
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: qO/T430aJbtQDipjG9MICvHetWB5dLAq7KhppIMUDWA=
Subject key identifier: 29:83:AB:0F:E1:37:2B:64:98:80:71:65:15:2B:BB:70:45:D2:55:3B
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019921E7409080E98037667C4F9B5D67F408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 08A5
Signing time: Sun 07 Sep 2025 02:00:27 +0000
Manifest this update: Sun 07 Sep 2025 02:00:27 +0000
Manifest next update: Mon 08 Sep 2025 02:00:27 +0000
Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: zZLYJwl4MDvHs6LOAolpNI+hdAkse8jNPkG5/HGX1GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:40:90:80:e9:80:37:66:7c:4f:9b:5d:67:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Sep 7 02:00:27 2025 GMT
Not After : Sep 8 02:00:27 2025 GMT
Subject: CN=2983ab0fe1372b6498807165152bbb7045d2553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:9f:8c:a0:a4:f1:6b:eb:30:a3:c3:a8:50:
eb:01:17:ff:98:58:2c:0b:b2:79:c2:12:da:24:2f:
cf:95:ba:98:dd:5b:22:43:0b:70:60:5c:d1:28:37:
a9:56:3e:0b:5e:14:3f:24:74:fe:8c:30:6b:e1:2b:
2a:49:31:97:fe:ab:33:2a:9c:09:f5:6b:3a:fb:ea:
85:6c:b6:7d:b0:88:46:59:46:36:07:f5:79:e7:f4:
ba:a3:79:c4:e4:7e:8f:46:b2:07:2c:dd:93:7f:09:
6f:dd:06:20:a2:16:7b:48:e4:83:9b:8b:ef:d7:20:
d1:d9:98:ec:57:e7:29:d7:e8:3b:73:f1:82:29:79:
56:48:de:fc:1b:28:81:b8:70:da:e8:48:51:d8:f3:
1d:65:b2:4b:44:82:12:58:6d:80:7d:4b:55:e2:eb:
52:a3:67:12:92:bf:64:63:96:64:f8:17:32:94:1c:
e5:dc:c5:8f:53:0f:c2:52:43:98:b0:7d:2e:60:21:
16:95:bd:1e:d8:2f:20:62:09:88:15:14:d0:e6:30:
cd:d9:db:50:3c:39:69:e7:fe:ef:fa:89:8c:00:cc:
ad:7e:5c:b5:47:9c:e8:b6:c3:45:79:74:5f:10:f5:
91:d7:5f:65:5d:fc:c6:a4:a7:58:da:5b:cd:94:86:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:AB:0F:E1:37:2B:64:98:80:71:65:15:2B:BB:70:45:D2:55:3B
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:ba:3f:d9:07:a6:14:33:46:74:c7:c9:93:64:12:79:60:
d5:a1:23:0d:09:5c:ad:fa:90:9e:93:ea:36:ed:ad:b2:09:39:
07:d5:1a:1a:4e:65:cc:57:df:04:75:75:77:01:22:9d:b6:02:
c2:14:71:51:8e:b6:4e:1d:c8:65:69:1c:30:04:f9:17:5c:3a:
2c:f6:32:4c:3e:6d:69:3c:b0:08:6a:e2:49:b2:da:51:c3:e2:
81:5f:94:30:64:c0:9c:ee:72:b1:b4:ea:16:3d:df:34:dd:b2:
9f:ff:80:84:ef:c4:da:1f:a3:97:f5:82:ee:f6:4e:e3:2f:83:
60:92:c7:4f:69:1c:06:12:d2:c1:86:3f:dd:af:a2:e3:30:1a:
1b:3f:9e:fd:ee:da:a7:e5:91:56:1a:62:1b:77:9d:f7:bd:96:
5e:c6:e5:95:f2:0c:17:89:83:e9:93:7a:a3:de:93:70:45:92:
c7:32:ce:08:dd:39:b1:c3:02:4a:3a:12:1f:9b:83:ae:04:83:
93:bb:dd:e5:1f:d0:b8:f8:17:15:9f:09:bc:20:9b:3e:d8:90:
7d:62:17:48:ea:1d:4d:24:46:4e:86:c1:bc:70:f3:57:4d:77:
03:1e:37:ed:51:8c:fe:18:9a:5b:e8:16:d4:6c:07:e9:11:77:
9c:9d:1b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh50CQgOmAN2Z8T5tdZ/QIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MWQ4MzNkMzQ3ZTZjNmNhNjllYTBhOGFiMmE4M2Y0OTI2
N2FkZTQwHhcNMjUwOTA3MDIwMDI3WhcNMjUwOTA4MDIwMDI3WjAzMTEwLwYDVQQD
EygyOTgzYWIwZmUxMzcyYjY0OTg4MDcxNjUxNTJiYmI3MDQ1ZDI1NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszefjKCk8WvrMKPDqFDrARf/mFgs
C7J5whLaJC/PlbqY3VsiQwtwYFzRKDepVj4LXhQ/JHT+jDBr4SsqSTGX/qszKpwJ
9Ws6++qFbLZ9sIhGWUY2B/V55/S6o3nE5H6PRrIHLN2Tfwlv3QYgohZ7SOSDm4vv
1yDR2ZjsV+cp1+g7c/GCKXlWSN78GyiBuHDa6EhR2PMdZbJLRIISWG2AfUtV4utS
o2cSkr9kY5Zk+BcylBzl3MWPUw/CUkOYsH0uYCEWlb0e2C8gYgmIFRTQ5jDN2dtQ
PDlp5/7v+omMAMytfly1R5zotsNFeXRfEPWR119lXfzGpKdY2lvNlIbkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmDqw/hNytkmIBxZRUru3BF0lU7MB8GA1UdIwQY
MBaAFKUdgz00fmxspp6gqKsqg/SSZ63kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUt
NDc4MmI3YThlYTI5LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUtNDc4MmI3YThlYTI5
LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClG6P9kH
phQzRnTHyZNkEnlg1aEjDQlcrfqQnpPqNu2tsgk5B9UaGk5lzFffBHV1dwEinbYC
whRxUY62Th3IZWkcMAT5F1w6LPYyTD5taTywCGriSbLaUcPigV+UMGTAnO5ysbTq
Fj3fNN2yn/+AhO/E2h+jl/WC7vZO4y+DYJLHT2kcBhLSwYY/3a+i4zAaGz+e/e7a
p+WRVhpiG3ed972WXsbllfIMF4mD6ZN6o96TcEWSxzLOCN05scMCSjoSH5uDrgSD
k7vd5R/QuPgXFZ8JvCCbPtiQfWIXSOodTSRGTobBvHDzV013Ax437VGM/hiaW+gW
1GwH6RF3nJ0bFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:16 2025 by rpki-client