Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: 2xoE/HpwLJg7HUuvtrTJT6veJ+1VDnLhDzyTQEbxwqg=
Subject key identifier: 29:F9:66:61:B0:D9:4E:3B:F8:A6:06:64:E0:F5:F6:F1:30:A5:A6:D9
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 019848C092128ADF1B6FEAEE526715A09551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 1425
Signing time: Sat 26 Jul 2025 22:00:36 +0000
Manifest this update: Sat 26 Jul 2025 22:00:36 +0000
Manifest next update: Sun 27 Jul 2025 22:00:36 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: kH40Hpd9pgmmwVyYBWOfPiYqi+iVNqjw5N4OddLxu0g=)
2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:92:12:8a:df:1b:6f:ea:ee:52:67:15:a0:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jul 26 22:00:36 2025 GMT
Not After : Jul 27 22:00:36 2025 GMT
Subject: CN=29f96661b0d94e3bf8a60664e0f5f6f130a5a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:76:f1:c1:17:d2:4b:30:4a:19:f5:82:6b:9d:
7b:cb:b9:1c:5b:81:93:5e:11:1f:7d:84:4c:a8:a4:
8f:d9:ba:c1:8f:e5:84:d4:d6:48:2b:0a:3e:60:ae:
fd:e9:a3:ca:4a:a4:21:b6:35:15:1b:e2:1d:da:81:
47:5a:76:fd:00:d7:7a:bb:d1:fa:85:e0:69:ec:39:
69:01:81:50:1d:80:ed:5f:c5:85:35:5a:66:b5:b5:
2c:0d:ef:00:3f:e1:af:ab:50:28:22:70:1c:c7:27:
58:34:92:22:9e:90:a5:a6:4e:44:e3:78:47:ba:f3:
e7:2b:dd:f9:09:0e:92:58:82:99:74:f8:0a:81:90:
19:00:0e:f4:ad:d3:22:62:1b:0b:c2:d0:19:b2:30:
a5:84:c6:79:c4:1f:3d:a8:08:27:a4:e8:1d:4c:7b:
5e:56:3d:a2:fd:4d:df:53:c9:aa:7a:ee:ca:b4:53:
31:1f:31:d8:dc:04:03:92:4a:d9:74:67:8e:63:83:
53:92:5a:6f:57:8d:bd:58:52:03:10:20:5f:28:e0:
ba:9f:5f:ac:c7:cb:30:96:31:c2:6f:7d:c9:81:7a:
8a:aa:81:e7:96:85:3a:37:1d:f8:74:df:04:a3:94:
49:82:93:6d:ae:79:a7:0a:86:d1:1c:e8:b1:7c:d7:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:66:61:B0:D9:4E:3B:F8:A6:06:64:E0:F5:F6:F1:30:A5:A6:D9
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2c:a9:a8:89:8a:6a:fb:34:80:b6:13:7b:cd:fe:64:fb:25:
b4:4f:9c:4e:ef:ab:73:24:65:12:a5:2f:8d:b1:18:7b:f4:8c:
e4:c5:de:5a:ee:2f:9c:33:60:ee:57:26:a3:59:b1:4e:49:88:
eb:12:68:49:1d:a9:a3:82:b0:7c:7e:9a:c3:fe:39:41:4e:b5:
e8:13:e7:63:8a:b0:a4:7e:b3:02:e6:10:04:f8:db:87:de:18:
2c:fc:3e:59:1d:ff:c4:35:c2:df:5d:a1:7b:43:a4:46:7b:c6:
ae:7d:48:3a:c5:31:98:43:6f:c2:ce:6c:9c:f3:6d:5c:cd:6d:
69:3d:1c:6d:e8:ba:2f:db:1e:2b:4c:b5:cd:8b:16:1d:07:4c:
a3:ae:a2:cc:cb:82:dc:f5:09:01:28:66:99:0f:97:66:8c:cd:
4d:0b:94:e8:9f:92:65:12:99:09:b1:13:9e:08:05:4c:a7:95:
6b:e6:50:93:8b:e8:66:ee:af:fe:3c:0d:75:d5:37:1a:81:13:
40:21:e1:a1:c8:56:10:24:17:9e:46:ef:8a:ce:13:86:42:d0:
65:dd:ee:77:ad:f1:e8:e0:5a:1e:d9:59:c3:0c:02:33:2d:4f:
74:36:62:ac:5d:84:70:3b:09:db:e9:a5:5c:5a:06:e7:04:ba:
36:55:09:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwJISit8bb+ruUmcVoJVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjUwNzI2MjIwMDM2WhcNMjUwNzI3MjIwMDM2WjAzMTEwLwYDVQQD
EygyOWY5NjY2MWIwZDk0ZTNiZjhhNjA2NjRlMGY1ZjZmMTMwYTVhNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HbxwRfSSzBKGfWCa517y7kcW4GT
XhEffYRMqKSP2brBj+WE1NZIKwo+YK796aPKSqQhtjUVG+Id2oFHWnb9ANd6u9H6
heBp7DlpAYFQHYDtX8WFNVpmtbUsDe8AP+Gvq1AoInAcxydYNJIinpClpk5E43hH
uvPnK935CQ6SWIKZdPgKgZAZAA70rdMiYhsLwtAZsjClhMZ5xB89qAgnpOgdTHte
Vj2i/U3fU8mqeu7KtFMxHzHY3AQDkkrZdGeOY4NTklpvV429WFIDECBfKOC6n1+s
x8swljHCb33JgXqKqoHnloU6Nx34dN8Eo5RJgpNtrnmnCobRHOixfNcxGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn5ZmGw2U47+KYGZOD19vEwpabZMB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyypqImK
avs0gLYTe83+ZPsltE+cTu+rcyRlEqUvjbEYe/SM5MXeWu4vnDNg7lcmo1mxTkmI
6xJoSR2po4KwfH6aw/45QU616BPnY4qwpH6zAuYQBPjbh94YLPw+WR3/xDXC312h
e0OkRnvGrn1IOsUxmENvws5snPNtXM1taT0cbei6L9seK0y1zYsWHQdMo66izMuC
3PUJAShmmQ+XZozNTQuU6J+SZRKZCbETnggFTKeVa+ZQk4voZu6v/jwNddU3GoET
QCHhochWECQXnkbvis4ThkLQZd3ud63x6OBaHtlZwwwCMy1PdDZirF2EcDsJ2+ml
XFoG5wS6NlUJZw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:32 2025 by rpki-client