Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: I7jlG0zQ7gw1rhN182WPezYGqu1RdBY9p8WI7wB1VWM=
Subject key identifier: 1C:BE:F3:1C:CC:01:82:24:5F:95:17:C4:57:AC:0A:6F:AC:9F:51:2D
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 01992330D505289A0FCDAD41AEAAB9F1F3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: FA
Signing time: Sun 07 Sep 2025 08:00:26 +0000
Manifest this update: Sun 07 Sep 2025 08:00:26 +0000
Manifest next update: Mon 08 Sep 2025 08:00:26 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: dZrTR1W5tJDjnrIiKRQAL7jApTCHljr7J/NBYHFUlT0=)
2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d5:05:28:9a:0f:cd:ad:41:ae:aa:b9:f1:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Sep 7 08:00:26 2025 GMT
Not After : Sep 8 08:00:26 2025 GMT
Subject: CN=1cbef31ccc0182245f9517c457ac0a6fac9f512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:8a:26:c8:f9:61:9b:e3:34:e5:f2:c7:5e:
28:34:40:00:41:11:f3:13:10:9e:b6:96:fd:a8:e2:
b4:b6:a1:92:41:e1:88:46:25:10:5e:6a:60:27:80:
4b:8b:5a:fe:c8:18:03:14:5f:79:aa:c0:d2:8c:53:
29:ba:29:2b:60:eb:af:6e:ec:40:38:13:14:74:19:
fa:32:b9:44:44:b5:af:02:50:a1:53:8e:8a:d8:d1:
58:80:db:75:11:8a:bd:9f:f8:0f:89:96:5e:8c:71:
f2:92:bc:a8:04:1a:32:61:b0:73:de:e9:c3:33:9e:
0f:14:79:15:68:da:fd:35:2d:15:d6:5f:94:1e:84:
b9:a8:96:6e:cd:05:9d:a9:7b:70:79:7d:cd:c8:7a:
47:a1:01:64:e9:eb:2f:83:fa:4b:6d:bb:08:1f:47:
54:3d:5a:b0:c1:04:d6:49:6d:5b:37:91:7b:ee:c4:
ec:8c:6b:c4:ee:2c:d1:94:4c:a7:8a:ef:e4:59:43:
5e:5b:03:76:01:b0:43:04:11:6e:03:82:07:8e:4e:
8b:97:5b:2e:85:7a:27:61:31:70:05:6e:f8:78:75:
43:6b:6b:d1:3b:37:a4:ed:8b:9b:dd:69:50:86:52:
07:09:9b:f7:96:fe:eb:82:3e:e4:04:61:6e:1b:7d:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:F3:1C:CC:01:82:24:5F:95:17:C4:57:AC:0A:6F:AC:9F:51:2D
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:40:9e:dc:4b:17:ac:e9:4a:40:df:eb:c9:62:56:f2:d9:fb:
c8:d6:0b:7c:ef:43:74:0e:ce:0b:00:ba:d5:03:cd:f8:d9:67:
5f:fc:5f:d7:91:bd:b8:41:c0:7b:45:ee:c5:b7:d9:2f:10:04:
9b:54:15:96:8e:00:7e:3e:a2:28:5f:38:b6:d6:16:08:61:f6:
ea:7b:32:0e:06:f7:9a:7d:c1:ef:9d:33:02:47:30:8e:2b:6a:
39:d8:55:68:6b:93:3b:8c:e4:dd:98:3b:60:48:b9:41:7b:70:
6b:82:7a:0c:4a:50:90:33:ce:e5:41:56:15:fa:f2:98:69:b3:
6a:47:f3:9e:ba:0c:f5:51:8d:f6:f8:ad:8e:de:41:9c:cb:47:
e1:fe:29:c5:e8:d5:82:d7:e1:99:a0:c9:8f:33:2e:b8:be:a5:
78:49:df:3e:eb:9f:0b:28:75:ea:0a:01:8f:85:c2:f8:1a:4a:
69:8e:6b:53:06:f7:44:44:18:7a:94:de:0f:5e:39:10:c8:2c:
5c:52:8e:15:68:49:c3:9f:b4:94:7b:67:75:36:c4:bf:bf:c8:
d0:64:48:5a:c4:ac:8c:ba:da:20:03:36:d4:7d:4a:39:94:0f:
2e:18:c4:03:63:30:70:3e:85:04:8b:82:f6:f4:23:e4:8d:59:
4e:d4:73:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMNUFKJoPza1Brqq58fPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDUzNjBlOTg3MzgyNWY3NWQ2NzFkYWYxNjI0YTUyZTk4
NTM5MGMwHhcNMjUwOTA3MDgwMDI2WhcNMjUwOTA4MDgwMDI2WjAzMTEwLwYDVQQD
EygxY2JlZjMxY2NjMDE4MjI0NWY5NTE3YzQ1N2FjMGE2ZmFjOWY1MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNaKJsj5YZvjNOXyx14oNEAAQRHz
ExCetpb9qOK0tqGSQeGIRiUQXmpgJ4BLi1r+yBgDFF95qsDSjFMpuikrYOuvbuxA
OBMUdBn6MrlERLWvAlChU46K2NFYgNt1EYq9n/gPiZZejHHykryoBBoyYbBz3unD
M54PFHkVaNr9NS0V1l+UHoS5qJZuzQWdqXtweX3NyHpHoQFk6esvg/pLbbsIH0dU
PVqwwQTWSW1bN5F77sTsjGvE7izRlEyniu/kWUNeWwN2AbBDBBFuA4IHjk6Ll1su
hXonYTFwBW74eHVDa2vROzek7Yub3WlQhlIHCZv3lv7rgj7kBGFuG30JnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy+8xzMAYIkX5UXxFesCm+sn1EtMB8GA1UdIwQY
MBaAFNsFNg6Yc4JfddZx2vFiSlLphTkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2Ut
ZDYyZDIyNGUzY2FmLzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2UtZDYyZDIyNGUzY2Fm
LzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUCe3EsX
rOlKQN/ryWJW8tn7yNYLfO9DdA7OCwC61QPN+NlnX/xf15G9uEHAe0XuxbfZLxAE
m1QVlo4Afj6iKF84ttYWCGH26nsyDgb3mn3B750zAkcwjitqOdhVaGuTO4zk3Zg7
YEi5QXtwa4J6DEpQkDPO5UFWFfrymGmzakfznroM9VGN9vitjt5BnMtH4f4pxejV
gtfhmaDJjzMuuL6leEnfPuufCyh16goBj4XC+BpKaY5rUwb3REQYepTeD145EMgs
XFKOFWhJw5+0lHtndTbEv7/I0GRIWsSsjLraIAM21H1KOZQPLhjEA2MwcD6FBIuC
9vQj5I1ZTtRzpg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:02 2025 by rpki-client