Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: kRugdOQ6kZlNo3daJl9TymkQ/u37tha0mDTSAy7UYkk=
Subject key identifier: F8:24:6F:4A:41:73:45:C1:A8:1F:CC:89:E9:A3:88:6C:E7:52:95:3E
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 0198469B06691B50EAF19576485F4F9D6CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 03C2
Signing time: Sat 26 Jul 2025 12:00:21 +0000
Manifest this update: Sat 26 Jul 2025 12:00:21 +0000
Manifest next update: Sun 27 Jul 2025 12:00:21 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: nmLQaxtIjE3L2bp23qFBBYqZ0lFOjV064vzAXETh3w0=)
2: Gf3jvBMOfhZBwSB5ikn6Zc8VBOc.roa (hash: PrqqFSWCyQw4MMIVoDAAQwK7/JGtuyLc3nwPf6LWd0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:06:69:1b:50:ea:f1:95:76:48:5f:4f:9d:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Jul 26 12:00:21 2025 GMT
Not After : Jul 27 12:00:21 2025 GMT
Subject: CN=f8246f4a417345c1a81fcc89e9a3886ce752953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:ea:88:5d:3f:64:2c:83:e5:bb:cf:0e:f4:
e6:3a:70:1d:df:79:31:76:34:1c:77:26:70:75:c1:
1a:6d:6b:0f:b7:79:77:fc:df:43:74:27:6c:c9:89:
a6:8a:d6:56:5f:48:f8:56:f5:a5:78:3d:c6:60:52:
de:8a:5d:f4:60:eb:e4:50:d4:a3:29:a9:d2:5c:47:
0e:7a:bc:c3:34:4a:d0:92:20:a1:e9:69:f4:44:b4:
fd:9e:bc:e6:14:18:b3:87:5f:4d:68:2a:cb:0e:51:
50:a1:61:ef:d0:88:1f:f6:d7:46:16:f0:4d:ce:00:
5c:52:4a:fa:72:e7:a0:ab:86:ba:1c:81:5f:33:96:
d8:79:74:c5:25:75:12:a5:02:03:47:96:01:4e:6c:
88:32:89:cf:6e:7b:ed:67:96:ee:e2:4c:3f:32:c5:
c0:3b:9c:c4:6b:bd:a5:85:9f:50:97:44:f0:c1:51:
62:74:ca:7e:2b:76:4b:bc:28:c3:4d:ef:08:5c:89:
b9:de:98:e2:ea:7c:ba:bf:45:b4:c6:85:63:59:12:
94:94:99:b5:65:21:a3:cd:a5:1a:3f:6d:02:ce:c9:
ab:d4:22:35:ea:47:6c:37:2e:74:2d:1e:f8:6c:45:
26:b7:5e:a2:db:8e:c4:5f:7a:fd:7d:10:1b:84:81:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:6F:4A:41:73:45:C1:A8:1F:CC:89:E9:A3:88:6C:E7:52:95:3E
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c4:ab:f9:de:fd:31:8c:22:c2:a1:11:4d:34:be:0a:fb:38:
85:86:7f:68:80:cd:fe:88:23:f0:22:70:4e:0f:ba:63:ce:ef:
90:8b:d1:7a:23:3d:c9:52:45:27:d0:05:1e:77:fe:4e:1b:78:
71:9f:1c:c5:03:cb:f4:c4:dc:84:23:d9:68:7b:ba:17:b8:8b:
d7:6a:31:c5:c1:50:c8:52:31:b3:d1:36:eb:8c:2f:69:a7:40:
af:69:a4:04:6f:94:d1:ce:09:b3:af:5d:8e:8e:96:be:64:b7:
03:9a:6d:f3:7b:a3:99:3f:18:28:ab:64:6a:15:1a:ca:f6:c8:
c5:57:d7:14:e6:9c:aa:2e:30:2e:a6:30:54:95:3f:9a:cb:0c:
44:42:be:64:38:5d:7a:30:c8:bf:f9:55:0f:ed:44:c5:0f:fa:
46:3b:25:48:02:e2:32:9b:1c:99:7b:e5:79:39:04:d5:86:62:
ed:30:38:76:d8:f4:15:10:d1:d0:9e:4b:20:f6:79:14:d1:4e:
a5:ac:40:44:da:38:4c:5a:9f:e7:b5:54:31:0a:69:3b:a8:b7:
9c:52:44:aa:d5:c9:ce:3b:4f:a6:39:75:da:e6:50:e3:50:56:
e7:03:5b:10:fc:d7:af:6f:9d:aa:74:48:53:2b:ba:8f:c9:86:
f3:fb:49:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmwZpG1Dq8ZV2SF9PnWy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTc4ZTg2NmU5MjA0ZDAxYTZmNTJkMzlmZDg0ZmYwOTAw
YjIxZDQwHhcNMjUwNzI2MTIwMDIxWhcNMjUwNzI3MTIwMDIxWjAzMTEwLwYDVQQD
EyhmODI0NmY0YTQxNzM0NWMxYTgxZmNjODllOWEzODg2Y2U3NTI5NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XPqiF0/ZCyD5bvPDvTmOnAd33kx
djQcdyZwdcEabWsPt3l3/N9DdCdsyYmmitZWX0j4VvWleD3GYFLeil30YOvkUNSj
KanSXEcOerzDNErQkiCh6Wn0RLT9nrzmFBizh19NaCrLDlFQoWHv0Igf9tdGFvBN
zgBcUkr6cuegq4a6HIFfM5bYeXTFJXUSpQIDR5YBTmyIMonPbnvtZ5bu4kw/MsXA
O5zEa72lhZ9Ql0TwwVFidMp+K3ZLvCjDTe8IXIm53pji6ny6v0W0xoVjWRKUlJm1
ZSGjzaUaP20Czsmr1CI16kdsNy50LR74bEUmt16i247EX3r9fRAbhIGyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgkb0pBc0XBqB/MiemjiGznUpU+MB8GA1UdIwQY
MBaAFNnnjoZukgTQGm9S05/YT/CQCyHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEt
ZDc2ZDY2MjdmYjJlLzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEtZDc2ZDY2MjdmYjJl
LzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMSr+d79
MYwiwqERTTS+Cvs4hYZ/aIDN/ogj8CJwTg+6Y87vkIvReiM9yVJFJ9AFHnf+Tht4
cZ8cxQPL9MTchCPZaHu6F7iL12oxxcFQyFIxs9E264wvaadAr2mkBG+U0c4Js69d
jo6WvmS3A5pt83ujmT8YKKtkahUayvbIxVfXFOacqi4wLqYwVJU/mssMREK+ZDhd
ejDIv/lVD+1ExQ/6RjslSALiMpscmXvleTkE1YZi7TA4dtj0FRDR0J5LIPZ5FNFO
paxARNo4TFqf57VUMQppO6i3nFJEqtXJzjtPpjl12uZQ41BW5wNbEPzXr2+dqnRI
Uyu6j8mG8/tJFg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:02 2025 by rpki-client