Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: fOih8/FgoWTUwbAXRyr2++6UiIX8cD/zen2omHRznNo=
Subject key identifier: CE:7D:50:72:FE:81:8B:A3:40:98:FA:3E:75:6D:EC:1F:8B:87:F4:B6
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019855A12D8A5D92031A5D6810653557F3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 146B
Signing time: Tue 29 Jul 2025 10:01:22 +0000
Manifest this update: Tue 29 Jul 2025 10:01:22 +0000
Manifest next update: Wed 30 Jul 2025 10:01:22 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: Ue371k1wvB864JoF/x6nTq6YxGTfAXZbagH6K/PyQW4=)
2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a1:2d:8a:5d:92:03:1a:5d:68:10:65:35:57:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jul 29 10:01:22 2025 GMT
Not After : Jul 30 10:01:22 2025 GMT
Subject: CN=ce7d5072fe818ba34098fa3e756dec1f8b87f4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:ab:2f:ef:5a:20:77:68:a7:56:9b:86:4a:
86:18:59:e6:0f:49:fe:89:91:75:6c:14:28:bd:0e:
1f:0e:3a:39:a8:53:ad:28:63:ac:b9:85:0f:a6:59:
e1:33:01:bc:b6:af:7f:6c:5f:c4:a7:90:a6:cc:3c:
4c:a7:27:1b:62:ae:ed:80:e9:4e:14:66:4e:0f:07:
14:0e:8d:11:3e:6e:f1:3f:28:70:79:2c:05:27:e0:
ea:c5:11:8b:43:80:05:aa:75:5b:f5:66:3c:62:10:
2a:a7:c9:18:d8:6a:fa:00:e3:49:ec:53:73:ba:93:
f1:06:e4:7c:75:72:a7:ad:73:e8:83:17:6b:bf:07:
3a:60:44:67:3f:78:4f:db:ab:de:1f:90:84:91:00:
ac:92:7d:e1:fd:d0:8c:cd:11:de:17:38:2f:42:2d:
0c:05:cd:61:4d:bf:be:90:af:86:3f:c1:ad:ac:82:
34:34:76:08:7c:9f:ec:7f:ae:b9:71:58:d5:1e:2f:
7f:f8:87:6d:88:e8:64:23:a0:21:3b:c5:dd:b4:57:
8c:cb:4b:ac:54:38:a3:d8:f1:63:eb:6b:4c:a3:e2:
9d:43:7e:87:4d:f4:83:ab:76:20:fd:03:44:54:63:
9c:a4:7c:d1:3a:fd:34:74:bd:10:de:6c:5b:8d:a2:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:50:72:FE:81:8B:A3:40:98:FA:3E:75:6D:EC:1F:8B:87:F4:B6
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:fa:45:5c:41:00:84:25:a9:86:72:bd:63:41:bf:55:be:
3a:53:f6:f0:cb:97:d3:ea:e5:1e:b2:1f:1f:af:f6:c0:9b:3d:
e0:8a:b8:c5:08:cf:d1:b3:54:97:5d:f2:85:22:47:a1:a3:cd:
3d:f7:0b:93:35:59:86:e1:86:97:6c:1c:0a:58:e8:05:33:9e:
71:03:77:43:44:5e:f3:f1:cc:20:07:8b:7f:72:b4:2c:fb:7a:
13:d2:c3:a5:8a:be:6c:1b:47:b2:43:cb:b7:3a:14:dd:01:ef:
b9:d2:ff:d4:3d:fd:b8:a5:fc:39:45:eb:9f:c4:f0:e3:e2:ff:
52:12:f3:6c:84:15:2e:2e:a3:47:3c:21:32:5d:e3:68:fb:50:
ec:1e:c8:c0:7f:ce:55:2d:1c:bc:6b:04:6d:08:92:84:e1:f9:
64:f2:cd:4e:ef:5d:63:0e:73:a3:ca:b3:b1:d0:3c:7a:1d:ac:
06:a3:0f:7a:14:64:26:98:1a:f2:a3:ae:37:63:c0:e3:75:82:
01:30:de:25:95:0b:ac:98:a7:3c:6b:d9:87:e3:d0:aa:3e:fd:
4a:11:7a:0a:8c:d1:8e:b6:01:92:8b:7d:42:4f:0b:52:f8:ff:
a8:9f:61:77:c5:17:c7:3a:67:48:18:f3:87:e3:e4:5d:7d:29:
5e:2d:b6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoS2KXZIDGl1oEGU1V/PeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4
ZDM0ZDYwHhcNMjUwNzI5MTAwMTIyWhcNMjUwNzMwMTAwMTIyWjAzMTEwLwYDVQQD
EyhjZTdkNTA3MmZlODE4YmEzNDA5OGZhM2U3NTZkZWMxZjhiODdmNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbyrL+9aIHdop1abhkqGGFnmD0n+
iZF1bBQovQ4fDjo5qFOtKGOsuYUPplnhMwG8tq9/bF/Ep5CmzDxMpycbYq7tgOlO
FGZODwcUDo0RPm7xPyhweSwFJ+DqxRGLQ4AFqnVb9WY8YhAqp8kY2Gr6AONJ7FNz
upPxBuR8dXKnrXPogxdrvwc6YERnP3hP26veH5CEkQCskn3h/dCMzRHeFzgvQi0M
Bc1hTb++kK+GP8GtrII0NHYIfJ/sf665cVjVHi9/+IdtiOhkI6AhO8XdtFeMy0us
VDij2PFj62tMo+KdQ36HTfSDq3Yg/QNEVGOcpHzROv00dL0Q3mxbjaKkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM59UHL+gYujQJj6PnVt7B+Lh/S2MB8GA1UdIwQY
MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt
MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw
LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMff6RVxB
AIQlqYZyvWNBv1W+OlP28MuX0+rlHrIfH6/2wJs94Iq4xQjP0bNUl13yhSJHoaPN
PfcLkzVZhuGGl2wcCljoBTOecQN3Q0Re8/HMIAeLf3K0LPt6E9LDpYq+bBtHskPL
tzoU3QHvudL/1D39uKX8OUXrn8Tw4+L/UhLzbIQVLi6jRzwhMl3jaPtQ7B7IwH/O
VS0cvGsEbQiShOH5ZPLNTu9dYw5zo8qzsdA8eh2sBqMPehRkJpga8qOuN2PA43WC
ATDeJZULrJinPGvZh+PQqj79ShF6CozRjrYBkot9Qk8LUvj/qJ9hd8UXxzpnSBjz
h+PkXX0pXi22AA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 17:05:40 2025 by rpki-client