Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: p1DMrQgq/AI62PHliLdL5UB9OUYjiX/7dZ6a70iv3V8=
Subject key identifier: 9B:3A:82:76:08:AA:4B:8B:05:2D:67:75:B1:CB:BF:32:71:7F:FD:4B
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019848F77E915D4BE4B84ED9844D9E291316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 033F
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: fni1vgg4FmlmLfvY1HFV33YlpN2RuRH34QkjFS2c7N8=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7e:91:5d:4b:e4:b8:4e:d9:84:4d:9e:29:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=9b3a827608aa4b8b052d6775b1cbbf32717ffd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:cc:ff:9d:4e:39:1f:8b:10:7d:d6:2e:be:
ba:d4:29:af:21:2e:0a:c1:63:55:22:eb:12:c0:dd:
9d:be:b7:b0:e0:96:c6:e8:9c:67:b5:5c:53:21:dc:
b9:ca:31:a3:d7:52:cc:a7:d4:a5:df:df:a3:52:83:
9b:f5:f9:e0:0b:20:3c:c3:33:d1:ee:9f:fd:81:46:
89:72:fb:26:f8:af:3e:7f:f9:b1:01:60:83:05:f1:
88:45:63:65:77:81:61:59:1d:6c:89:56:18:59:30:
c7:23:8d:55:1a:b9:9e:fb:3e:f1:c6:cf:ca:0b:3c:
45:c2:a5:f5:27:a9:64:01:ea:37:5f:f0:a1:b8:0f:
6f:40:21:06:7e:64:51:ab:a5:c2:5e:49:64:7a:d7:
32:7d:23:a1:a6:51:19:3c:d4:c4:05:2b:1b:1a:79:
88:ed:5f:95:fc:58:f2:22:a1:7b:e3:ce:a7:c2:32:
75:8d:04:77:bc:e2:5c:73:63:ff:30:0d:d4:8a:d0:
e6:e4:7b:26:75:a0:db:ad:1d:94:17:a1:db:f7:fb:
0a:22:64:65:7e:3a:58:bf:55:2d:be:3d:1d:d9:4e:
fd:60:4f:8b:94:6c:0e:6e:88:cf:f3:93:2e:dc:9b:
a0:6e:61:8a:ff:ad:ad:42:a7:cf:9a:42:0b:74:a5:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:82:76:08:AA:4B:8B:05:2D:67:75:B1:CB:BF:32:71:7F:FD:4B
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:dc:57:87:14:95:25:04:e8:13:32:52:5c:54:64:02:37:
a2:b9:a5:66:09:94:c3:63:18:f8:f4:7d:06:35:75:6d:4f:cf:
76:07:7a:c0:4b:ae:94:6e:1a:10:9a:01:77:c1:66:80:16:82:
02:3e:00:8d:52:d5:a5:8f:2a:05:35:a6:6d:eb:27:71:7e:e4:
52:db:2f:13:a8:e4:92:58:37:23:08:1c:76:e0:77:fb:94:9b:
0c:26:f9:3e:cb:11:30:79:90:75:37:58:ab:14:47:18:b5:24:
92:24:1c:71:37:d4:06:d2:0f:f1:a3:a8:d4:2f:3e:77:24:60:
af:a1:5c:58:b6:b8:39:26:f3:d0:da:bb:e8:29:16:55:70:14:
11:ec:05:91:98:a5:1b:b9:cd:5c:e6:29:ab:31:d7:be:91:68:
8b:68:7a:d6:99:06:d8:d6:d1:e4:00:68:ba:cc:cc:f1:21:0c:
24:ff:9d:d5:ea:20:77:a5:42:8a:89:12:a8:d5:e5:b7:b6:10:
ef:a8:bb:e2:76:94:b8:d6:ca:87:57:11:fb:45:cc:6f:ba:dd:
f4:65:b3:dd:5a:b6:aa:0d:35:22:df:36:fc:68:3d:42:09:a2:
4c:8f:d8:db:53:5d:c1:a0:4a:ae:33:a4:af:36:4c:40:2b:6d:
74:88:47:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI936RXUvkuE7ZhE2eKRMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjUwNzI2MjMwMDM1WhcNMjUwNzI3MjMwMDM1WjAzMTEwLwYDVQQD
Eyg5YjNhODI3NjA4YWE0YjhiMDUyZDY3NzViMWNiYmYzMjcxN2ZmZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KPM/51OOR+LEH3WLr661CmvIS4K
wWNVIusSwN2dvrew4JbG6JxntVxTIdy5yjGj11LMp9Sl39+jUoOb9fngCyA8wzPR
7p/9gUaJcvsm+K8+f/mxAWCDBfGIRWNld4FhWR1siVYYWTDHI41VGrme+z7xxs/K
CzxFwqX1J6lkAeo3X/ChuA9vQCEGfmRRq6XCXklketcyfSOhplEZPNTEBSsbGnmI
7V+V/FjyIqF7486nwjJ1jQR3vOJcc2P/MA3UitDm5HsmdaDbrR2UF6Hb9/sKImRl
fjpYv1Utvj0d2U79YE+LlGwObojP85Mu3JugbmGK/62tQqfPmkILdKW8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs6gnYIqkuLBS1ndbHLvzJxf/1LMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODvcV4cU
lSUE6BMyUlxUZAI3ormlZgmUw2MY+PR9BjV1bU/Pdgd6wEuulG4aEJoBd8FmgBaC
Aj4AjVLVpY8qBTWmbesncX7kUtsvE6jkklg3IwgcduB3+5SbDCb5PssRMHmQdTdY
qxRHGLUkkiQccTfUBtIP8aOo1C8+dyRgr6FcWLa4OSbz0Nq76CkWVXAUEewFkZil
G7nNXOYpqzHXvpFoi2h61pkG2NbR5ABouszM8SEMJP+d1eogd6VCiokSqNXlt7YQ
76i74naUuNbKh1cR+0XMb7rd9GWz3Vq2qg01It82/Gg9QgmiTI/Y21NdwaBKrjOk
rzZMQCttdIhHrQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:10:22 2025 by rpki-client