Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: bF07792yMfq7BsZqOaSG+6plpifhiK6ef+80ynfPhh8=
Subject key identifier: 78:51:3F:83:79:F1:92:33:CA:C3:D9:D7:62:78:02:67:54:D5:D1:62
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01984852E098E86B19C56D52DD657243A30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 14EA
Signing time: Sat 26 Jul 2025 20:00:47 +0000
Manifest this update: Sat 26 Jul 2025 20:00:47 +0000
Manifest next update: Sun 27 Jul 2025 20:00:47 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: cngT2Ta6RBHRidaz1UQoXANAOQWsHJrwuNz9unRtUBc=)
2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e0:98:e8:6b:19:c5:6d:52:dd:65:72:43:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Jul 26 20:00:47 2025 GMT
Not After : Jul 27 20:00:47 2025 GMT
Subject: CN=78513f8379f19233cac3d9d76278026754d5d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:d5:3c:12:f5:80:30:d9:35:78:43:39:e1:
dc:96:c8:79:d5:0d:b1:b2:53:82:10:e9:69:fd:30:
b4:02:de:36:70:b6:79:67:e9:c6:6e:a3:86:18:ec:
2f:71:66:13:a4:87:62:da:ed:67:9d:4a:68:f6:76:
cc:0b:bc:41:8e:7a:56:3c:63:64:65:4d:b9:57:ee:
f1:de:31:b4:f0:38:c6:10:f6:4d:8c:52:75:f1:ac:
5f:be:63:f7:a6:f2:04:a4:6c:be:05:2c:b6:04:fd:
9b:57:6c:3b:8a:74:e7:a2:1a:e2:a7:f5:7c:9f:74:
4e:7b:f2:4a:93:d9:c5:2f:66:7f:ab:20:9c:1c:2a:
eb:60:f5:ca:f2:bf:50:58:4d:f8:4c:53:83:d9:ea:
7a:f2:eb:71:73:1a:4e:59:98:0a:c0:1e:24:77:22:
d8:d7:01:ee:f6:4e:c5:d9:53:15:81:ff:13:f3:93:
20:0e:cb:32:95:80:3e:b1:7b:51:69:63:eb:e3:1e:
fe:59:f2:ee:96:35:1b:ac:b8:94:c3:71:10:52:3f:
99:6f:a2:f7:94:7c:bd:2c:c4:b9:a0:eb:c2:b5:33:
5b:b5:52:e9:8c:e3:d5:92:70:c9:3d:dc:21:aa:85:
b4:7d:5a:f9:45:2c:37:98:c3:ae:d5:44:ab:1a:ef:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:3F:83:79:F1:92:33:CA:C3:D9:D7:62:78:02:67:54:D5:D1:62
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:3d:15:6b:fa:20:cc:0d:e1:6a:99:d7:0f:d1:8a:bc:3a:5e:
1c:fe:36:b7:1d:dd:cd:de:e2:41:4e:b8:27:69:4d:14:21:a0:
a7:9e:0a:84:66:dd:1b:8b:20:d5:6f:97:e0:84:d8:ef:41:17:
13:cf:53:9e:46:be:4d:b3:4d:a1:b9:20:95:0f:be:a7:2f:1a:
e6:f9:2c:a9:4a:c8:b9:2a:02:b5:2b:a0:00:ce:11:a8:46:ea:
b4:57:42:ac:5a:36:58:c3:7b:75:04:1a:f7:fb:c8:0c:16:e3:
f6:54:d6:78:8a:66:bf:1b:09:24:45:94:5f:eb:20:e9:13:33:
f3:e1:a9:8b:f4:dc:ca:85:78:dd:3d:d4:7e:56:bb:62:da:e7:
90:e3:85:44:de:81:cf:5f:95:42:ab:00:5e:30:39:e8:82:94:
13:37:9b:05:8d:99:2d:48:46:44:74:cf:4f:28:83:16:02:09:
d8:52:70:d4:69:b2:e5:bb:4f:56:cb:7e:7b:14:3c:c7:e3:b9:
87:84:d7:72:d3:df:30:16:6a:8f:1b:86:2e:2b:ab:0b:27:b5:
4f:cf:53:08:d5:99:c0:43:2a:de:a5:ce:f1:7b:5e:1e:a7:3d:
fa:2a:a6:cc:46:e6:1f:b0:57:3f:8d:61:3a:53:74:a9:97:2f:
53:c8:da:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUuCY6GsZxW1S3WVyQ6MLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjUwNzI2MjAwMDQ3WhcNMjUwNzI3MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg3ODUxM2Y4Mzc5ZjE5MjMzY2FjM2Q5ZDc2Mjc4MDI2NzU0ZDVkMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lDVPBL1gDDZNXhDOeHclsh51Q2x
slOCEOlp/TC0At42cLZ5Z+nGbqOGGOwvcWYTpIdi2u1nnUpo9nbMC7xBjnpWPGNk
ZU25V+7x3jG08DjGEPZNjFJ18axfvmP3pvIEpGy+BSy2BP2bV2w7inTnohrip/V8
n3ROe/JKk9nFL2Z/qyCcHCrrYPXK8r9QWE34TFOD2ep68utxcxpOWZgKwB4kdyLY
1wHu9k7F2VMVgf8T85MgDssylYA+sXtRaWPr4x7+WfLuljUbrLiUw3EQUj+Zb6L3
lHy9LMS5oOvCtTNbtVLpjOPVknDJPdwhqoW0fVr5RSw3mMOu1USrGu/hSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhRP4N58ZIzysPZ12J4AmdU1dFiMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6D0Va/og
zA3hapnXD9GKvDpeHP42tx3dzd7iQU64J2lNFCGgp54KhGbdG4sg1W+X4ITY70EX
E89Tnka+TbNNobkglQ++py8a5vksqUrIuSoCtSugAM4RqEbqtFdCrFo2WMN7dQQa
9/vIDBbj9lTWeIpmvxsJJEWUX+sg6RMz8+Gpi/TcyoV43T3Ufla7YtrnkOOFRN6B
z1+VQqsAXjA56IKUEzebBY2ZLUhGRHTPTyiDFgIJ2FJw1Gmy5btPVst+exQ8x+O5
h4TXctPfMBZqjxuGLiurCye1T89TCNWZwEMq3qXO8XteHqc9+iqmzEbmH7BXP41h
OlN0qZcvU8jaRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:01 2025 by rpki-client