
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier: xTVUPHMqM+R08sc9itnAvIyc4Y0ETXaM6++K6XuxTa8=
Subject key identifier: 9B:C0:2A:9F:FA:80:43:A9:DE:C0:97:D8:49:4F:B6:98:2E:79:A6:89
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019922556D0F362AE5D244DB3D97FFFD1640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number: 95
Signing time: Sun 07 Sep 2025 04:00:47 +0000
Manifest this update: Sun 07 Sep 2025 04:00:47 +0000
Manifest next update: Mon 08 Sep 2025 04:00:47 +0000
Files and hashes: 1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: ndWioblVPekZG71Aktijh8O25ErLgnu+EdxvjnPyME0=)
2: YZaUjQlCbflfEUbT2gpPLo1ny_U.roa (hash: +SwgIn7dK0HQ0r746yPpM+Y8qQkIQQdi0ZZhu/E+a8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6d:0f:36:2a:e5:d2:44:db:3d:97:ff:fd:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Sep 7 04:00:47 2025 GMT
Not After : Sep 8 04:00:47 2025 GMT
Subject: CN=9bc02a9ffa8043a9dec097d8494fb6982e79a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:ec:40:1c:55:2d:1a:52:1c:eb:0e:a0:b0:
06:96:aa:29:c7:83:37:9b:a8:18:45:46:22:da:0a:
df:af:ed:7b:95:b7:3a:c9:2e:ee:57:68:dc:53:a4:
01:df:39:98:cb:39:f5:1d:65:87:28:51:6d:53:72:
d6:d8:fd:2a:bc:40:81:98:20:13:cb:fe:6b:01:0e:
93:ac:98:4d:30:cd:54:e9:d0:6b:0a:bb:bd:86:eb:
be:41:8f:d4:69:06:9c:ae:63:ac:86:37:65:2f:a0:
8a:0b:80:42:86:4e:7c:3c:29:6b:36:9b:dd:23:07:
de:54:31:5f:0f:6d:54:24:07:36:1a:b2:e2:d7:a9:
44:c7:8d:1e:8c:4f:f5:77:05:f2:46:74:fd:e8:e9:
7a:7e:64:68:c3:a5:62:9a:e7:8c:8d:cf:4b:25:56:
29:8b:86:dc:11:d4:e6:84:73:ee:4b:80:3f:1d:1e:
a5:38:a8:cb:42:3c:62:7c:97:76:2f:5b:ca:f3:25:
09:fc:7a:1a:44:09:67:2e:1e:84:e7:af:d3:2e:b8:
a3:be:21:dd:fe:46:43:5a:30:a7:d2:ba:3f:de:55:
a8:3f:08:f5:1c:cb:58:ac:1b:03:bf:c2:4d:65:80:
76:a4:db:7a:43:1a:38:c8:9e:48:cd:0e:a6:5c:06:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:2A:9F:FA:80:43:A9:DE:C0:97:D8:49:4F:B6:98:2E:79:A6:89
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:d1:13:56:ac:73:13:68:82:71:39:3a:2c:4c:f8:ea:eb:
c8:c6:f9:4a:f9:21:cc:0c:4d:62:a0:b0:f2:9a:cc:a0:d0:12:
1d:57:03:d0:df:00:8b:f7:2f:a3:cf:e3:44:ca:07:3f:e7:52:
9a:8e:93:f0:38:59:c5:98:c4:b2:b4:49:83:b4:5d:a8:6d:27:
ec:ce:40:38:a5:70:86:36:26:f3:1f:4b:20:5f:25:d6:ac:09:
a3:60:1e:f5:4b:52:87:d3:9f:d6:45:cd:24:6d:49:ec:ef:34:
e8:18:2d:6c:bd:97:6b:6b:05:e0:be:2b:71:b9:15:53:68:47:
0c:fd:d8:71:a7:5c:c1:50:d5:2b:c3:e3:74:eb:e4:f0:0e:70:
c8:cc:7e:92:23:d2:de:cd:bb:63:ad:5a:9b:29:f3:13:11:49:
52:be:4b:0a:c5:51:ec:f0:2b:d5:ac:05:2f:56:0a:fe:9f:fd:
43:9e:f9:19:4d:a6:a3:5b:36:0f:b4:3c:12:4f:da:bd:6d:20:
94:0e:38:5f:a1:bd:e5:3e:dc:11:bf:c7:0d:a6:4e:8d:de:a8:
04:f8:7e:20:5f:f2:99:91:ed:04:fc:37:d8:e1:56:28:b7:5d:
6a:32:9f:e6:61:0b:f5:fc:af:4b:46:2c:5c:9e:61:0e:2f:07:
38:20:93:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVW0PNirl0kTbPZf//RZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy
MzZhMDYwHhcNMjUwOTA3MDQwMDQ3WhcNMjUwOTA4MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg5YmMwMmE5ZmZhODA0M2E5ZGVjMDk3ZDg0OTRmYjY5ODJlNzlhNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdLsQBxVLRpSHOsOoLAGlqopx4M3
m6gYRUYi2grfr+17lbc6yS7uV2jcU6QB3zmYyzn1HWWHKFFtU3LW2P0qvECBmCAT
y/5rAQ6TrJhNMM1U6dBrCru9huu+QY/UaQacrmOshjdlL6CKC4BChk58PClrNpvd
IwfeVDFfD21UJAc2GrLi16lEx40ejE/1dwXyRnT96Ol6fmRow6VimueMjc9LJVYp
i4bcEdTmhHPuS4A/HR6lOKjLQjxifJd2L1vK8yUJ/HoaRAlnLh6E56/TLrijviHd
/kZDWjCn0ro/3lWoPwj1HMtYrBsDv8JNZYB2pNt6Qxo4yJ5IzQ6mXAYJQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvAKp/6gEOp3sCX2ElPtpgueaaJMB8GA1UdIwQY
MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt
NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl
LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/XRE1as
cxNognE5OixM+OrryMb5SvkhzAxNYqCw8prMoNASHVcD0N8Ai/cvo8/jRMoHP+dS
mo6T8DhZxZjEsrRJg7RdqG0n7M5AOKVwhjYm8x9LIF8l1qwJo2Ae9UtSh9Of1kXN
JG1J7O806BgtbL2Xa2sF4L4rcbkVU2hHDP3YcadcwVDVK8PjdOvk8A5wyMx+kiPS
3s27Y61amynzExFJUr5LCsVR7PAr1awFL1YK/p/9Q575GU2mo1s2D7Q8Ek/avW0g
lA44X6G95T7cEb/HDaZOjd6oBPh+IF/ymZHtBPw32OFWKLddajKf5mEL9fyvS0Ys
XJ5hDi8HOCCTOA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:05 2025 by rpki-client