Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: tHDBteicFTXxgh/yrryEx2tNxxk6btSAR5RAcaYLTwo=
Subject key identifier: 2C:20:41:0C:39:4A:E0:3E:8D:1A:65:82:48:4C:71:F2:8A:16:8C:1C
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01984AAF343D5DC2AAAB7FEED18BCD3AD6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0321
Signing time: Sun 27 Jul 2025 07:00:52 +0000
Manifest this update: Sun 27 Jul 2025 07:00:52 +0000
Manifest next update: Mon 28 Jul 2025 07:00:52 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: aFzvN/+/l4236K0OocpD6bGZys4kCGYnVZ3k84/VWdo=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:34:3d:5d:c2:aa:ab:7f:ee:d1:8b:cd:3a:d6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Jul 27 07:00:52 2025 GMT
Not After : Jul 28 07:00:52 2025 GMT
Subject: CN=2c20410c394ae03e8d1a6582484c71f28a168c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:0d:32:45:e5:c4:3b:97:85:f0:dd:70:e9:
91:a6:2a:31:f7:f7:b1:e0:ac:26:f9:54:9f:84:42:
d0:06:e2:54:68:5e:77:31:8d:3b:ff:4b:36:7b:da:
a8:54:5b:3d:4d:0a:91:66:f2:42:ce:17:93:b4:cb:
bf:8b:58:9f:55:b6:4b:46:ee:7d:14:4b:03:e6:71:
f9:27:b2:ad:16:d5:df:e9:f2:24:55:08:c4:08:ef:
2e:a9:16:bb:e7:2d:c2:10:19:9b:65:51:84:db:9c:
c9:ed:bf:93:2d:c4:4f:e8:59:82:8a:51:dd:fd:a6:
5a:26:eb:00:ec:2c:87:08:f9:25:ce:3c:fe:25:92:
98:05:41:56:73:5f:91:16:15:ea:02:1d:5a:fe:c5:
94:48:87:73:c2:0e:9b:fb:e1:7d:dd:a7:f7:cf:2f:
41:a6:04:09:c2:95:f4:a9:31:d3:07:7c:61:90:3a:
6a:57:38:8a:07:67:5a:33:a6:dd:79:9e:20:e9:a0:
57:ce:8f:e9:8d:5b:30:67:d6:ca:90:7b:8c:3d:f4:
36:c3:57:93:49:27:b1:31:45:7f:63:1b:a9:70:59:
e2:8a:a7:97:25:d2:02:2e:87:53:ca:ba:67:8d:5f:
98:5f:87:df:85:8a:eb:61:f2:ef:76:73:1f:5a:af:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:41:0C:39:4A:E0:3E:8D:1A:65:82:48:4C:71:F2:8A:16:8C:1C
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:51:5c:a1:95:e3:da:f0:dc:16:65:51:c7:de:06:a9:87:
dd:c1:68:37:40:a0:e8:bf:d8:9d:56:72:a7:f6:39:88:38:9d:
57:32:f6:b6:31:98:4a:e3:30:a7:87:63:6a:2a:ae:c1:86:4f:
b0:79:52:47:69:f4:f2:59:9d:9b:84:13:b6:8e:7d:03:5a:19:
e1:da:24:5d:be:3c:eb:95:6e:e2:cf:c1:03:ff:a4:86:3c:37:
e2:28:7a:73:29:dc:de:7c:8c:4a:c2:21:d6:54:26:aa:80:2f:
12:9c:01:61:10:f4:76:df:2a:d7:c7:a2:47:bf:32:05:a2:38:
21:b1:6a:7b:b4:20:a1:a4:d6:6f:49:7b:ae:5f:5c:f3:9c:79:
15:37:57:d2:2b:8c:5f:2c:e1:7f:66:5f:cc:e8:b1:72:fb:e2:
e9:8a:60:8a:d1:1e:b0:f5:65:76:a1:48:e1:9b:99:ad:41:35:
f8:b1:26:96:30:0e:95:bb:e7:0a:d5:e5:d8:c5:1f:0c:d7:26:
d7:18:cd:34:30:a6:ee:00:29:5c:6d:24:9d:60:99:8b:4c:90:
99:4f:bd:17:db:34:11:5b:4c:ff:4f:64:53:c6:a7:a3:67:c2:
6b:05:b6:dd:a7:06:2f:c8:57:b0:aa:8d:dd:b0:06:66:72:fb:
5c:d0:9d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrzQ9XcKqq3/u0YvNOtbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl
MTIzNzAwHhcNMjUwNzI3MDcwMDUyWhcNMjUwNzI4MDcwMDUyWjAzMTEwLwYDVQQD
EygyYzIwNDEwYzM5NGFlMDNlOGQxYTY1ODI0ODRjNzFmMjhhMTY4YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCoNMkXlxDuXhfDdcOmRpiox9/ex
4Kwm+VSfhELQBuJUaF53MY07/0s2e9qoVFs9TQqRZvJCzheTtMu/i1ifVbZLRu59
FEsD5nH5J7KtFtXf6fIkVQjECO8uqRa75y3CEBmbZVGE25zJ7b+TLcRP6FmCilHd
/aZaJusA7CyHCPklzjz+JZKYBUFWc1+RFhXqAh1a/sWUSIdzwg6b++F93af3zy9B
pgQJwpX0qTHTB3xhkDpqVziKB2daM6bdeZ4g6aBXzo/pjVswZ9bKkHuMPfQ2w1eT
SSexMUV/YxupcFniiqeXJdICLodTyrpnjV+YX4ffhYrrYfLvdnMfWq/SRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwgQQw5SuA+jRplgkhMcfKKFowcMB8GA1UdIwQY
MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt
OTFhMDAzNGE5ODllLzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll
LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz9RXKGV
49rw3BZlUcfeBqmH3cFoN0Cg6L/YnVZyp/Y5iDidVzL2tjGYSuMwp4djaiquwYZP
sHlSR2n08lmdm4QTto59A1oZ4dokXb4865Vu4s/BA/+khjw34ih6cync3nyMSsIh
1lQmqoAvEpwBYRD0dt8q18eiR78yBaI4IbFqe7QgoaTWb0l7rl9c85x5FTdX0iuM
Xyzhf2ZfzOixcvvi6YpgitEesPVldqFI4ZuZrUE1+LEmljAOlbvnCtXl2MUfDNcm
1xjNNDCm7gApXG0knWCZi0yQmU+9F9s0EVtM/09kU8ano2fCawW23acGL8hXsKqN
3bAGZnL7XNCdKw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:53:31 2025 by rpki-client