
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: KAiQptL8+tBlRODlSYbD1kCi0QDhkaFdhUbDhyNHy00=
Subject key identifier: 2C:85:EF:94:3D:9B:1E:32:0E:7A:DA:0A:CD:F5:7D:8C:3C:7C:D5:16
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019873065C377095F432FC24778040AB31AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 06C2
Signing time: Mon 04 Aug 2025 03:00:53 +0000
Manifest this update: Mon 04 Aug 2025 03:00:53 +0000
Manifest next update: Tue 05 Aug 2025 03:00:53 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: sL6Wy3Or5w9B6ihx1+Ym2eUb8ANGhyDWdpE1gLObqYs=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:5c:37:70:95:f4:32:fc:24:77:80:40:ab:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Aug 4 03:00:53 2025 GMT
Not After : Aug 5 03:00:53 2025 GMT
Subject: CN=2c85ef943d9b1e320e7ada0acdf57d8c3c7cd516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:9b:46:a2:02:1a:f5:aa:99:8f:e6:a5:4b:
e9:78:74:30:51:1e:46:ea:c1:9b:6d:22:a1:ac:80:
73:c2:57:ac:b2:be:01:b7:78:97:0d:c2:99:e5:2d:
92:9a:2d:c9:40:76:90:3d:ab:3f:3a:94:ef:32:0c:
a9:89:45:ee:54:37:6f:c9:67:4b:47:99:04:82:c7:
c1:ef:db:59:2f:0a:df:dc:94:40:a1:f5:5e:c3:2d:
c6:6d:c3:25:27:2d:52:d7:4a:83:55:69:da:bc:af:
2a:69:f5:a9:9e:a2:3c:29:26:99:9e:49:98:80:ac:
3c:13:db:24:af:7d:1f:c1:ff:11:e1:c6:34:3e:fb:
8b:24:a8:fd:ab:34:2e:c0:a6:8b:30:ca:65:05:25:
e4:54:ea:d4:1e:e6:4a:b2:8a:6d:1d:6c:7c:9b:80:
ec:39:f4:45:32:52:70:b8:d0:cc:4a:71:51:00:01:
ed:5f:a2:64:56:b2:82:7c:cb:7a:11:3f:8d:91:54:
f7:87:40:b3:d7:7b:8f:35:2e:c7:be:e2:84:c4:f3:
7d:12:92:14:6e:b8:d8:26:86:19:5e:a4:f5:40:92:
97:ce:09:2f:69:65:78:b6:44:40:5c:9e:0d:2c:b8:
99:04:dd:c9:64:23:bb:36:d6:86:d0:49:2d:11:75:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:EF:94:3D:9B:1E:32:0E:7A:DA:0A:CD:F5:7D:8C:3C:7C:D5:16
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:93:44:cf:de:4e:04:94:3c:05:40:f9:c4:3e:5f:a2:9d:0e:
1b:41:c8:81:ea:71:3b:e9:95:44:ee:7f:fe:8b:cd:f5:13:ed:
b5:ea:19:3d:43:36:db:cf:4b:55:9e:a8:4d:38:93:b8:66:62:
fd:0b:1f:cf:f0:18:12:60:32:d2:0b:94:2b:6c:8d:c5:1f:cb:
01:c7:6a:1a:dc:25:0b:86:69:e9:ed:fa:d8:f9:00:77:b4:af:
fd:9c:dc:42:7d:ea:b8:14:dd:43:37:a5:0c:da:4c:60:93:e0:
aa:fd:04:f8:9c:12:05:02:dd:9a:a1:68:9b:43:2d:08:43:0f:
b7:1c:75:d1:b0:7e:bb:1d:07:e6:af:d6:7c:f2:af:9e:4f:ca:
00:e8:a3:e3:94:a0:e4:03:93:f5:5e:91:6c:2b:c9:cd:09:69:
a3:57:ea:6f:58:c2:e3:d8:7f:f1:05:c6:22:19:51:e3:60:68:
1d:59:8e:41:d3:50:62:99:a7:0b:7c:36:58:d7:ca:63:2a:3a:
3a:30:4c:8f:d9:c5:fe:da:80:0a:d1:62:ec:04:c6:df:03:8d:
54:2b:57:19:0b:d3:6d:5c:c8:85:64:0b:79:05:45:41:2b:7f:
fa:1b:51:22:25:c6:b3:90:66:74:0a:20:38:f4:68:1e:be:61:
a8:6b:07:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBlw3cJX0Mvwkd4BAqzGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjUwODA0MDMwMDUzWhcNMjUwODA1MDMwMDUzWjAzMTEwLwYDVQQD
EygyYzg1ZWY5NDNkOWIxZTMyMGU3YWRhMGFjZGY1N2Q4YzNjN2NkNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOmbRqICGvWqmY/mpUvpeHQwUR5G
6sGbbSKhrIBzwlessr4Bt3iXDcKZ5S2Smi3JQHaQPas/OpTvMgypiUXuVDdvyWdL
R5kEgsfB79tZLwrf3JRAofVewy3GbcMlJy1S10qDVWnavK8qafWpnqI8KSaZnkmY
gKw8E9skr30fwf8R4cY0PvuLJKj9qzQuwKaLMMplBSXkVOrUHuZKsoptHWx8m4Ds
OfRFMlJwuNDMSnFRAAHtX6JkVrKCfMt6ET+NkVT3h0Cz13uPNS7HvuKExPN9EpIU
brjYJoYZXqT1QJKXzgkvaWV4tkRAXJ4NLLiZBN3JZCO7NtaG0EktEXVWpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyF75Q9mx4yDnraCs31fYw8fNUWMB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZNEz95O
BJQ8BUD5xD5fop0OG0HIgepxO+mVRO5//ovN9RPtteoZPUM2289LVZ6oTTiTuGZi
/Qsfz/AYEmAy0guUK2yNxR/LAcdqGtwlC4Zp6e362PkAd7Sv/ZzcQn3quBTdQzel
DNpMYJPgqv0E+JwSBQLdmqFom0MtCEMPtxx10bB+ux0H5q/WfPKvnk/KAOij45Sg
5AOT9V6RbCvJzQlpo1fqb1jC49h/8QXGIhlR42BoHVmOQdNQYpmnC3w2WNfKYyo6
OjBMj9nF/tqACtFi7ATG3wONVCtXGQvTbVzIhWQLeQVFQSt/+htRIiXGs5BmdAog
OPRoHr5hqGsHbw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:24 2025 by rpki-client