
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: OSYpMUqbZC95A+2xn3pTBhUONlQrWkzwD2LRthBYdBw=
Subject key identifier: 41:6D:59:E3:93:1C:85:95:AA:5E:B6:84:63:9E:76:7C:AD:30:89:C7
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019872CFD138E6957511B6438F0C96F0F0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0221
Signing time: Mon 04 Aug 2025 02:01:18 +0000
Manifest this update: Mon 04 Aug 2025 02:01:18 +0000
Manifest next update: Tue 05 Aug 2025 02:01:18 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: P0BCAFjgrTTVeDzp1QIcukhaQvQq4MXwb7wjApN48mg=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d1:38:e6:95:75:11:b6:43:8f:0c:96:f0:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Aug 4 02:01:18 2025 GMT
Not After : Aug 5 02:01:18 2025 GMT
Subject: CN=416d59e3931c8595aa5eb684639e767cad3089c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fe:16:68:88:f0:7e:da:20:c6:39:84:71:8a:
61:95:f3:12:40:c1:1b:4b:59:75:3e:b9:8c:a5:75:
1f:4f:4c:97:2a:47:b5:c5:fb:f3:96:2e:2f:8d:e2:
99:06:04:c6:16:5d:89:c2:4e:ac:47:c0:26:cc:c3:
5b:13:8f:59:5b:9f:25:55:3f:2b:0c:4b:3a:0c:7a:
53:f6:19:a5:f7:7a:32:f6:44:12:d7:7e:8c:e7:ea:
25:c5:e3:e8:c5:e3:d6:a7:ad:2b:68:2d:9d:92:6d:
74:31:7a:33:ed:02:13:1a:ef:03:e2:56:8f:36:8d:
8c:8d:dc:64:ce:f8:56:f7:40:a3:44:9a:b8:a5:48:
5a:ef:82:cd:52:ef:b7:19:f1:d4:f1:55:1b:59:64:
f6:e2:52:6d:b9:f4:58:7d:17:3e:23:0a:c2:7b:fa:
fb:be:0e:6f:5e:5a:f2:9e:51:8b:9a:f0:e7:db:e5:
bc:c5:e4:03:b5:8a:6d:20:66:6f:98:ea:c2:f2:2f:
d6:dd:7f:e8:bb:62:fa:af:a6:ba:ce:be:bc:9a:15:
05:ef:43:29:27:c4:43:57:a5:d1:e8:22:d2:5a:10:
57:3a:3a:ad:e5:b9:4c:83:91:cd:1d:f0:87:a9:61:
e8:ef:89:b9:98:49:3b:7d:74:66:fc:70:c4:69:ce:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6D:59:E3:93:1C:85:95:AA:5E:B6:84:63:9E:76:7C:AD:30:89:C7
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:77:40:78:5d:2d:25:b5:63:c3:4f:ac:14:4a:54:d9:90:01:
80:0d:f0:27:71:3a:09:05:72:96:7b:22:64:01:6e:f0:8c:c2:
dd:fe:c5:bb:f8:15:97:b4:a5:89:f3:27:56:98:3d:27:c9:dc:
c5:dc:41:e6:c7:cc:8d:c1:ac:80:ee:b0:2e:b5:22:1e:1e:5f:
27:1d:4a:14:e5:fd:58:66:dd:76:7b:0a:56:40:cf:28:e0:4a:
91:f6:c1:8c:ab:1c:2d:48:ce:d5:41:43:96:59:b6:af:99:2c:
61:fb:d3:82:9b:81:83:35:38:1d:07:9a:5a:a5:7f:2b:9f:97:
44:62:bb:2d:2f:5c:c5:67:65:b3:a4:05:81:b2:3b:d6:91:8d:
59:df:64:f9:d3:09:80:9f:db:9c:da:d1:75:0d:a5:3f:88:a0:
7b:e9:3d:d8:17:8e:a6:a3:84:e6:97:52:ff:41:4e:e4:5d:1a:
7d:9e:74:27:96:38:a7:1b:6e:ee:a7:39:43:65:71:f2:45:6a:
94:6f:37:9e:17:19:13:f0:e3:21:21:16:90:cb:bb:66:7e:be:
44:24:76:f3:7e:58:ed:3a:8f:25:9c:fa:ba:0b:38:e5:f2:7d:
db:50:04:45:93:be:6a:d5:e1:19:56:b9:37:96:8e:f6:80:4d:
4b:a0:62:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz9E45pV1EbZDjwyW8PC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2
MGFhYjIwHhcNMjUwODA0MDIwMTE4WhcNMjUwODA1MDIwMTE4WjAzMTEwLwYDVQQD
Eyg0MTZkNTllMzkzMWM4NTk1YWE1ZWI2ODQ2MzllNzY3Y2FkMzA4OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+f4WaIjwftogxjmEcYphlfMSQMEb
S1l1PrmMpXUfT0yXKke1xfvzli4vjeKZBgTGFl2Jwk6sR8AmzMNbE49ZW58lVT8r
DEs6DHpT9hml93oy9kQS136M5+olxePoxePWp60raC2dkm10MXoz7QITGu8D4laP
No2MjdxkzvhW90CjRJq4pUha74LNUu+3GfHU8VUbWWT24lJtufRYfRc+IwrCe/r7
vg5vXlrynlGLmvDn2+W8xeQDtYptIGZvmOrC8i/W3X/ou2L6r6a6zr68mhUF70Mp
J8RDV6XR6CLSWhBXOjqt5blMg5HNHfCHqWHo74m5mEk7fXRm/HDEac53hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFtWeOTHIWVql62hGOednytMInHMB8GA1UdIwQY
MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt
YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy
LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXdAeF0t
JbVjw0+sFEpU2ZABgA3wJ3E6CQVylnsiZAFu8IzC3f7Fu/gVl7SlifMnVpg9J8nc
xdxB5sfMjcGsgO6wLrUiHh5fJx1KFOX9WGbddnsKVkDPKOBKkfbBjKscLUjO1UFD
llm2r5ksYfvTgpuBgzU4HQeaWqV/K5+XRGK7LS9cxWdls6QFgbI71pGNWd9k+dMJ
gJ/bnNrRdQ2lP4ige+k92BeOpqOE5pdS/0FO5F0afZ50J5Y4pxtu7qc5Q2Vx8kVq
lG83nhcZE/DjISEWkMu7Zn6+RCR2835Y7TqPJZz6ugs45fJ921AERZO+atXhGVa5
N5aO9oBNS6BiTw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:22 2025 by rpki-client