Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: NFTi6XDhEE7h01tDoPz+JtlVRxOUnIAJz9Hv4IyBevY=
Subject key identifier: 43:9E:B5:95:81:C5:49:3E:E9:55:F5:C8:81:04:A0:7D:EA:DC:49:79
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019855A057EB103809D0304296DC910DD3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 10E3
Signing time: Tue 29 Jul 2025 10:00:28 +0000
Manifest this update: Tue 29 Jul 2025 10:00:28 +0000
Manifest next update: Wed 30 Jul 2025 10:00:28 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: 5kzZMmqImQUDIrEpbWKZ9AyvGdM+tw//aSYAuzk1hp8=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:57:eb:10:38:09:d0:30:42:96:dc:91:0d:d3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jul 29 10:00:28 2025 GMT
Not After : Jul 30 10:00:28 2025 GMT
Subject: CN=439eb59581c5493ee955f5c88104a07deadc4979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:76:ac:f3:ed:11:97:44:91:d0:04:aa:a8:
24:c2:58:a4:9c:76:ca:5c:f7:36:44:4e:23:58:8a:
aa:cf:ac:f9:00:8d:d4:e1:8f:9a:ad:cd:e2:17:f5:
f3:3f:97:dc:ad:0e:4f:f7:7e:1e:a6:67:f3:02:09:
aa:36:30:1a:b6:88:88:55:a0:a2:e8:bb:9d:5d:b4:
d6:d4:f8:41:2a:a2:e3:fa:d5:20:05:68:61:e1:2e:
2d:00:9f:29:17:21:32:6f:4b:19:2a:16:56:20:85:
42:d3:31:8d:91:08:97:75:22:72:ce:3f:16:d3:8e:
38:f6:9b:a7:cb:32:0a:f4:1c:bf:91:5a:50:f1:b2:
7c:0a:c4:32:a7:50:d9:77:16:3a:96:78:86:2e:1d:
2d:b2:53:a1:eb:66:e3:25:80:a6:8c:9a:e7:50:af:
4e:a1:39:eb:7e:0c:87:98:76:f1:82:1c:6d:12:d4:
d2:c9:bd:d0:a7:5f:1b:d7:26:41:7c:14:7e:18:7c:
2d:b6:ff:c5:0a:70:b9:e0:ad:1b:51:fa:8d:b8:32:
1d:2f:6a:10:18:01:96:94:f5:52:4a:e4:32:ae:f5:
08:02:de:ed:7b:48:a8:67:77:fa:46:a3:83:eb:2c:
c7:06:f7:d7:cc:cb:81:28:c2:67:72:7a:59:32:e4:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:B5:95:81:C5:49:3E:E9:55:F5:C8:81:04:A0:7D:EA:DC:49:79
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cf:6a:c4:d5:e0:24:7a:a2:37:84:98:c1:c4:11:b4:6f:29:
91:c3:0f:91:3d:cf:dc:d7:0e:b4:65:fd:1a:9a:62:0a:70:ea:
f6:1d:cf:1a:03:ef:12:bc:81:9d:b7:56:a2:be:f8:a8:77:cb:
e7:be:c8:fe:92:88:e2:56:ba:82:51:d0:cf:96:59:43:07:54:
59:e8:0a:d0:57:7a:a1:2f:24:9d:0d:57:c8:e5:ce:be:ab:e3:
9a:24:40:05:69:89:56:ca:dd:8e:52:e5:25:f4:fa:7e:a7:61:
75:e0:e3:8e:6b:de:70:89:0b:5f:00:27:cf:09:c5:a4:44:7b:
af:50:8a:0b:d2:27:72:e6:93:47:e3:ae:17:99:8b:44:50:a2:
77:34:05:56:fc:70:99:af:45:ee:a2:e8:e8:74:0e:0f:51:94:
34:ad:56:b9:a3:f2:19:62:94:20:d1:99:16:24:0e:b6:f3:15:
65:71:3b:52:0e:a5:77:2c:62:40:94:9b:21:15:a1:46:46:f7:
6a:3e:b6:14:39:2e:b1:2d:0c:e7:d6:e4:07:3c:71:dc:88:a3:
69:3f:c3:a9:f5:03:dd:b3:24:4a:e2:4c:4d:17:bc:3c:6d:be:
ba:12:4c:5e:87:02:43:36:c0:df:ed:b2:2a:9a:1d:36:03:ce:
92:9e:ad:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoFfrEDgJ0DBCltyRDdPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjUwNzI5MTAwMDI4WhcNMjUwNzMwMTAwMDI4WjAzMTEwLwYDVQQD
Eyg0MzllYjU5NTgxYzU0OTNlZTk1NWY1Yzg4MTA0YTA3ZGVhZGM0OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYF2rPPtEZdEkdAEqqgkwliknHbK
XPc2RE4jWIqqz6z5AI3U4Y+arc3iF/XzP5fcrQ5P934epmfzAgmqNjAatoiIVaCi
6LudXbTW1PhBKqLj+tUgBWhh4S4tAJ8pFyEyb0sZKhZWIIVC0zGNkQiXdSJyzj8W
04449punyzIK9By/kVpQ8bJ8CsQyp1DZdxY6lniGLh0tslOh62bjJYCmjJrnUK9O
oTnrfgyHmHbxghxtEtTSyb3Qp18b1yZBfBR+GHwttv/FCnC54K0bUfqNuDIdL2oQ
GAGWlPVSSuQyrvUIAt7te0ioZ3f6RqOD6yzHBvfXzMuBKMJncnpZMuQz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOetZWBxUk+6VX1yIEEoH3q3El5MB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm89qxNXg
JHqiN4SYwcQRtG8pkcMPkT3P3NcOtGX9GppiCnDq9h3PGgPvEryBnbdWor74qHfL
577I/pKI4la6glHQz5ZZQwdUWegK0Fd6oS8knQ1XyOXOvqvjmiRABWmJVsrdjlLl
JfT6fqdhdeDjjmvecIkLXwAnzwnFpER7r1CKC9IncuaTR+OuF5mLRFCidzQFVvxw
ma9F7qLo6HQOD1GUNK1WuaPyGWKUINGZFiQOtvMVZXE7Ug6ldyxiQJSbIRWhRkb3
aj62FDkusS0M59bkBzxx3IijaT/DqfUD3bMkSuJMTRe8PG2+uhJMXocCQzbA3+2y
KpodNgPOkp6tDA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:45:50 2025 by rpki-client