
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: DL+GDHt1ntv09gg6HAQJz6J0S0mzR/vtukYhntJaP+E=
Subject key identifier: A9:3B:49:B5:59:FD:F6:BA:29:06:76:D0:A2:A2:7D:D7:E2:33:FF:AB
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 01988B45A99C135DC177CBD7C8A4CC4F2E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0374
Signing time: Fri 08 Aug 2025 20:00:55 +0000
Manifest this update: Fri 08 Aug 2025 20:00:55 +0000
Manifest next update: Sat 09 Aug 2025 20:00:55 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: CKZg5SxpFc1U7/7hm3dkqGKMcQXp5CbRUL74cY8Ujuk=)
2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=)
3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:a9:9c:13:5d:c1:77:cb:d7:c8:a4:cc:4f:2e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Aug 8 20:00:55 2025 GMT
Not After : Aug 9 20:00:55 2025 GMT
Subject: CN=a93b49b559fdf6ba290676d0a2a27dd7e233ffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:76:bc:50:13:4a:b5:27:a5:fc:b1:fc:ff:
02:ba:b3:a8:5d:ce:1a:7a:b6:a4:dd:0b:06:fe:51:
07:eb:7a:b4:af:f4:bc:f9:75:9b:2a:48:be:7b:95:
a0:20:4e:b9:fa:50:9e:98:7d:58:6a:63:d9:c5:6b:
c6:02:77:86:aa:a6:5d:33:41:05:40:a5:51:eb:3c:
84:7f:ba:05:d1:10:4d:c3:dc:0f:4a:7e:1c:80:73:
ab:58:ff:39:7d:2a:b6:7b:f9:8a:f7:9e:a9:2a:a2:
88:d7:fb:23:85:9a:8f:7a:5e:77:38:99:16:3e:1c:
17:8d:f9:71:ff:5e:8f:dc:2d:6e:da:78:c0:15:4b:
05:2c:55:8b:1c:b1:fb:7b:92:24:d4:73:8e:b9:e3:
f9:ee:f5:02:a4:3c:46:1b:37:9d:ea:2b:e7:7d:d5:
ba:aa:1f:61:26:e7:fe:34:2e:34:0c:e7:e3:e7:0e:
40:c8:d4:7e:ec:bc:af:b7:7f:78:e2:af:79:65:fe:
87:ff:71:07:24:94:ef:7c:ae:64:21:21:4e:c9:47:
ee:3c:36:fa:18:ee:9b:6b:42:61:28:38:b3:70:48:
c4:2a:67:39:15:e1:9d:0b:8a:2c:5b:34:4e:9e:8f:
6f:83:98:45:40:07:bb:6a:a2:4e:f8:fb:bb:bc:64:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3B:49:B5:59:FD:F6:BA:29:06:76:D0:A2:A2:7D:D7:E2:33:FF:AB
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:dd:cb:a0:3a:cb:dd:77:98:26:dd:15:a9:fa:0b:ab:44:
13:7c:79:a6:0d:5a:b5:5a:34:d6:93:af:49:1e:32:da:ca:e3:
06:aa:41:3c:f6:a1:81:9a:31:3a:3a:80:37:8e:0e:8d:a2:e1:
61:5c:79:e5:e1:78:84:64:e4:3b:6f:7e:ee:d3:45:1d:81:4c:
89:78:04:5b:35:6b:7a:eb:31:df:7b:7c:0a:05:39:70:55:df:
5a:b6:1f:90:e4:34:2c:d9:7c:84:d1:2b:f6:dc:68:9b:3e:90:
84:b0:49:27:ce:d3:89:0d:b6:ca:37:3e:d4:cd:24:61:5f:00:
3e:3d:b7:93:8a:86:b8:12:bb:8d:c2:20:27:08:59:bd:ff:88:
66:75:39:7c:e1:30:cf:c9:67:3f:ca:ed:37:93:79:cf:f2:6f:
85:40:f7:a7:83:93:1b:55:8d:ad:3c:d6:f2:c3:43:e6:67:38:
99:9a:e5:c3:eb:97:8b:2d:08:56:44:66:10:67:0d:ad:c1:8f:
fb:9c:c3:c4:f0:9b:c6:fe:6e:46:dc:88:ac:80:c1:c7:ed:4c:
e7:68:e5:66:34:29:0a:85:8a:62:e3:29:25:cc:30:27:ce:5a:
de:75:08:8b:82:50:9f:89:23:c7:bc:28:a2:58:b9:8f:31:52:
21:61:b0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRamcE13Bd8vXyKTMTy6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0
ZjYwM2MwHhcNMjUwODA4MjAwMDU1WhcNMjUwODA5MjAwMDU1WjAzMTEwLwYDVQQD
EyhhOTNiNDliNTU5ZmRmNmJhMjkwNjc2ZDBhMmEyN2RkN2UyMzNmZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6V2vFATSrUnpfyx/P8CurOoXc4a
erak3QsG/lEH63q0r/S8+XWbKki+e5WgIE65+lCemH1YamPZxWvGAneGqqZdM0EF
QKVR6zyEf7oF0RBNw9wPSn4cgHOrWP85fSq2e/mK956pKqKI1/sjhZqPel53OJkW
PhwXjflx/16P3C1u2njAFUsFLFWLHLH7e5Ik1HOOueP57vUCpDxGGzed6ivnfdW6
qh9hJuf+NC40DOfj5w5AyNR+7Lyvt3944q95Zf6H/3EHJJTvfK5kISFOyUfuPDb6
GO6ba0JhKDizcEjEKmc5FeGdC4osWzROno9vg5hFQAe7aqJO+Pu7vGTbYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk7SbVZ/fa6KQZ20KKifdfiM/+rMB8GA1UdIwQY
MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt
YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl
LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajXdy6A6
y913mCbdFan6C6tEE3x5pg1atVo01pOvSR4y2srjBqpBPPahgZoxOjqAN44OjaLh
YVx55eF4hGTkO29+7tNFHYFMiXgEWzVreusx33t8CgU5cFXfWrYfkOQ0LNl8hNEr
9txomz6QhLBJJ87TiQ22yjc+1M0kYV8APj23k4qGuBK7jcIgJwhZvf+IZnU5fOEw
z8lnP8rtN5N5z/JvhUD3p4OTG1WNrTzW8sND5mc4mZrlw+uXiy0IVkRmEGcNrcGP
+5zDxPCbxv5uRtyIrIDBx+1M52jlZjQpCoWKYuMpJcwwJ85a3nUIi4JQn4kjx7wo
oli5jzFSIWGwEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:58 2025 by rpki-client