Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: npfsvGTVwUE1sL9mdUfHRJnt/b6aQuxmd2Xch45lQHs=
Subject key identifier: A2:6D:1D:EB:13:7C:D4:3C:2C:9D:38:CA:19:1D:A2:5A:85:C4:6A:55
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 01989636B607D90BA34D787379A7C7F9CCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0E83
Signing time: Sun 10 Aug 2025 23:00:24 +0000
Manifest this update: Sun 10 Aug 2025 23:00:24 +0000
Manifest next update: Mon 11 Aug 2025 23:00:24 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: blIUd0v8Gkyew9PlbaOscFhHMPkyj+EwBcq/V66TSe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:b6:07:d9:0b:a3:4d:78:73:79:a7:c7:f9:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Aug 10 23:00:24 2025 GMT
Not After : Aug 11 23:00:24 2025 GMT
Subject: CN=a26d1deb137cd43c2c9d38ca191da25a85c46a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:ed:a6:a8:6b:f2:1a:a9:50:d3:ab:6f:fd:
e1:86:b7:ae:b4:fb:2a:c3:65:3e:54:06:64:6e:f9:
b0:21:61:2a:10:b8:41:97:59:b9:7b:39:7a:43:10:
c2:74:2d:8b:65:98:14:30:48:99:76:ab:01:c0:da:
3e:05:75:ba:f5:43:78:2e:ac:12:1f:9c:d5:06:a8:
d3:07:28:33:e0:54:da:73:da:c4:e7:1b:4a:5b:75:
08:59:4a:d0:8a:8c:88:c3:30:5c:51:0d:41:41:83:
e6:52:af:18:31:58:d2:98:41:e0:4a:c5:c1:f5:90:
4b:48:2e:62:9b:cb:e3:20:03:da:45:d9:6c:9c:bd:
ad:04:01:1f:21:d5:ab:9d:83:ce:26:82:f6:33:19:
3b:c7:dd:63:71:58:96:1d:9c:f2:62:bb:32:86:c6:
be:47:0d:cc:9b:6e:cf:5a:dd:72:cb:ab:c4:ad:c6:
44:0f:5f:9f:7a:5d:c3:b1:aa:4f:b6:b9:db:38:c3:
81:ee:fe:69:8c:e0:aa:01:af:14:97:f5:f1:48:0f:
16:02:ec:4f:1d:ba:13:8e:52:38:dc:9d:c9:d5:58:
13:ce:d4:a5:ff:6d:02:16:1d:ed:4c:ec:78:3f:03:
9d:44:9f:7f:68:ac:f2:0f:b8:e6:8b:47:2f:e4:7e:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:1D:EB:13:7C:D4:3C:2C:9D:38:CA:19:1D:A2:5A:85:C4:6A:55
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:42:31:a7:ea:21:07:34:6c:29:78:fb:1a:99:53:fb:a0:6d:
81:48:15:72:21:ed:e5:ab:02:06:67:ce:58:e5:51:b1:8e:66:
e2:f8:b0:01:af:34:ca:d4:d9:5e:5c:01:38:41:94:c5:94:2d:
c7:4d:58:a1:7f:75:14:27:ea:5f:8d:41:2f:a5:67:f8:20:30:
c1:67:e6:d4:51:78:80:1f:69:17:3b:f0:a8:48:49:81:9d:0f:
24:48:7a:1d:b7:1e:81:85:12:5e:a4:fb:c8:c1:4e:f4:18:25:
1b:a1:4b:7f:76:f3:bc:bc:63:1e:67:5c:44:e0:9e:7b:d5:5e:
f9:ae:a1:79:2e:32:87:86:62:95:dc:ed:48:35:8e:10:57:2a:
7b:ac:26:40:7c:a1:65:53:c1:6d:4b:da:1c:71:31:ea:3c:8c:
68:f0:2d:5c:91:9f:53:64:9b:71:e6:47:9a:bf:05:46:1e:df:
f3:d1:ef:1c:7c:82:1f:fd:d9:1e:24:ae:24:8b:5b:32:b6:23:
46:c4:78:8c:c8:d8:e2:f0:99:00:33:1d:53:9b:15:46:d0:fa:
7a:8c:fa:dc:fd:11:fb:c4:b2:23:0c:a2:2a:a7:56:cc:bc:2a:
d6:5c:6e:9a:c1:9c:bd:75:d7:3f:91:c4:13:5b:a3:fd:ab:99:
12:0a:d7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNrYH2QujTXhzeafH+czzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy
NzAwNjEwHhcNMjUwODEwMjMwMDI0WhcNMjUwODExMjMwMDI0WjAzMTEwLwYDVQQD
EyhhMjZkMWRlYjEzN2NkNDNjMmM5ZDM4Y2ExOTFkYTI1YTg1YzQ2YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pvtpqhr8hqpUNOrb/3hhreutPsq
w2U+VAZkbvmwIWEqELhBl1m5ezl6QxDCdC2LZZgUMEiZdqsBwNo+BXW69UN4LqwS
H5zVBqjTBygz4FTac9rE5xtKW3UIWUrQioyIwzBcUQ1BQYPmUq8YMVjSmEHgSsXB
9ZBLSC5im8vjIAPaRdlsnL2tBAEfIdWrnYPOJoL2Mxk7x91jcViWHZzyYrsyhsa+
Rw3Mm27PWt1yy6vErcZED1+fel3DsapPtrnbOMOB7v5pjOCqAa8Ul/XxSA8WAuxP
HboTjlI43J3J1VgTztSl/20CFh3tTOx4PwOdRJ9/aKzyD7jmi0cv5H7XWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJtHesTfNQ8LJ04yhkdolqFxGpVMB8GA1UdIwQY
MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt
NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm
LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0Ixp+oh
BzRsKXj7GplT+6BtgUgVciHt5asCBmfOWOVRsY5m4viwAa80ytTZXlwBOEGUxZQt
x01YoX91FCfqX41BL6Vn+CAwwWfm1FF4gB9pFzvwqEhJgZ0PJEh6HbcegYUSXqT7
yMFO9BglG6FLf3bzvLxjHmdcROCee9Ve+a6heS4yh4ZildztSDWOEFcqe6wmQHyh
ZVPBbUvaHHEx6jyMaPAtXJGfU2SbceZHmr8FRh7f89HvHHyCH/3ZHiSuJItbMrYj
RsR4jMjY4vCZADMdU5sVRtD6eoz63P0R+8SyIwyiKqdWzLwq1lxumsGcvXXXP5HE
E1uj/auZEgrXdQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:32 2025 by rpki-client