Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: JOzemsR56lBZh8zmj/rHuBXJRUG57wRyN5MaU0B413Y=
Subject key identifier: 00:ED:EF:E8:68:53:93:AE:46:D2:08:29:C7:3B:91:B8:CE:63:DC:F5
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019849656CCE0F71E4C83B61CECD0FD7BC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:40 +0000
Manifest this update: Sun 27 Jul 2025 01:00:40 +0000
Manifest next update: Mon 28 Jul 2025 01:00:40 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: FU2RjrUTYrujbFIWQYKtb73qSTU+fGVonD2th1ZuuD0=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6c:ce:0f:71:e4:c8:3b:61:ce:cd:0f:d7:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jul 27 01:00:40 2025 GMT
Not After : Jul 28 01:00:40 2025 GMT
Subject: CN=00edefe8685393ae46d20829c73b91b8ce63dcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:3a:91:72:47:82:40:4c:45:3b:78:36:74:
91:dc:58:4f:dd:cb:16:91:12:91:25:79:27:01:30:
37:af:fd:c7:06:6e:e9:ed:f6:78:03:89:ae:dd:ce:
66:2e:29:85:73:cd:81:36:d2:99:8a:b1:93:42:4a:
94:02:88:39:2d:a5:72:86:29:87:57:cf:92:1f:7e:
2c:d3:39:f8:f2:f8:b9:46:50:98:2e:4d:78:d6:60:
90:fe:35:b0:3d:38:5f:31:cb:36:af:b2:e6:02:9d:
5b:25:96:fd:90:aa:b1:30:be:4f:2b:6d:87:90:2e:
94:3b:9a:24:06:93:ef:f0:4d:d5:b9:76:f4:fb:7b:
1d:21:85:66:20:81:c8:6d:6d:95:65:d3:d3:a6:ad:
21:4d:5d:d5:2b:16:ff:f6:01:f0:e7:3a:86:73:23:
87:0f:cd:fb:60:7a:bd:d2:c9:ac:f9:ce:8f:0e:6f:
03:0a:a4:53:2a:4d:41:61:92:4a:5c:dd:ba:e5:c9:
f8:33:14:78:a4:10:e6:8b:41:6a:6b:fd:f0:b7:ba:
ed:7a:96:ce:7e:cd:c4:5d:08:29:f4:04:6b:e5:4f:
43:89:e8:64:e6:86:f8:da:bb:46:bc:88:ea:81:61:
7a:dc:45:00:66:bf:71:67:ec:7c:6c:ef:b8:2a:08:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:EF:E8:68:53:93:AE:46:D2:08:29:C7:3B:91:B8:CE:63:DC:F5
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:7d:37:3a:27:7f:a1:39:92:05:5f:c5:dc:c7:06:1e:84:
5b:79:e9:1e:1c:29:8a:34:1b:c2:a4:62:80:ff:d9:ac:fd:e0:
5d:b7:57:ad:e7:c5:e1:30:f5:ee:4f:49:56:a7:cc:6f:85:7b:
72:51:be:af:69:9c:c4:77:27:53:c6:e4:a8:3c:3e:cb:85:2a:
26:b1:22:bc:5a:24:d7:4f:7e:a2:57:2f:23:75:88:a4:39:43:
ad:26:85:96:63:09:79:1f:a5:e1:bc:29:93:87:79:99:53:46:
32:70:cd:60:d5:2c:ff:3c:3a:ce:07:a8:83:78:e8:76:03:12:
f7:6a:7f:19:12:7a:e6:14:3b:3f:d3:4e:e0:d6:8b:bd:47:de:
ce:c8:bf:80:1b:57:80:0f:dd:87:8b:10:2a:77:b6:e5:9c:64:
aa:ce:0f:d6:a2:db:dd:ff:5e:25:e9:7d:bd:b3:8d:41:3a:2a:
d2:da:b5:53:d5:52:cf:df:a5:42:3b:c9:a3:b7:72:c4:33:be:
54:4b:f7:b6:5b:ea:a6:7a:95:e1:23:01:74:4a:11:e0:63:45:
4c:a7:58:31:a4:54:76:b1:41:2d:03:f8:37:f2:8b:12:56:e5:
1c:65:9b:66:fa:13:fb:88:b5:a3:4f:4f:f7:10:15:1d:e9:18:
c5:3f:05:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZWzOD3HkyDthzs0P17xcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjUwNzI3MDEwMDQwWhcNMjUwNzI4MDEwMDQwWjAzMTEwLwYDVQQD
EygwMGVkZWZlODY4NTM5M2FlNDZkMjA4MjljNzNiOTFiOGNlNjNkY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvo6kXJHgkBMRTt4NnSR3FhP3csW
kRKRJXknATA3r/3HBm7p7fZ4A4mu3c5mLimFc82BNtKZirGTQkqUAog5LaVyhimH
V8+SH34s0zn48vi5RlCYLk141mCQ/jWwPThfMcs2r7LmAp1bJZb9kKqxML5PK22H
kC6UO5okBpPv8E3VuXb0+3sdIYVmIIHIbW2VZdPTpq0hTV3VKxb/9gHw5zqGcyOH
D837YHq90sms+c6PDm8DCqRTKk1BYZJKXN265cn4MxR4pBDmi0Fqa/3wt7rtepbO
fs3EXQgp9ARr5U9Diehk5ob42rtGvIjqgWF63EUAZr9xZ+x8bO+4KgiHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADt7+hoU5OuRtIIKcc7kbjOY9z1MB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg99Nzon
f6E5kgVfxdzHBh6EW3npHhwpijQbwqRigP/ZrP3gXbdXrefF4TD17k9JVqfMb4V7
clG+r2mcxHcnU8bkqDw+y4UqJrEivFok109+olcvI3WIpDlDrSaFlmMJeR+l4bwp
k4d5mVNGMnDNYNUs/zw6zgeog3jodgMS92p/GRJ65hQ7P9NO4NaLvUfezsi/gBtX
gA/dh4sQKne25Zxkqs4P1qLb3f9eJel9vbONQToq0tq1U9VSz9+lQjvJo7dyxDO+
VEv3tlvqpnqV4SMBdEoR4GNFTKdYMaRUdrFBLQP4N/KLElblHGWbZvoT+4i1o09P
9xAVHekYxT8FxQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:21 2025 by rpki-client