Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: 5r80r6JQz256cRBwOv1yWfe2w20+XkAkiNLbz0HQsEQ=
Subject key identifier: B4:05:CF:C5:16:CB:34:FD:3D:EF:E8:67:99:45:F7:BF:65:5F:0E:3E
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 01984B5447A9A6D34FACEA4BE60CCA5AA179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 0628
Signing time: Sun 27 Jul 2025 10:01:11 +0000
Manifest this update: Sun 27 Jul 2025 10:01:11 +0000
Manifest next update: Mon 28 Jul 2025 10:01:11 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: bFACjGaMpMU/K0ozsY2iOee7OWhs8tK7vZSAg7QsVUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:47:a9:a6:d3:4f:ac:ea:4b:e6:0c:ca:5a:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Jul 27 10:01:11 2025 GMT
Not After : Jul 28 10:01:11 2025 GMT
Subject: CN=b405cfc516cb34fd3defe8679945f7bf655f0e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:d3:04:16:15:cd:79:dd:66:e8:ce:3a:43:
07:81:6f:19:c4:c0:3f:94:57:9d:6c:0f:80:3b:f2:
40:cb:b8:c5:25:72:94:f8:12:84:e0:3d:7f:d2:11:
cd:d4:f6:39:2a:74:af:57:b7:b7:0a:42:72:f2:19:
7e:19:09:8b:dc:a7:53:e8:2d:f7:7e:a3:94:56:aa:
47:47:aa:3e:d8:f2:3c:c8:f2:15:a9:f2:f9:40:3e:
f5:78:1b:91:af:5b:63:65:c1:4c:18:af:23:24:8b:
45:ad:3d:98:74:4c:0c:f5:bc:cd:7f:c1:f2:10:e3:
ff:43:23:20:f9:bd:59:6f:34:8b:83:6f:94:fd:b8:
ec:5c:85:8c:04:c6:8b:38:24:ce:4e:c4:d0:ac:5a:
a0:5a:5d:ee:1a:ae:c2:10:4a:fc:ed:27:09:2b:fd:
85:04:50:0f:d0:47:f8:28:a6:19:92:5e:39:93:a3:
ef:56:39:01:34:50:94:bf:08:00:bb:92:e3:b6:cb:
e6:31:a8:9e:f0:80:ef:f7:ed:20:08:b9:58:64:0e:
ac:5e:79:8e:fa:9a:c9:5b:d7:c9:fe:92:52:03:09:
3f:a7:44:4b:05:c8:85:42:23:e0:0c:6d:6d:04:6d:
52:bb:dd:08:66:e5:7f:81:7f:b1:a2:fd:59:ca:49:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:CF:C5:16:CB:34:FD:3D:EF:E8:67:99:45:F7:BF:65:5F:0E:3E
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:5a:53:93:de:39:de:3d:fe:fa:0c:c4:9f:b1:73:0c:b7:
11:50:b7:5f:9b:ca:aa:c6:0d:15:e6:db:48:71:b7:46:12:4e:
9f:2b:b9:ab:b8:a5:69:10:d5:bc:d0:67:dd:e3:90:06:13:d5:
be:3a:8a:77:06:8b:d8:22:64:27:23:16:89:00:7b:ec:3a:31:
df:b6:61:a1:65:12:4a:f1:8b:a8:a3:a4:01:82:3b:70:64:5c:
97:4c:50:0b:e3:e9:5e:70:8c:66:9f:84:ec:24:65:6a:74:34:
80:fd:de:71:e0:14:ee:19:d9:ba:a4:df:f6:ce:19:9f:ec:28:
1d:b4:6e:e4:93:55:ca:14:5e:98:49:eb:19:5c:a3:f3:26:dd:
90:e3:9f:09:08:52:61:a4:6a:b8:f5:b2:f7:dc:fa:d8:0d:13:
84:0b:52:79:b3:6b:e6:e8:34:c2:df:c1:aa:f2:9f:ac:ee:87:
a0:3c:f2:8e:67:6b:29:7f:a5:82:87:54:6d:63:76:51:3a:3e:
61:7f:05:fa:d0:f4:a6:f0:ff:42:81:45:2c:fc:64:2a:2c:2a:
7f:b3:42:9a:d0:e1:6c:c1:d3:a7:5c:53:1d:b5:24:da:be:61:
b4:7b:47:fa:a8:5f:ed:8b:fd:b8:a7:eb:99:11:8b:7e:71:ea:
6b:94:54:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVEepptNPrOpL5gzKWqF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjUwNzI3MTAwMTExWhcNMjUwNzI4MTAwMTExWjAzMTEwLwYDVQQD
EyhiNDA1Y2ZjNTE2Y2IzNGZkM2RlZmU4Njc5OTQ1ZjdiZjY1NWYwZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tXTBBYVzXndZujOOkMHgW8ZxMA/
lFedbA+AO/JAy7jFJXKU+BKE4D1/0hHN1PY5KnSvV7e3CkJy8hl+GQmL3KdT6C33
fqOUVqpHR6o+2PI8yPIVqfL5QD71eBuRr1tjZcFMGK8jJItFrT2YdEwM9bzNf8Hy
EOP/QyMg+b1ZbzSLg2+U/bjsXIWMBMaLOCTOTsTQrFqgWl3uGq7CEEr87ScJK/2F
BFAP0Ef4KKYZkl45k6PvVjkBNFCUvwgAu5LjtsvmMaie8IDv9+0gCLlYZA6sXnmO
+prJW9fJ/pJSAwk/p0RLBciFQiPgDG1tBG1Su90IZuV/gX+xov1ZyklsLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQFz8UWyzT9Pe/oZ5lF979lXw4+MB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW1aU5Pe
Od49/voMxJ+xcwy3EVC3X5vKqsYNFebbSHG3RhJOnyu5q7ilaRDVvNBn3eOQBhPV
vjqKdwaL2CJkJyMWiQB77Dox37ZhoWUSSvGLqKOkAYI7cGRcl0xQC+PpXnCMZp+E
7CRlanQ0gP3eceAU7hnZuqTf9s4Zn+woHbRu5JNVyhRemEnrGVyj8ybdkOOfCQhS
YaRquPWy99z62A0ThAtSebNr5ug0wt/BqvKfrO6HoDzyjmdrKX+lgodUbWN2UTo+
YX8F+tD0pvD/QoFFLPxkKiwqf7NCmtDhbMHTp1xTHbUk2r5htHtH+qhf7Yv9uKfr
mRGLfnHqa5RUHA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:20:34 2025 by rpki-client