Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: RIIhIfLnk96jD1TW/qEZDbMqQtkWzKhtSIPOKm2FPik=
Subject key identifier: 0E:1A:22:41:31:10:C1:C4:3A:C9:EF:2C:61:33:EB:FC:A1:20:E9:A5
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0198277EBF2F4380689396B707D0B60E38BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 15F3
Signing time: Sun 20 Jul 2025 11:01:14 +0000
Manifest this update: Sun 20 Jul 2025 11:01:14 +0000
Manifest next update: Mon 21 Jul 2025 11:01:14 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: Wg17tJsMvpcFe1HIO0V3iyx9hFDqc6zrlf15b9vZsz8=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:bf:2f:43:80:68:93:96:b7:07:d0:b6:0e:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jul 20 11:01:14 2025 GMT
Not After : Jul 21 11:01:14 2025 GMT
Subject: CN=0e1a22413110c1c43ac9ef2c6133ebfca120e9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:bf:a2:58:ed:bc:f4:4c:25:f4:77:f2:c7:
30:b9:de:30:17:96:ab:db:ac:90:c8:0f:50:c9:98:
95:ba:98:c5:58:78:4a:e5:cd:e6:33:64:13:41:86:
f2:35:cd:84:16:3f:04:e7:f2:04:e2:b4:10:bf:0c:
26:25:00:75:79:ce:cd:bb:d7:2c:06:ab:fb:f1:b9:
d4:e5:3a:80:15:71:2e:0f:10:ba:5a:73:68:59:43:
e0:88:4e:9b:cd:91:fb:ab:24:c8:72:9f:9a:b7:b5:
6a:cb:ba:3c:e8:27:2d:2a:bf:eb:01:d9:aa:93:26:
81:70:91:f5:33:ad:2e:f7:93:1d:da:16:60:60:31:
3f:4c:f4:ba:bb:81:83:b4:a0:11:ab:b1:5c:6e:c0:
78:24:9a:5a:87:83:41:98:fd:ad:6f:6c:22:5c:19:
7b:45:10:3e:83:fe:f0:49:c8:ea:f9:52:60:8d:78:
2f:19:99:fb:aa:a9:05:ef:30:27:25:68:6c:4f:21:
51:ea:73:87:00:1b:09:bd:e7:8a:16:9e:62:f7:21:
79:b4:f2:2b:27:97:73:af:f7:18:6f:a8:dd:d8:e1:
6c:13:58:85:fd:da:5b:f0:00:cb:08:f2:46:a2:d2:
59:21:08:a9:9f:86:40:72:68:04:d8:1d:b8:bb:b7:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:22:41:31:10:C1:C4:3A:C9:EF:2C:61:33:EB:FC:A1:20:E9:A5
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:a0:f7:65:af:f1:a1:8f:6a:79:d3:70:52:61:a0:30:e2:
e6:92:56:d1:9a:be:be:71:39:78:b5:4c:f8:f8:d1:e3:d7:86:
17:b4:79:a0:b5:c7:c8:fe:72:4f:f8:37:15:48:c9:4c:f4:9d:
dd:0d:44:7c:d3:01:fd:6e:91:93:59:7b:9e:4c:6a:da:2f:bd:
c2:a8:46:e6:d6:f4:9d:80:ed:68:ef:a5:ca:b2:0a:69:c4:55:
e3:57:60:55:cc:64:0d:27:2b:a1:18:9b:f1:50:f7:95:02:09:
3c:82:a7:c4:7f:43:00:f8:ca:ce:d8:b6:5f:ef:54:a1:96:63:
11:af:fa:b3:34:f1:49:5a:82:47:6e:86:0c:71:8a:61:0e:d9:
ed:0e:c8:1b:83:4c:a3:a2:80:76:62:fe:55:1c:ff:6e:fc:3e:
f6:30:c3:6e:e1:2e:8d:fe:c9:32:e0:84:84:c2:d5:aa:66:71:
ac:ca:18:86:62:d5:c9:22:e5:67:02:2e:7d:c9:88:02:f3:00:
d7:4e:d3:f6:a0:bb:1b:89:78:01:c1:7c:46:1d:3d:15:4e:8d:
b8:da:2d:84:43:5a:f3:80:0f:0f:90:3d:4f:70:fb:d5:fb:2a:
9c:66:42:cf:c4:28:44:f6:bb:e3:f7:94:fe:7e:1a:3b:66:34:
0c:a6:e9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfr8vQ4Bok5a3B9C2Dji8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjUwNzIwMTEwMTE0WhcNMjUwNzIxMTEwMTE0WjAzMTEwLwYDVQQD
EygwZTFhMjI0MTMxMTBjMWM0M2FjOWVmMmM2MTMzZWJmY2ExMjBlOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSe/oljtvPRMJfR38scwud4wF5ar
26yQyA9QyZiVupjFWHhK5c3mM2QTQYbyNc2EFj8E5/IE4rQQvwwmJQB1ec7Nu9cs
Bqv78bnU5TqAFXEuDxC6WnNoWUPgiE6bzZH7qyTIcp+at7Vqy7o86CctKr/rAdmq
kyaBcJH1M60u95Md2hZgYDE/TPS6u4GDtKARq7FcbsB4JJpah4NBmP2tb2wiXBl7
RRA+g/7wScjq+VJgjXgvGZn7qqkF7zAnJWhsTyFR6nOHABsJveeKFp5i9yF5tPIr
J5dzr/cYb6jd2OFsE1iF/dpb8ADLCPJGotJZIQipn4ZAcmgE2B24u7cPRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4aIkExEMHEOsnvLGEz6/yhIOmlMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL2g92Wv
8aGPannTcFJhoDDi5pJW0Zq+vnE5eLVM+PjR49eGF7R5oLXHyP5yT/g3FUjJTPSd
3Q1EfNMB/W6Rk1l7nkxq2i+9wqhG5tb0nYDtaO+lyrIKacRV41dgVcxkDScroRib
8VD3lQIJPIKnxH9DAPjKzti2X+9UoZZjEa/6szTxSVqCR26GDHGKYQ7Z7Q7IG4NM
o6KAdmL+VRz/bvw+9jDDbuEujf7JMuCEhMLVqmZxrMoYhmLVySLlZwIufcmIAvMA
107T9qC7G4l4AcF8Rh09FU6NuNothENa84APD5A9T3D71fsqnGZCz8QoRPa74/eU
/n4aO2Y0DKbpYA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:52 2025 by rpki-client