Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: pHDNfSJnyDSePoP/RQlj2aso8PsMXflFTaKgqAOqv+E=
Subject key identifier: DB:B4:AE:AF:E2:06:4C:CA:70:78:D2:FB:FA:59:55:C3:23:63:3D:E5
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 01985F1265B62B8B15EDFB574B8A577F0D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: A9
Signing time: Thu 31 Jul 2025 06:01:37 +0000
Manifest this update: Thu 31 Jul 2025 06:01:37 +0000
Manifest next update: Fri 01 Aug 2025 06:01:37 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: meH7s8PDDavKcwTQ6qxU30Z1Q4y6OBvOsAsieqUV6lg=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:12:65:b6:2b:8b:15:ed:fb:57:4b:8a:57:7f:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Jul 31 06:01:37 2025 GMT
Not After : Aug 1 06:01:37 2025 GMT
Subject: CN=dbb4aeafe2064cca7078d2fbfa5955c323633de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:1d:57:e8:22:41:7b:ae:ff:8b:71:0d:99:
f8:89:af:4c:cf:35:66:7b:bc:ea:a4:a5:28:63:85:
76:53:d2:f6:36:7c:90:ea:bd:21:87:88:03:24:f4:
b4:dd:75:f7:e6:a2:e3:20:1b:e2:53:c5:01:3a:99:
b4:ab:70:21:05:19:bd:8e:86:2c:35:0a:c3:2b:a4:
9f:e2:b7:08:96:22:60:78:94:31:74:c5:ff:5e:74:
32:ca:66:16:5a:b8:04:eb:6e:fb:d9:81:9c:35:88:
aa:31:a9:31:fc:44:63:0b:e7:2e:2f:ba:1e:52:31:
63:8f:c8:ed:8f:6d:d0:3b:b2:5d:d4:08:27:6b:33:
61:28:06:83:a3:cc:64:4c:94:44:f2:d8:d4:57:c1:
04:29:63:c8:79:0a:21:82:a9:65:68:97:0e:1e:d5:
6f:11:c8:9d:e0:a1:34:42:86:82:58:02:31:15:c4:
56:14:bf:b9:ac:68:08:4d:0e:b0:81:03:93:10:f1:
3b:6b:7a:5f:b1:26:64:3e:dc:e8:63:2b:f9:29:2a:
1c:bf:6a:37:28:6c:12:e5:9d:49:35:43:60:32:7a:
1d:a8:67:89:26:36:72:d6:01:d5:96:6e:bf:60:5f:
fa:be:ce:db:5a:8b:98:3b:1c:87:37:9c:d2:b9:eb:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:AE:AF:E2:06:4C:CA:70:78:D2:FB:FA:59:55:C3:23:63:3D:E5
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b7:5e:06:44:14:57:08:8a:3d:3c:9b:34:d0:6e:d6:49:db:
97:1e:7d:4b:2e:f8:ab:60:46:03:72:76:7e:1d:6f:a6:43:60:
f0:ce:48:e2:7c:74:b9:10:71:20:08:0b:6b:a8:58:fd:14:e4:
6d:60:9b:f3:9b:1b:77:96:c7:8b:25:ae:52:cb:c3:39:32:6e:
22:bc:9c:1f:8a:ce:25:05:b3:08:42:01:f4:31:ec:c6:38:7c:
f2:3d:5c:ca:e7:cd:73:ac:ab:1e:76:97:83:57:91:ff:61:e1:
d3:53:aa:7d:3a:e2:ab:18:44:68:62:91:55:1c:7c:a1:54:f6:
b5:9d:17:62:da:1a:1a:63:36:b3:6c:cb:94:93:ea:2b:29:b1:
3d:31:e5:62:e1:33:45:82:4d:00:d6:f1:c4:67:8e:3c:12:81:
4e:73:5d:a5:56:05:6d:fc:3d:2d:9a:b8:8a:6e:9e:f5:5c:ed:
79:42:d9:c6:fd:ce:38:e2:7a:c3:08:b7:6a:a6:90:ce:ee:ad:
b1:d9:2a:db:16:67:67:23:e7:9f:cf:42:f9:dc:28:4e:7c:7a:
57:a3:56:a8:60:c9:f9:9b:11:00:93:83:d9:01:b7:13:f0:94:
d1:fe:1e:c7:b3:8c:a1:83:d4:9e:d1:83:74:1b:46:fe:32:56:
a2:bf:20:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhfEmW2K4sV7ftXS4pXfw1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjUwNzMxMDYwMTM3WhcNMjUwODAxMDYwMTM3WjAzMTEwLwYDVQQD
EyhkYmI0YWVhZmUyMDY0Y2NhNzA3OGQyZmJmYTU5NTVjMzIzNjMzZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgYdV+giQXuu/4txDZn4ia9MzzVm
e7zqpKUoY4V2U9L2NnyQ6r0hh4gDJPS03XX35qLjIBviU8UBOpm0q3AhBRm9joYs
NQrDK6Sf4rcIliJgeJQxdMX/XnQyymYWWrgE62772YGcNYiqMakx/ERjC+cuL7oe
UjFjj8jtj23QO7Jd1AgnazNhKAaDo8xkTJRE8tjUV8EEKWPIeQohgqllaJcOHtVv
Ecid4KE0QoaCWAIxFcRWFL+5rGgITQ6wgQOTEPE7a3pfsSZkPtzoYyv5KSocv2o3
KGwS5Z1JNUNgMnodqGeJJjZy1gHVlm6/YF/6vs7bWouYOxyHN5zSuesRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu0rq/iBkzKcHjS+/pZVcMjYz3lMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbdeBkQU
VwiKPTybNNBu1knblx59Sy74q2BGA3J2fh1vpkNg8M5I4nx0uRBxIAgLa6hY/RTk
bWCb85sbd5bHiyWuUsvDOTJuIrycH4rOJQWzCEIB9DHsxjh88j1cyufNc6yrHnaX
g1eR/2Hh01OqfTriqxhEaGKRVRx8oVT2tZ0XYtoaGmM2s2zLlJPqKymxPTHlYuEz
RYJNANbxxGeOPBKBTnNdpVYFbfw9LZq4im6e9VzteULZxv3OOOJ6wwi3aqaQzu6t
sdkq2xZnZyPnn89C+dwoTnx6V6NWqGDJ+ZsRAJOD2QG3E/CU0f4ex7OMoYPUntGD
dBtG/jJWor8gFA==
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:26:29 2025 by rpki-client