Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: qKVs2WqHb2XqR2L1Ao+s63XEUgar5xE4tOsmLAHpOBA=
Subject key identifier: F4:5D:FC:D5:68:BD:DF:33:4D:7F:D9:EF:23:1E:27:06:E3:46:18:C2
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 0198481B894315587AC136F41B1510684D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 02EC
Signing time: Sat 26 Jul 2025 19:00:20 +0000
Manifest this update: Sat 26 Jul 2025 19:00:20 +0000
Manifest next update: Sun 27 Jul 2025 19:00:20 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: LHqqpintVP0VXniuiska/8fAToK9q/WzMPaooLLGuco=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:89:43:15:58:7a:c1:36:f4:1b:15:10:68:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jul 26 19:00:20 2025 GMT
Not After : Jul 27 19:00:20 2025 GMT
Subject: CN=f45dfcd568bddf334d7fd9ef231e2706e34618c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:ad:9e:0e:b3:ef:d2:2d:6a:75:c1:d6:eb:
1c:e8:9e:1c:8e:2d:1a:ef:34:6d:8a:93:39:eb:6a:
46:6c:e6:eb:e3:37:17:f7:32:2a:9e:cc:d8:41:43:
e1:c0:97:28:9c:0d:6a:9c:98:4a:92:13:e6:30:c2:
d4:2c:80:30:f6:64:76:4b:c9:57:65:21:35:c8:85:
19:6d:d3:9c:4d:0b:2f:ce:4a:48:ca:30:b8:b0:d1:
e1:0b:33:ff:ca:97:67:c1:ba:0f:7a:36:65:ac:0a:
51:b1:e5:58:1d:8f:69:d7:a9:7c:df:65:2e:48:50:
6e:d0:58:67:2e:d2:9a:ba:3d:5e:a1:90:66:c6:57:
39:49:7b:bf:cd:31:9b:39:4c:9c:b0:fa:e9:79:99:
cb:85:53:38:fd:83:0e:d9:3a:75:a7:23:d3:0c:c2:
7e:74:0e:69:cd:7e:c3:40:91:e3:0c:2b:11:de:97:
6d:12:99:77:af:54:84:33:d2:24:06:c1:fe:17:93:
d0:ab:47:86:21:62:f4:e2:7c:c9:35:4f:3e:23:84:
f2:a7:bf:ae:29:4b:c2:bd:9a:59:0d:ba:e7:11:dc:
ae:2b:0c:19:ed:d3:0e:73:08:86:62:57:dc:85:ac:
43:7e:5b:21:29:ba:19:13:44:27:62:de:4f:a3:42:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:FC:D5:68:BD:DF:33:4D:7F:D9:EF:23:1E:27:06:E3:46:18:C2
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f0:d5:8b:b3:f0:64:ff:ec:13:00:4c:af:7a:ce:81:d3:82:
bf:d8:ef:16:90:79:38:b6:5b:50:54:bb:82:cc:20:e0:ba:76:
74:e6:bd:24:40:c9:1d:1b:fb:60:f5:4d:10:5e:bf:cb:4c:dc:
95:05:eb:d9:52:fa:91:49:eb:af:ec:eb:9d:d2:f4:ec:00:14:
d6:a5:3c:e9:81:70:27:9d:68:99:bc:dc:95:ba:b7:2f:db:2b:
df:7c:be:6a:f3:dd:1c:97:2a:68:9a:e9:d4:82:21:c3:d9:cb:
61:88:ea:a7:21:4e:91:c4:26:d3:b9:69:83:35:ec:44:9d:b6:
dc:91:c2:ad:2c:73:fe:74:b2:b0:3a:77:87:e9:9d:c0:b8:69:
f2:cb:91:a0:a2:98:d1:86:fc:90:87:ac:5f:39:39:63:42:e5:
da:ab:37:25:91:e5:c8:a1:e4:16:90:55:dd:67:57:1d:4c:47:
a4:8f:49:d4:3f:71:18:cf:52:fe:53:57:83:99:17:f6:4f:2e:
75:59:51:ff:ac:43:d1:fe:f6:eb:5c:05:9a:72:a1:ee:0d:fe:
02:cc:63:9f:ba:b6:26:e9:d0:6d:34:0b:84:61:9c:8e:46:90:
cc:30:97:09:53:2d:f9:81:ba:fd:f1:09:3a:13:3d:8a:c5:64:
1d:36:8d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG4lDFVh6wTb0GxUQaE0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3
YTk5M2UwHhcNMjUwNzI2MTkwMDIwWhcNMjUwNzI3MTkwMDIwWjAzMTEwLwYDVQQD
EyhmNDVkZmNkNTY4YmRkZjMzNGQ3ZmQ5ZWYyMzFlMjcwNmUzNDYxOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjetng6z79ItanXB1usc6J4cji0a
7zRtipM562pGbObr4zcX9zIqnszYQUPhwJconA1qnJhKkhPmMMLULIAw9mR2S8lX
ZSE1yIUZbdOcTQsvzkpIyjC4sNHhCzP/ypdnwboPejZlrApRseVYHY9p16l832Uu
SFBu0FhnLtKauj1eoZBmxlc5SXu/zTGbOUycsPrpeZnLhVM4/YMO2Tp1pyPTDMJ+
dA5pzX7DQJHjDCsR3pdtEpl3r1SEM9IkBsH+F5PQq0eGIWL04nzJNU8+I4Typ7+u
KUvCvZpZDbrnEdyuKwwZ7dMOcwiGYlfchaxDflshKboZE0QnYt5Po0Kp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRd/NVovd8zTX/Z7yMeJwbjRhjCMB8GA1UdIwQY
MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt
ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl
LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/DVi7Pw
ZP/sEwBMr3rOgdOCv9jvFpB5OLZbUFS7gswg4Lp2dOa9JEDJHRv7YPVNEF6/y0zc
lQXr2VL6kUnrr+zrndL07AAU1qU86YFwJ51ombzclbq3L9sr33y+avPdHJcqaJrp
1IIhw9nLYYjqpyFOkcQm07lpgzXsRJ223JHCrSxz/nSysDp3h+mdwLhp8suRoKKY
0Yb8kIesXzk5Y0Ll2qs3JZHlyKHkFpBV3WdXHUxHpI9J1D9xGM9S/lNXg5kX9k8u
dVlR/6xD0f7261wFmnKh7g3+Asxjn7q2JunQbTQLhGGcjkaQzDCXCVMt+YG6/fEJ
OhM9isVkHTaNPQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:57 2025 by rpki-client