Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: SGT4Gs5mo/zes9GX2DwVf8hQ6j3tpFWkyT4fqyzbF+Y=
Subject key identifier: 59:76:E6:7B:C9:D8:35:3B:8E:B0:08:6B:2C:55:CB:3E:88:46:EE:97
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019849654EEB54FF1C42E4004919C75A2ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 10DD
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: wI6hxSiwKc9ZQwuTmUzRMTEOvoqNAYEKs6SOOCF263w=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4e:eb:54:ff:1c:42:e4:00:49:19:c7:5a:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=5976e67bc9d8353b8eb0086b2c55cb3e8846ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:59:5d:92:b6:03:84:c7:2e:c1:77:6d:4e:
dc:d9:92:48:73:64:a8:d4:1e:51:43:64:92:f7:a5:
84:a4:a0:a2:e7:03:b4:0c:5b:9c:c6:5e:8b:64:87:
26:28:37:92:02:23:d9:c4:96:89:bb:a1:30:4c:1f:
e9:51:78:58:a0:26:bc:87:01:d1:c1:d9:d1:36:77:
e3:98:c2:e2:c6:da:63:fb:6f:2e:50:aa:26:3c:3f:
c3:b0:0a:bc:1e:7e:dd:d4:52:5c:b9:4d:a6:4e:27:
26:80:0f:e2:0c:88:27:8d:50:18:0e:67:58:b7:69:
5b:fb:ad:41:4c:d6:a4:f3:d7:95:59:ab:f8:89:9b:
0b:18:79:62:4d:f5:e0:fe:38:fd:21:2c:3c:d3:77:
bb:c3:3d:2c:7b:31:d7:02:97:dd:91:74:7d:10:02:
31:91:f2:60:58:d7:1c:04:b2:2e:45:9e:be:aa:44:
eb:29:94:af:51:44:ac:f8:8b:5b:09:79:cf:bb:b5:
3c:10:f6:8d:17:ec:b2:ef:39:e4:20:f7:c5:58:17:
e1:76:25:f6:d9:ff:c7:a1:bc:95:36:e4:97:e5:ce:
c1:ea:7e:56:6c:95:d3:b7:62:ca:3c:db:92:ea:5e:
f0:a9:a6:32:a4:29:7a:a0:4d:8a:6c:7a:c2:35:23:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:E6:7B:C9:D8:35:3B:8E:B0:08:6B:2C:55:CB:3E:88:46:EE:97
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:ad:37:88:76:aa:28:55:55:8a:f9:b7:02:ce:5b:c6:11:
2b:f0:08:9b:eb:f2:11:c3:39:4d:e0:41:b7:2c:3c:b0:a6:1e:
77:2b:47:48:4c:f4:7e:2c:9e:06:6e:c6:da:53:56:ef:07:ae:
d5:6a:3a:dc:8b:0a:d7:85:6b:12:83:91:8f:3b:b1:68:be:45:
09:3d:49:9e:dd:cf:d7:1a:fa:61:91:a8:2b:95:69:3f:2f:b3:
dc:f4:7c:7a:ac:b0:36:75:f2:74:d3:97:b1:3e:9f:d2:fd:19:
38:22:f1:a2:c9:75:6b:23:2c:e2:a5:36:19:45:ff:1c:e7:ac:
90:6f:64:56:64:d9:0e:2b:9e:28:d3:14:c5:5e:de:b9:8d:9b:
6f:c5:fa:0c:59:61:f1:9f:d1:16:cc:9e:4a:35:92:29:54:97:
64:fc:c3:6c:7e:22:06:59:0f:47:26:e8:e2:9b:93:de:57:1c:
84:72:91:23:da:ae:b5:61:c1:58:82:45:01:b9:51:78:08:fb:
1a:1f:67:ea:65:74:ab:af:94:56:de:5a:6c:58:6d:3e:c6:92:
4f:01:56:14:42:0b:cc:b0:8e:56:a7:c3:31:27:25:cf:cb:fe:
0e:20:c0:bd:42:d7:4d:f3:c7:98:5b:37:9f:17:5a:da:0a:59:
a3:fd:f6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZU7rVP8cQuQASRnHWiq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm
YzFjYjcwHhcNMjUwNzI3MDEwMDMyWhcNMjUwNzI4MDEwMDMyWjAzMTEwLwYDVQQD
Eyg1OTc2ZTY3YmM5ZDgzNTNiOGViMDA4NmIyYzU1Y2IzZTg4NDZlZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ9ZXZK2A4THLsF3bU7c2ZJIc2So
1B5RQ2SS96WEpKCi5wO0DFucxl6LZIcmKDeSAiPZxJaJu6EwTB/pUXhYoCa8hwHR
wdnRNnfjmMLixtpj+28uUKomPD/DsAq8Hn7d1FJcuU2mTicmgA/iDIgnjVAYDmdY
t2lb+61BTNak89eVWav4iZsLGHliTfXg/jj9ISw803e7wz0sezHXApfdkXR9EAIx
kfJgWNccBLIuRZ6+qkTrKZSvUUSs+ItbCXnPu7U8EPaNF+yy7znkIPfFWBfhdiX2
2f/HobyVNuSX5c7B6n5WbJXTt2LKPNuS6l7wqaYypCl6oE2KbHrCNSPArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl25nvJ2DU7jrAIayxVyz6IRu6XMB8GA1UdIwQY
MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt
OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5
LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioatN4h2
qihVVYr5twLOW8YRK/AIm+vyEcM5TeBBtyw8sKYedytHSEz0fiyeBm7G2lNW7weu
1Wo63IsK14VrEoORjzuxaL5FCT1Jnt3P1xr6YZGoK5VpPy+z3PR8eqywNnXydNOX
sT6f0v0ZOCLxosl1ayMs4qU2GUX/HOeskG9kVmTZDiueKNMUxV7euY2bb8X6DFlh
8Z/RFsyeSjWSKVSXZPzDbH4iBlkPRybo4puT3lcchHKRI9qutWHBWIJFAblReAj7
Gh9n6mV0q6+UVt5abFhtPsaSTwFWFEILzLCOVqfDMSclz8v+DiDAvULXTfPHmFs3
nxda2gpZo/32Qg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:40 2025 by rpki-client