Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: 1mlocz6PQbHdJJ4vlTgwlBVVKHqXCRiBI/WH2uDhAME=
Subject key identifier: F8:B1:61:FD:CB:97:3C:32:6C:74:64:C2:60:5A:D8:12:BB:FC:68:5A
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 0198458907DCC2837C7E9581775AB06D4509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:01:04 +0000
Manifest this update: Sat 26 Jul 2025 07:01:04 +0000
Manifest next update: Sun 27 Jul 2025 07:01:04 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: r1iM0DdiaJkJZklE0HrSoVMYR0GitQjcuQkGsZ7vEls=)
2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:07:dc:c2:83:7c:7e:95:81:77:5a:b0:6d:45:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Jul 26 07:01:04 2025 GMT
Not After : Jul 27 07:01:04 2025 GMT
Subject: CN=f8b161fdcb973c326c7464c2605ad812bbfc685a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:6d:51:9a:ce:10:99:5f:b9:1f:ae:e0:f7:
36:46:86:cf:c6:ce:c8:64:0a:32:14:eb:d4:f7:ec:
07:4a:d2:ed:d9:76:18:dc:23:41:1e:e4:60:e8:e2:
0c:89:5f:b2:0c:83:3d:37:64:d2:c8:c2:92:cb:c7:
6d:86:f6:cc:72:66:ae:15:ea:bd:1c:1e:cf:7a:ae:
50:6c:64:3d:55:c3:4e:f4:9a:79:e5:65:1d:69:c9:
f9:6c:54:2b:3a:ae:9c:53:38:9e:b1:b5:39:e5:3e:
6e:bf:18:ad:4f:a1:b5:92:87:7a:e2:cb:b5:95:52:
8b:7b:23:13:68:1f:5d:d8:4a:ac:2f:ff:af:fe:c7:
ee:fe:4e:e3:bd:92:36:84:26:9f:06:75:e1:41:7b:
f6:4c:0b:a6:62:c5:9e:04:71:df:71:97:29:04:72:
45:62:c5:79:39:2d:d0:94:40:66:b7:c8:7f:6b:b8:
47:f5:fb:69:cf:03:5a:d7:8f:54:40:af:98:0f:7d:
ab:f6:66:ba:81:08:6e:74:a4:05:cc:6b:e7:31:dc:
0e:2b:06:17:14:34:76:09:f1:01:b5:dd:88:cd:7f:
64:90:c1:7e:9e:0a:2a:09:80:f2:87:b7:38:f9:60:
f3:2d:2f:58:67:bd:aa:7e:36:8a:6d:fb:aa:f5:74:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:61:FD:CB:97:3C:32:6C:74:64:C2:60:5A:D8:12:BB:FC:68:5A
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:58:1b:f4:5c:e2:04:08:5e:ba:7d:d7:b1:3b:12:8f:90:
9b:2a:8c:91:03:d6:7e:fa:61:43:2e:f5:d8:57:95:c6:d1:b4:
be:8a:33:5a:70:99:56:b4:ad:1b:75:cd:30:e8:07:c9:6d:68:
74:eb:13:8e:af:04:8f:bd:41:4b:8c:47:28:4f:7c:b7:55:82:
fa:de:3d:8e:f9:8b:66:52:6a:5f:0b:a0:85:29:45:97:d8:66:
9b:6c:2c:24:0b:e6:87:d6:39:8e:d4:cc:d5:87:39:3a:08:ed:
f6:23:70:14:8e:1e:db:78:46:eb:70:1d:98:b3:69:89:4e:29:
ab:29:30:d8:d7:a5:44:f0:7c:1b:9d:14:66:f4:1b:65:8f:82:
4b:f4:15:32:bb:df:b2:cf:cd:3c:3e:e6:fd:c5:8a:01:3a:03:
80:b2:45:91:12:6a:15:aa:12:09:f5:1b:d2:21:7a:be:ec:95:
29:6c:b1:87:76:55:8c:00:13:b9:c9:2c:e6:29:25:36:20:f1:
01:93:51:9e:97:19:a2:3c:13:9a:e9:2e:d4:ff:45:72:f9:06:
79:0a:18:f6:33:8d:c6:cc:3f:70:0c:c7:1d:38:63:90:74:7d:
a3:5b:cd:3b:f1:66:e0:29:7c:3d:bb:6a:c9:c1:6e:2c:8b:85:
94:21:11:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiQfcwoN8fpWBd1qwbUUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh
MzRiM2MwHhcNMjUwNzI2MDcwMTA0WhcNMjUwNzI3MDcwMTA0WjAzMTEwLwYDVQQD
EyhmOGIxNjFmZGNiOTczYzMyNmM3NDY0YzI2MDVhZDgxMmJiZmM2ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9tUZrOEJlfuR+u4Pc2RobPxs7I
ZAoyFOvU9+wHStLt2XYY3CNBHuRg6OIMiV+yDIM9N2TSyMKSy8dthvbMcmauFeq9
HB7Peq5QbGQ9VcNO9Jp55WUdacn5bFQrOq6cUziesbU55T5uvxitT6G1kod64su1
lVKLeyMTaB9d2EqsL/+v/sfu/k7jvZI2hCafBnXhQXv2TAumYsWeBHHfcZcpBHJF
YsV5OS3QlEBmt8h/a7hH9ftpzwNa149UQK+YD32r9ma6gQhudKQFzGvnMdwOKwYX
FDR2CfEBtd2IzX9kkMF+ngoqCYDyh7c4+WDzLS9YZ72qfjaKbfuq9XSq7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPixYf3LlzwybHRkwmBa2BK7/GhaMB8GA1UdIwQY
MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt
MjM4ZTBiN2FlMjg0LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0
LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz9YG/Rc
4gQIXrp917E7Eo+QmyqMkQPWfvphQy712FeVxtG0voozWnCZVrStG3XNMOgHyW1o
dOsTjq8Ej71BS4xHKE98t1WC+t49jvmLZlJqXwughSlFl9hmm2wsJAvmh9Y5jtTM
1Yc5Ogjt9iNwFI4e23hG63AdmLNpiU4pqykw2NelRPB8G50UZvQbZY+CS/QVMrvf
ss/NPD7m/cWKAToDgLJFkRJqFaoSCfUb0iF6vuyVKWyxh3ZVjAATucks5iklNiDx
AZNRnpcZojwTmuku1P9FcvkGeQoY9jONxsw/cAzHHThjkHR9o1vNO/Fm4Cl8Pbtq
ycFuLIuFlCERlQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:18 2025 by rpki-client