
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: /0+QYIym97t444T2XYdcbj/s4xSQaRDMECmdssN5W8w=
Subject key identifier: 3F:9B:15:82:D1:D5:13:23:1A:EA:5B:DD:5C:EC:CA:4E:EB:9E:31:01
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 01987F0AA7A72606F80F9BE66870EB610595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: E4
Signing time: Wed 06 Aug 2025 11:01:01 +0000
Manifest this update: Wed 06 Aug 2025 11:01:01 +0000
Manifest next update: Thu 07 Aug 2025 11:01:01 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: vyLbPxcviyOD5nspLSjrjn0apaFAWRMqtIT9meURO2M=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:a7:a7:26:06:f8:0f:9b:e6:68:70:eb:61:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Aug 6 11:01:01 2025 GMT
Not After : Aug 7 11:01:01 2025 GMT
Subject: CN=3f9b1582d1d513231aea5bdd5cecca4eeb9e3101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:28:f8:6b:05:42:52:b5:a3:f1:13:26:92:
72:ae:93:8f:2c:44:89:a9:c1:bd:74:63:3e:77:65:
e2:19:9b:e2:79:0e:8c:50:96:18:75:20:f7:6d:21:
00:1f:b1:a9:bb:e6:ea:0b:78:ab:46:af:20:5e:cd:
c1:87:63:af:7c:c4:7a:20:20:ff:52:73:4d:20:d2:
05:5b:00:81:e3:df:03:f4:b6:f6:62:f9:5d:54:c8:
2e:c5:a2:34:a5:2d:aa:31:66:87:3c:ff:b6:ae:11:
bb:c1:35:e1:0d:8a:f7:21:39:c7:ee:a2:08:64:32:
fa:60:2c:da:88:25:e9:bd:a3:28:2e:98:fb:b3:ce:
c8:65:3f:b3:fe:6a:01:1b:96:94:45:77:80:56:73:
5c:85:fd:19:3c:c2:39:1a:ab:60:5f:9b:dd:e6:fc:
31:2f:bb:f9:a3:c5:39:05:52:d2:83:ac:09:34:c5:
d5:c1:e9:38:b9:8c:a6:10:7e:e0:e6:18:e9:27:b7:
a5:13:e1:bb:ad:73:92:e5:cc:88:73:32:e8:80:2f:
e6:a6:7e:a4:73:18:15:d6:21:92:00:51:b2:2b:27:
ca:e2:8a:d0:74:0c:fb:34:35:d5:1c:5a:81:10:b6:
2d:33:3f:4f:b4:f8:f6:53:77:a4:04:ff:3c:7d:98:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:15:82:D1:D5:13:23:1A:EA:5B:DD:5C:EC:CA:4E:EB:9E:31:01
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:df:dd:01:dc:24:e9:96:6c:5b:55:ae:cc:92:a3:97:48:58:
48:c5:5a:89:2f:98:e6:86:7d:60:11:52:f5:85:ef:ac:75:34:
19:36:b0:e3:07:63:03:f6:c5:34:5d:65:4d:fb:a1:51:d6:25:
c4:fb:2a:05:fa:26:6e:2d:77:a4:7a:69:09:23:5a:2b:f2:a0:
53:41:7c:ba:4f:90:81:8c:8f:f8:17:31:83:42:a2:25:c2:af:
68:53:53:0e:9b:1f:42:bb:29:e7:2f:6b:da:6e:6c:15:55:d4:
24:77:80:f8:8e:27:49:e7:9f:b0:e6:7c:5d:0d:a9:49:f2:e6:
79:66:2a:e0:de:ef:17:99:34:57:dc:16:fa:d3:08:4f:99:9d:
52:d1:e5:33:ed:65:f9:2a:a5:68:e3:12:be:23:18:25:c3:cb:
3f:f0:49:03:0c:d8:45:be:6b:d7:49:1e:b7:3e:21:f0:c0:97:
c1:9a:fc:10:d4:d4:b9:4c:49:a4:9a:bf:0f:e0:41:92:e9:6b:
96:9d:98:dd:55:5a:4d:49:df:5b:6c:94:3c:68:30:d1:c9:71:
48:3f:c6:64:ef:a3:07:cd:2a:ad:1d:ca:b8:69:3c:03:cf:0b:
35:97:a5:71:a9:2f:b9:b3:42:b7:20:be:56:e4:fd:11:a6:7c:
f3:3b:07:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/CqenJgb4D5vmaHDrYQWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZWU2ZGY5NzI4Y2Q4YWYwZjM0YTAzZWQ2ZWEzMTUxYzNi
YzIyYzgwHhcNMjUwODA2MTEwMTAxWhcNMjUwODA3MTEwMTAxWjAzMTEwLwYDVQQD
EygzZjliMTU4MmQxZDUxMzIzMWFlYTViZGQ1Y2VjY2E0ZWViOWUzMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Yo+GsFQlK1o/ETJpJyrpOPLESJ
qcG9dGM+d2XiGZvieQ6MUJYYdSD3bSEAH7Gpu+bqC3irRq8gXs3Bh2OvfMR6ICD/
UnNNINIFWwCB498D9Lb2YvldVMguxaI0pS2qMWaHPP+2rhG7wTXhDYr3ITnH7qII
ZDL6YCzaiCXpvaMoLpj7s87IZT+z/moBG5aURXeAVnNchf0ZPMI5GqtgX5vd5vwx
L7v5o8U5BVLSg6wJNMXVwek4uYymEH7g5hjpJ7elE+G7rXOS5cyIczLogC/mpn6k
cxgV1iGSAFGyKyfK4orQdAz7NDXVHFqBELYtMz9PtPj2U3ekBP88fZgUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+bFYLR1RMjGupb3Vzsyk7rnjEBMB8GA1UdIwQY
MBaAFNrubflyjNivDzSgPtbqMVHDvCLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2Ut
NGQyMGUzNGQwOTkyLzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2UtNGQyMGUzNGQwOTky
LzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKt/dAdwk
6ZZsW1WuzJKjl0hYSMVaiS+Y5oZ9YBFS9YXvrHU0GTaw4wdjA/bFNF1lTfuhUdYl
xPsqBfombi13pHppCSNaK/KgU0F8uk+QgYyP+Bcxg0KiJcKvaFNTDpsfQrsp5y9r
2m5sFVXUJHeA+I4nSeefsOZ8XQ2pSfLmeWYq4N7vF5k0V9wW+tMIT5mdUtHlM+1l
+SqlaOMSviMYJcPLP/BJAwzYRb5r10ketz4h8MCXwZr8ENTUuUxJpJq/D+BBkulr
lp2Y3VVaTUnfW2yUPGgw0clxSD/GZO+jB80qrR3KuGk8A88LNZelcakvubNCtyC+
VuT9EaZ88zsHkw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:44 2025 by rpki-client