
3c:d1:15:f6:97:3b:3b:0b:68:3e:51:2f:13:55:9c:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:D6:5D:47:A8:B2:34:8E:1B:32:43:E1:13:3D:EF:1E:5A:DC:15
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:fe:e2:e7:73:eb:38:34:31:f1:5e:60:42:12:0f:61:a8:
7a:cd:c3:e1:c6:a3:02:14:84:99:ea:6b:cc:09:8c:23:e4:f1:
e3:ca:8a:c6:00:f9:c2:ae:01:a7:60:bd:62:76:89:9f:69:22:
98:1c:7a:24:dc:61:2b:12:f3:86:7c:32:9b:dd:71:1b:ca:8c:
db:9f:17:20:cb:0e:71:c1:a9:4a:7b:72:59:c9:8e:df:7f:ec:
ca:e5:79:6f:d0:0b:b7:b3:97:e7:b7:c0:e7:f2:02:3f:c3:c8:
bf:a5:0b:02:4d:e9:73:2f:e7:52:ae:76:fd:39:63:e3:e0:24:
0e:c6:b5:d5:ad:9e:dd:75:4d:6e:64:d5:a3:0a:86:d7:ce:f3:
d0:c1:95:53:40:2d:d6:db:ed:05:31:7d:91:cc:2b:79:72:86:
74:19:06:9e:d1:c3:99:8c:99:07:06:b6:cc:99:c6:f7:42:8e:
f6:87:53:72:8c:ce:a6:7c:7d:55:b4:53:aa:bd:63:41:df:7a:
9f:5e:af:3e:35:81:6b:91:09:ca:6d:2d:c9:72:8d:7c:d2:88:
45:d4:9d:38:f1:9e:23:d8:28:f6:aa:db:5c:9a:d2:3e:84:64:
b6:8b:7c:f9:7b:1c:33:30:22:85:3e:94:93:7e:e8:62:d3:cc:
c7:37:50:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkypAfRknmISUNbjqtWGPozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZWU2ZGY5NzI4Y2Q4YWYwZjM0YTAzZWQ2ZWEzMTUxYzNi
YzIyYzgwHhcNMjUwOTEwMDgwMDM0WhcNMjUwOTExMDgwMDM0WjAzMTEwLwYDVQQD
EyhlNzdkZDY1ZDQ3YThiMjM0OGUxYjMyNDNlMTEzM2RlZjFlNWFkYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpRHaNwhu3YhUkac2rWkW1F/LVXs
amvJob4odh9NiQa2cdvA4MABTi//67jEuk41FO2cs2kFO7pa2G12zTpm4/9BsG88
akU73L8BFsm/3CGOyG+C52WNZeJeNDDyt2cm6AkBw1ctVFMmzacZaJIqsurpueH0
3fq4emY8YABcIhVFpCrs+1TYvOUHzG9BPTZFL1v3qBKI7jBJVXdU6uNVyReeLAbS
kMKdnicJy+w1eVx3kjUHFdxOVA2/ORFnVgkrJQF9zkH9+Oxerpo4fUk1QJPsdeYO
T7FdjOGijdP6b9upI2xXKyeAwoZ8dRQiWo080RX2lzs7C2g+US8TVZyW4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd91l1HqLI0jhsyQ+ETPe8eWtwVMB8GA1UdIwQY
MBaAFNrubflyjNivDzSgPtbqMVHDvCLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2Ut
NGQyMGUzNGQwOTkyLzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2UtNGQyMGUzNGQwOTky
LzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3b+4udz
6zg0MfFeYEISD2Goes3D4cajAhSEmeprzAmMI+Tx48qKxgD5wq4Bp2C9YnaJn2ki
mBx6JNxhKxLzhnwym91xG8qM258XIMsOccGpSntyWcmO33/syuV5b9ALt7OX57fA
5/ICP8PIv6ULAk3pcy/nUq52/Tlj4+AkDsa11a2e3XVNbmTVowqG187z0MGVU0At
1tvtBTF9kcwreXKGdBkGntHDmYyZBwa2zJnG90KO9odTcozOpnx9VbRTqr1jQd96
n16vPjWBa5EJym0tyXKNfNKIRdSdOPGeI9go9qrbXJrSPoRktot8+XscMzAihT6U
k37oYtPMxzdQdg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:27:33 2025 by rpki-client