Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: Wyi26Zb2uTVxeux6/15HzERVcT2onFrtB0TdP9J0fDY=
Subject key identifier: 9E:7E:5C:9C:E3:85:65:40:EE:58:4F:84:45:A1:E3:16:1F:EA:3F:D4
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 01984BF8B276447AE86E223DB5024347A269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 1565
Signing time: Sun 27 Jul 2025 13:00:46 +0000
Manifest this update: Sun 27 Jul 2025 13:00:46 +0000
Manifest next update: Mon 28 Jul 2025 13:00:46 +0000
Files and hashes: 1: WWNEma98vqvt3aWub4KvZrisRPY.roa (hash: 8ej/FxtmoHvT2+4JYPncO9OF+5JwUWMEm2sRynTw/0U=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: uRMkN5SJ/JlU9xNlPwV8iU5z7quRLqFD+g0NP+XvKmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:b2:76:44:7a:e8:6e:22:3d:b5:02:43:47:a2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jul 27 13:00:46 2025 GMT
Not After : Jul 28 13:00:46 2025 GMT
Subject: CN=9e7e5c9ce3856540ee584f8445a1e3161fea3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:5c:99:20:39:80:4f:75:39:64:1e:6f:41:
68:af:7f:73:bb:8d:43:38:c7:db:22:87:c5:73:6e:
28:a0:40:a1:01:bd:a5:ee:f0:45:b4:38:53:28:b3:
94:85:62:a2:b5:91:55:7b:8b:70:9c:4b:64:04:b2:
36:f1:82:ad:29:47:16:6b:55:7d:c7:c3:32:20:78:
07:a0:7c:f4:08:2f:f5:63:7e:16:17:d5:0f:54:fb:
97:54:c2:bb:f3:ec:76:66:e9:6b:a6:3b:a1:d8:69:
45:a2:41:d9:b2:61:10:87:2a:12:76:70:c1:c8:bc:
c2:1b:51:b6:27:b1:9b:ad:5b:3f:53:f5:24:d3:43:
3f:99:ef:47:a7:86:e2:10:00:a9:d5:8e:26:c2:ef:
c4:0a:71:74:75:c2:1d:47:33:4d:0e:3c:e4:3e:ac:
27:12:ed:ae:74:2c:94:ea:5b:a3:fe:6b:b3:f3:76:
40:5b:85:cf:f9:dd:a1:75:70:cf:3c:f6:77:6d:df:
b1:89:d7:38:3e:7b:f7:f3:03:4b:2f:f8:8e:43:31:
a4:ad:1c:fd:01:1a:b5:02:f2:de:5d:49:34:5f:f6:
f7:2b:30:93:b3:bd:d2:d2:69:21:db:84:6c:2e:b7:
3b:3d:a8:64:ce:fe:78:68:bd:55:ab:1e:05:66:8c:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:5C:9C:E3:85:65:40:EE:58:4F:84:45:A1:E3:16:1F:EA:3F:D4
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f1:4e:de:f7:67:d5:1a:83:cc:79:8a:4a:1d:d0:62:fb:2e:
32:ac:6d:c0:94:0a:c9:d0:45:7f:b3:76:91:99:ba:29:af:3d:
43:26:e7:9c:70:7b:92:b8:32:a5:39:c0:c1:1e:11:c7:f8:7e:
ec:e5:f4:ec:74:86:82:df:ff:da:09:2a:a5:59:c7:7f:7f:71:
99:8d:b6:16:20:9d:55:45:d8:17:6e:3c:5e:9d:e6:ff:2f:cd:
95:21:53:bb:bf:cc:15:cc:3a:af:1b:6b:74:7a:44:3c:66:ba:
44:eb:29:64:66:b3:6b:d6:b6:b9:ab:d0:bb:00:3c:87:21:b7:
ce:76:88:0e:f9:df:44:71:e3:b1:49:4b:64:ec:e2:cb:34:39:
16:af:53:1b:1e:00:8f:f0:9f:85:97:3a:3d:08:fa:7b:26:0d:
24:d0:f4:99:29:57:91:81:44:2f:52:11:db:a5:75:dd:c3:55:
b9:de:71:a2:cb:c7:dc:52:02:05:d6:e1:77:2b:dd:ed:82:d7:
ad:9c:43:11:1c:b4:18:cd:e7:af:a3:9f:ef:c9:c6:d6:b5:79:
bf:63:b0:94:cc:36:d2:97:f0:bf:85:dc:18:dd:fb:78:ee:e0:
85:27:18:a6:f5:24:c7:c7:ca:b6:77:07:97:cb:c4:f6:b4:83:
d0:45:ac:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhL+LJ2RHrobiI9tQJDR6JpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNmIzMzYxYTFhMmEwMGRiY2UzMTkwMTk4MjdmZWJiNzE1
YmQwNDQwHhcNMjUwNzI3MTMwMDQ2WhcNMjUwNzI4MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTdlNWM5Y2UzODU2NTQwZWU1ODRmODQ0NWExZTMxNjFmZWEzZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoINcmSA5gE91OWQeb0For39zu41D
OMfbIofFc24ooEChAb2l7vBFtDhTKLOUhWKitZFVe4twnEtkBLI28YKtKUcWa1V9
x8MyIHgHoHz0CC/1Y34WF9UPVPuXVMK78+x2Zulrpjuh2GlFokHZsmEQhyoSdnDB
yLzCG1G2J7GbrVs/U/Uk00M/me9Hp4biEACp1Y4mwu/ECnF0dcIdRzNNDjzkPqwn
Eu2udCyU6luj/muz83ZAW4XP+d2hdXDPPPZ3bd+xidc4Pnv38wNLL/iOQzGkrRz9
ARq1AvLeXUk0X/b3KzCTs73S0mkh24RsLrc7Pahkzv54aL1Vqx4FZoyn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5+XJzjhWVA7lhPhEWh4xYf6j/UMB8GA1UdIwQY
MBaAFP9rM2GhoqANvOMZAZgn/rtxW9BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUt
ZjYyMzIwOTUxYTM2LzEvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUtZjYyMzIwOTUxYTM2
LzEvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfFO3vdn
1RqDzHmKSh3QYvsuMqxtwJQKydBFf7N2kZm6Ka89QybnnHB7krgypTnAwR4Rx/h+
7OX07HSGgt//2gkqpVnHf39xmY22FiCdVUXYF248Xp3m/y/NlSFTu7/MFcw6rxtr
dHpEPGa6ROspZGaza9a2uavQuwA8hyG3znaIDvnfRHHjsUlLZOziyzQ5Fq9TGx4A
j/CfhZc6PQj6eyYNJND0mSlXkYFEL1IR26V13cNVud5xosvH3FICBdbhdyvd7YLX
rZxDERy0GM3nr6Of78nG1rV5v2OwlMw20pfwv4XcGN37eO7ghScYpvUkx8fKtncH
l8vE9rSD0EWsdg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:29:37 2025 by rpki-client