Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: d/N2YDMpL0MhCzwSlXrLOQotWqH1sEaEidfDHYkY+sU=
Subject key identifier: B2:20:58:E6:DE:14:2A:1E:30:01:88:23:12:DC:0E:47:7F:1C:4C:D0
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01983502CB316BC8BEB3E039D2914D27328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 02FF
Signing time: Wed 23 Jul 2025 02:00:32 +0000
Manifest this update: Wed 23 Jul 2025 02:00:32 +0000
Manifest next update: Thu 24 Jul 2025 02:00:32 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: D6a8rZRMkS2rqmV/LhH59rbJyE2qyNCZ9AP/xfj0F/c=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:02:cb:31:6b:c8:be:b3:e0:39:d2:91:4d:27:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jul 23 02:00:32 2025 GMT
Not After : Jul 24 02:00:32 2025 GMT
Subject: CN=b22058e6de142a1e3001882312dc0e477f1c4cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:60:f5:22:1b:32:b5:76:38:85:01:60:e6:
1c:87:3b:6a:17:68:fb:62:c3:b3:67:93:40:11:5b:
e6:6b:55:99:9e:6d:da:69:6f:66:41:45:50:21:1d:
da:e7:15:a0:e4:89:0b:ce:25:b6:da:4e:a4:1d:7d:
fd:81:d5:cb:9b:54:0a:64:20:9b:fa:12:4d:14:dd:
56:86:6d:e1:9a:de:28:20:d1:8f:90:17:db:b1:be:
33:a4:85:72:8f:e5:93:30:49:c2:8d:f7:6a:06:af:
47:9d:f8:d3:78:a1:ca:17:4c:22:c2:bb:68:19:2a:
88:bc:32:f8:92:f6:5c:c7:54:15:3f:65:08:fb:d5:
48:3b:ce:94:0b:cb:14:fe:e7:02:13:56:c5:2f:ad:
4c:e6:ed:97:e8:1b:9e:28:93:18:1f:e6:4c:df:4a:
6c:ff:4a:69:7d:a2:88:95:86:db:68:9d:b5:7d:47:
3e:97:3d:df:a5:89:7a:75:93:87:62:7e:e8:0e:46:
b0:a1:0e:5c:44:a9:b3:d3:8e:33:e9:44:f2:41:fc:
e5:d2:30:b0:9f:89:32:3f:76:55:f5:04:f0:90:ee:
2c:ff:8b:f0:2b:ce:62:91:1f:e1:a5:67:b0:60:1f:
82:5d:2b:04:6b:4e:41:02:6d:a2:15:f4:a0:46:9e:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:58:E6:DE:14:2A:1E:30:01:88:23:12:DC:0E:47:7F:1C:4C:D0
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:b9:6e:21:ba:d2:73:58:14:60:38:40:56:be:17:8a:1a:
a3:8b:57:da:c5:f5:23:c6:91:ad:a5:40:f0:8a:99:3a:61:a8:
ca:d8:92:27:fe:92:05:5d:49:ca:a0:60:bd:f3:6d:ee:9a:ac:
89:2a:84:cc:0f:90:4b:30:86:18:00:83:0b:3f:f1:e8:0b:67:
03:76:a6:4f:95:cc:b5:bf:45:e6:32:94:a3:5a:35:65:06:a5:
3e:6a:4b:f4:e9:df:ea:a2:f6:72:be:4e:58:3c:a3:5c:be:c6:
de:34:d7:51:77:99:22:41:1b:bb:b1:85:a2:29:68:7a:63:44:
a7:d2:f2:c9:2c:a4:76:51:e9:95:b0:68:83:95:7b:27:c1:08:
e6:cc:09:6b:16:d4:32:05:bc:49:10:c9:12:22:7a:c0:47:c2:
00:03:0e:23:00:ec:dd:f9:5a:65:41:a3:13:25:8f:2d:39:4c:
ce:1f:63:36:d6:03:80:6b:99:dd:41:89:81:a8:f8:9c:52:e7:
dc:ab:36:eb:4a:5c:4b:c9:9a:73:73:21:ce:cd:4c:43:55:6b:
59:3a:35:38:f7:9c:bb:5b:b3:fb:0a:ae:c4:fc:68:32:4c:e3:
0c:4b:93:80:63:88:f2:53:93:9a:7d:36:14:d5:3e:a9:b2:85:
05:14:79:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1Assxa8i+s+A50pFNJzKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZWRhN2RmMDVmNmRiYTA5ZTM5ZTdkNGJkZWM3YmFlMGVm
ZmJhYjAwHhcNMjUwNzIzMDIwMDMyWhcNMjUwNzI0MDIwMDMyWjAzMTEwLwYDVQQD
EyhiMjIwNThlNmRlMTQyYTFlMzAwMTg4MjMxMmRjMGU0NzdmMWM0Y2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQNg9SIbMrV2OIUBYOYchztqF2j7
YsOzZ5NAEVvma1WZnm3aaW9mQUVQIR3a5xWg5IkLziW22k6kHX39gdXLm1QKZCCb
+hJNFN1Whm3hmt4oINGPkBfbsb4zpIVyj+WTMEnCjfdqBq9HnfjTeKHKF0wiwrto
GSqIvDL4kvZcx1QVP2UI+9VIO86UC8sU/ucCE1bFL61M5u2X6BueKJMYH+ZM30ps
/0ppfaKIlYbbaJ21fUc+lz3fpYl6dZOHYn7oDkawoQ5cRKmz044z6UTyQfzl0jCw
n4kyP3ZV9QTwkO4s/4vwK85ikR/hpWewYB+CXSsEa05BAm2iFfSgRp6j6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIgWObeFCoeMAGIIxLcDkd/HEzQMB8GA1UdIwQY
MBaAFNPtp98F9tugnjnn1L3se64O/7qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQt
Njc2YmVkYjE3NDczLzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQtNjc2YmVkYjE3NDcz
LzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSG5biG6
0nNYFGA4QFa+F4oao4tX2sX1I8aRraVA8IqZOmGoytiSJ/6SBV1JyqBgvfNt7pqs
iSqEzA+QSzCGGACDCz/x6AtnA3amT5XMtb9F5jKUo1o1ZQalPmpL9Onf6qL2cr5O
WDyjXL7G3jTXUXeZIkEbu7GFoiloemNEp9LyySykdlHplbBog5V7J8EI5swJaxbU
MgW8SRDJEiJ6wEfCAAMOIwDs3flaZUGjEyWPLTlMzh9jNtYDgGuZ3UGJgaj4nFLn
3Ks260pcS8mac3Mhzs1MQ1VrWTo1OPecu1uz+wquxPxoMkzjDEuTgGOI8lOTmn02
FNU+qbKFBRR5aA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:16:37 2025 by rpki-client