Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: EFz/jw9Zv1D6AmgADEi9bRLbKwUwhK8x2B3S1O8Jp3I=
Subject key identifier: 40:0E:2B:74:C9:A1:C8:A0:D6:D1:24:9D:F0:68:23:3F:0F:29:2E:60
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0198744FDBF0591624D64A3A6C31D1197CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0D86
Signing time: Mon 04 Aug 2025 09:00:47 +0000
Manifest this update: Mon 04 Aug 2025 09:00:47 +0000
Manifest next update: Tue 05 Aug 2025 09:00:47 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: KzESlYvs4XyCNwi8Vb2qaC1WCf3UW66qS/zRn6oqPUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:db:f0:59:16:24:d6:4a:3a:6c:31:d1:19:7c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Aug 4 09:00:47 2025 GMT
Not After : Aug 5 09:00:47 2025 GMT
Subject: CN=400e2b74c9a1c8a0d6d1249df068233f0f292e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:86:af:9e:e2:5a:64:6f:86:30:11:43:ea:
be:c1:32:2c:8f:34:89:93:9b:be:f0:30:0d:fb:40:
7c:c5:16:79:57:18:cf:b9:4b:fe:b1:c6:59:ca:a4:
de:ed:a2:6c:74:20:1e:0a:8c:8a:75:00:f8:c0:0e:
b3:7e:21:78:68:2c:f4:55:29:12:9d:34:b1:40:6f:
8d:fd:94:3c:e3:96:89:d7:1b:83:da:29:67:b7:fa:
06:a0:97:5b:f7:1e:73:e1:5c:e6:f1:09:ff:a8:53:
e8:e5:7a:b9:f2:61:c8:b7:ad:fd:95:02:b3:ee:16:
f9:3c:a6:89:29:4c:99:4a:1e:ef:35:eb:f3:e1:fe:
3a:7e:18:dc:05:cc:49:b1:de:44:9c:90:61:59:b4:
c6:47:78:b8:ed:b3:17:05:0e:4f:25:0e:56:0e:76:
35:20:f3:65:f9:a0:72:a6:7a:1c:97:f0:cc:7d:01:
e4:48:bc:98:93:80:34:ef:cc:c1:29:c0:7c:b2:f0:
c2:7e:f3:fb:b9:f7:b0:62:de:6d:6b:85:05:65:58:
6b:be:43:35:02:22:b3:6f:d5:a0:e2:16:92:d1:f2:
fe:2f:5b:de:ae:c8:7e:98:8e:99:b9:5d:ae:2a:b8:
a1:30:40:d8:8b:b9:d7:bc:b3:a2:40:f0:7f:78:64:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:2B:74:C9:A1:C8:A0:D6:D1:24:9D:F0:68:23:3F:0F:29:2E:60
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:17:e0:f6:0b:a5:22:14:36:d6:7b:e7:77:f3:ea:ed:f8:
a0:ae:8c:b3:d7:57:3d:da:06:a4:6d:9b:a0:9a:68:51:bb:4f:
b8:96:25:d6:29:b3:49:23:d1:7f:ad:ad:97:8d:62:b2:1a:9c:
9b:5f:48:44:45:67:18:73:0d:58:26:87:03:2c:7c:9c:be:65:
f9:74:b8:d3:80:8e:8a:67:20:1e:cd:81:04:01:89:c2:86:6a:
69:0a:d3:df:24:2a:03:55:63:e2:a0:c7:0d:bd:d4:67:9a:5e:
91:c3:02:e0:d5:6d:85:37:32:90:92:d0:92:32:52:5a:98:36:
ff:e6:99:06:95:4c:ef:59:37:83:60:3b:9e:90:8c:a0:13:38:
a1:7c:fa:3d:64:f3:bd:0c:e1:82:35:2b:dc:03:83:62:12:06:
b4:3a:42:5e:cd:21:2e:8d:3e:40:53:d0:08:8b:8c:59:7f:29:
26:f5:be:eb:97:bd:6f:8f:e2:93:13:7d:2b:e4:9e:e5:ca:20:
d3:14:1c:fb:c4:58:7b:cb:df:e7:ca:9a:10:bc:27:24:6f:a4:
e0:0b:6a:ee:13:9e:5b:1a:5e:ad:7c:f1:98:3e:8a:8c:4b:e1:
36:2e:a3:f4:5d:58:9e:a8:9d:f4:bb:7a:4e:8d:55:c6:16:df:
e0:73:c7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T9vwWRYk1ko6bDHRGXzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjUwODA0MDkwMDQ3WhcNMjUwODA1MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg0MDBlMmI3NGM5YTFjOGEwZDZkMTI0OWRmMDY4MjMzZjBmMjkyZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK2Gr57iWmRvhjARQ+q+wTIsjzSJ
k5u+8DAN+0B8xRZ5VxjPuUv+scZZyqTe7aJsdCAeCoyKdQD4wA6zfiF4aCz0VSkS
nTSxQG+N/ZQ845aJ1xuD2ilnt/oGoJdb9x5z4Vzm8Qn/qFPo5Xq58mHIt639lQKz
7hb5PKaJKUyZSh7vNevz4f46fhjcBcxJsd5EnJBhWbTGR3i47bMXBQ5PJQ5WDnY1
IPNl+aBypnocl/DMfQHkSLyYk4A078zBKcB8svDCfvP7ufewYt5ta4UFZVhrvkM1
AiKzb9Wg4haS0fL+L1versh+mI6ZuV2uKrihMEDYi7nXvLOiQPB/eGS0HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAOK3TJocig1tEknfBoIz8PKS5gMB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoQX4PYL
pSIUNtZ753fz6u34oK6Ms9dXPdoGpG2boJpoUbtPuJYl1imzSSPRf62tl41ishqc
m19IREVnGHMNWCaHAyx8nL5l+XS404COimcgHs2BBAGJwoZqaQrT3yQqA1Vj4qDH
Db3UZ5pekcMC4NVthTcykJLQkjJSWpg2/+aZBpVM71k3g2A7npCMoBM4oXz6PWTz
vQzhgjUr3AODYhIGtDpCXs0hLo0+QFPQCIuMWX8pJvW+65e9b4/ikxN9K+Se5cog
0xQc+8RYe8vf58qaELwnJG+k4Atq7hOeWxperXzxmD6KjEvhNi6j9F1Ynqid9Lt6
To1Vxhbf4HPHWQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:03 2025 by rpki-client