Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: EgcjE0si7ZJMrq4yko9ALIALXe+3qHLI91llIsDFO1E=
Subject key identifier: F2:89:7D:96:6F:97:74:E3:E8:D9:B0:28:FD:A0:55:D3:4F:1A:46:4B
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01987CAE94768C22B80284B2A4A914218C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 00:01:12 +0000
Manifest this update: Wed 06 Aug 2025 00:01:12 +0000
Manifest next update: Thu 07 Aug 2025 00:01:12 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: Cg6b3XB2O9X/yxLVw20hlVMg0ZzvaVymrhIhQCi4p5g=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:94:76:8c:22:b8:02:84:b2:a4:a9:14:21:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Aug 6 00:01:12 2025 GMT
Not After : Aug 7 00:01:12 2025 GMT
Subject: CN=f2897d966f9774e3e8d9b028fda055d34f1a464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:8f:49:ad:4b:0f:65:96:1f:69:fb:2d:31:
f8:80:48:2e:95:d2:73:6e:ba:4a:96:7c:dd:7e:bc:
dc:91:8f:bf:75:ce:9e:03:80:95:c2:24:78:6f:2e:
74:50:36:b2:d5:05:b7:f3:28:3e:fb:78:a1:8e:1b:
54:1b:62:de:a1:f9:f1:fe:28:d9:f3:c2:27:62:50:
47:93:b7:07:28:a0:1d:40:c4:d7:b5:38:17:d0:01:
31:0b:93:e8:71:0b:c0:99:c2:65:bd:4b:5f:7f:ae:
6a:30:cb:f1:c1:ac:97:c2:89:59:21:4f:7a:c8:e3:
fa:ed:17:1f:7b:15:db:c3:fc:02:e5:26:8e:c5:f0:
5c:16:66:b5:8e:39:49:ef:94:59:79:8b:ba:e5:e1:
05:1b:c8:46:02:0a:52:76:6b:09:9c:c5:91:67:5f:
95:a6:f1:bc:03:09:d3:7b:10:67:f4:3b:a8:78:33:
c0:2b:98:f2:db:aa:a2:a2:a0:f0:09:18:80:da:7e:
f9:a9:3e:96:6e:f7:38:59:6f:cd:87:4c:fc:f6:61:
54:a2:e2:5e:ca:7f:04:d5:f6:84:32:7d:45:6d:fe:
b0:bb:39:3b:c2:be:68:9a:50:9e:e7:8f:4d:92:a0:
6a:82:46:43:53:dc:a0:42:f8:d9:89:56:9d:01:b7:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:7D:96:6F:97:74:E3:E8:D9:B0:28:FD:A0:55:D3:4F:1A:46:4B
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:56:0a:b6:8d:42:a2:89:d7:9e:7e:ba:0f:5e:47:40:fe:
5c:5c:2b:64:64:3d:09:4f:5c:71:33:c6:dd:9e:19:c5:2b:7f:
0c:3e:36:da:b0:ab:f5:cc:c1:59:09:43:5d:3c:d6:ea:32:10:
f7:e9:27:f4:ab:5d:b6:92:92:dd:11:70:e3:b0:1f:61:b5:18:
23:ef:b2:da:d7:d2:2c:4b:45:d9:34:01:8e:be:16:e4:a2:c2:
d3:eb:43:f1:6d:0c:0f:69:71:d1:ac:9d:50:dd:6b:c8:39:f7:
b5:06:9c:25:c7:b0:5c:5f:81:ec:e8:5c:cf:84:47:6e:42:19:
dc:6c:08:25:52:87:09:03:e3:b7:0b:b7:6f:6c:8b:5f:c8:04:
94:66:fe:ea:4d:ca:94:db:f2:19:a2:8d:f2:68:a7:fd:32:e8:
3c:22:13:aa:6d:e2:09:23:a0:a1:d0:74:b9:7e:11:f7:9e:68:
7d:5a:5b:d7:83:12:e4:c1:65:1d:9c:db:c7:9c:83:68:79:8d:
e3:98:b4:f9:d3:dc:b6:d3:67:9c:3c:38:96:03:91:32:4f:24:
8b:22:a2:11:9c:64:1f:56:64:c7:1e:2b:f0:c5:24:ee:d9:00:
88:fd:92:43:29:f6:fd:cc:ac:99:d0:9e:e6:a5:85:04:10:3a:
d7:87:69:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rpR2jCK4AoSypKkUIYyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm
ZTM3M2MwHhcNMjUwODA2MDAwMTEyWhcNMjUwODA3MDAwMTEyWjAzMTEwLwYDVQQD
EyhmMjg5N2Q5NjZmOTc3NGUzZThkOWIwMjhmZGEwNTVkMzRmMWE0NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQePSa1LD2WWH2n7LTH4gEguldJz
brpKlnzdfrzckY+/dc6eA4CVwiR4by50UDay1QW38yg++3ihjhtUG2Leofnx/ijZ
88InYlBHk7cHKKAdQMTXtTgX0AExC5PocQvAmcJlvUtff65qMMvxwayXwolZIU96
yOP67RcfexXbw/wC5SaOxfBcFma1jjlJ75RZeYu65eEFG8hGAgpSdmsJnMWRZ1+V
pvG8AwnTexBn9DuoeDPAK5jy26qioqDwCRiA2n75qT6Wbvc4WW/Nh0z89mFUouJe
yn8E1faEMn1Fbf6wuzk7wr5omlCe549NkqBqgkZDU9ygQvjZiVadAbeT+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKJfZZvl3Tj6NmwKP2gVdNPGkZLMB8GA1UdIwQY
MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt
NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk
LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqlWCraN
QqKJ155+ug9eR0D+XFwrZGQ9CU9ccTPG3Z4ZxSt/DD422rCr9czBWQlDXTzW6jIQ
9+kn9KtdtpKS3RFw47AfYbUYI++y2tfSLEtF2TQBjr4W5KLC0+tD8W0MD2lx0ayd
UN1ryDn3tQacJcewXF+B7Ohcz4RHbkIZ3GwIJVKHCQPjtwu3b2yLX8gElGb+6k3K
lNvyGaKN8min/TLoPCITqm3iCSOgodB0uX4R955ofVpb14MS5MFlHZzbx5yDaHmN
45i0+dPcttNnnDw4lgORMk8kiyKiEZxkH1Zkxx4r8MUk7tkAiP2SQyn2/cysmdCe
5qWFBBA614dpdQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:13 2025 by rpki-client