Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: 7m8Uj70qSbQPkSXnNyH/BCwTupYTpFzwf9AfRHhhd0I=
Subject key identifier: 48:8C:44:13:66:19:52:73:D0:E3:DA:BC:29:E0:3E:1F:53:F3:6B:AA
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0198477824B057C2833FE14AA007E22DF487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 158D
Signing time: Sat 26 Jul 2025 16:01:52 +0000
Manifest this update: Sat 26 Jul 2025 16:01:52 +0000
Manifest next update: Sun 27 Jul 2025 16:01:52 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: dCCx9Vs6XLOSFZJ03uwtZefiakpkbxgVK+mb6pxnwjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:24:b0:57:c2:83:3f:e1:4a:a0:07:e2:2d:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jul 26 16:01:52 2025 GMT
Not After : Jul 27 16:01:52 2025 GMT
Subject: CN=488c441366195273d0e3dabc29e03e1f53f36baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:a1:75:d6:02:3c:dc:33:fa:be:45:4e:59:
85:31:d8:0c:ec:e0:13:e5:89:4b:0a:3f:a0:2a:8e:
17:e6:bd:30:5d:8d:47:e7:9a:bd:d6:44:1f:20:e8:
15:16:de:09:51:7a:aa:27:dc:10:4c:57:28:ef:90:
5b:15:82:49:15:57:2d:bc:2a:14:ba:13:31:40:7b:
b6:26:70:e0:67:3d:aa:f1:aa:00:27:b8:92:61:fe:
9c:68:6a:5f:ae:b1:2d:1d:a5:63:41:99:be:03:40:
a4:c3:cd:1b:0d:c0:21:5b:c1:cf:49:e4:cf:f6:ca:
58:07:29:84:c3:66:c8:ba:57:b2:8c:10:a3:c5:d4:
12:f0:81:95:b9:76:2e:d4:7c:16:e8:db:d5:aa:87:
43:d4:6e:8d:da:83:25:7c:9d:4c:e3:3e:0d:ea:24:
7f:da:50:2d:54:51:ad:d5:3b:99:7c:f8:67:ba:23:
15:e3:27:10:4d:2a:02:ae:b2:5b:1e:65:41:6e:e9:
30:8b:bc:b5:f5:1c:01:b2:80:f0:10:19:35:88:1d:
06:61:26:96:90:24:91:4c:f1:3c:b1:d4:2d:b4:42:
01:45:46:08:28:40:28:22:d0:62:84:1e:2d:b2:91:
af:65:a8:f6:78:d9:62:a7:0d:cc:d2:21:2b:16:78:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:44:13:66:19:52:73:D0:E3:DA:BC:29:E0:3E:1F:53:F3:6B:AA
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:19:11:35:2c:15:60:9a:d1:e8:98:bd:15:79:3d:ef:c0:b7:
9e:58:25:1c:a6:56:7c:2f:f5:cd:65:46:07:bc:7b:33:3d:67:
a7:3a:13:b1:36:17:6c:46:fc:c1:22:12:92:b3:20:e2:8b:ef:
18:fb:f3:32:0e:e0:f9:e2:29:27:ba:25:3c:3f:43:7d:4b:ff:
db:8a:0c:e7:8b:52:9c:53:ae:dd:87:50:7b:fa:bc:b2:92:19:
9b:11:40:de:0e:6b:d6:67:9c:a2:b7:9b:f3:33:42:ce:5a:5a:
7a:a7:43:a4:73:f0:8f:bc:76:3b:e0:3a:c3:ea:59:29:f2:df:
19:95:d3:ba:74:26:f7:fb:6a:66:8a:cb:97:15:e1:f0:d2:51:
0a:63:4b:e3:b5:11:d5:9f:62:a3:cf:82:2d:c7:82:1f:83:67:
8c:6a:2b:d4:6d:32:e7:94:c9:ba:b3:bd:b5:62:84:06:73:19:
e8:cf:aa:d7:4e:09:96:06:b4:51:7a:89:bc:f7:f3:1a:85:93:
a8:9b:58:2c:b1:4d:3e:d1:86:3f:27:4a:4d:9c:4e:64:d4:ea:
d0:fd:70:06:b3:be:d4:e3:e0:eb:e6:e9:f7:cc:2b:92:23:00:
8b:22:4b:ac:b9:be:43:e4:3d:b2:a2:e9:1b:63:94:99:e6:c3:
5a:cc:6c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeCSwV8KDP+FKoAfiLfSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4
ODBmM2IwHhcNMjUwNzI2MTYwMTUyWhcNMjUwNzI3MTYwMTUyWjAzMTEwLwYDVQQD
Eyg0ODhjNDQxMzY2MTk1MjczZDBlM2RhYmMyOWUwM2UxZjUzZjM2YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA6hddYCPNwz+r5FTlmFMdgM7OAT
5YlLCj+gKo4X5r0wXY1H55q91kQfIOgVFt4JUXqqJ9wQTFco75BbFYJJFVctvCoU
uhMxQHu2JnDgZz2q8aoAJ7iSYf6caGpfrrEtHaVjQZm+A0Ckw80bDcAhW8HPSeTP
9spYBymEw2bIuleyjBCjxdQS8IGVuXYu1HwW6NvVqodD1G6N2oMlfJ1M4z4N6iR/
2lAtVFGt1TuZfPhnuiMV4ycQTSoCrrJbHmVBbukwi7y19RwBsoDwEBk1iB0GYSaW
kCSRTPE8sdQttEIBRUYIKEAoItBihB4tspGvZaj2eNlipw3M0iErFnjI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiMRBNmGVJz0OPavCngPh9T82uqMB8GA1UdIwQY
MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt
NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh
LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhkRNSwV
YJrR6Ji9FXk978C3nlglHKZWfC/1zWVGB7x7Mz1npzoTsTYXbEb8wSISkrMg4ovv
GPvzMg7g+eIpJ7olPD9DfUv/24oM54tSnFOu3YdQe/q8spIZmxFA3g5r1mecoreb
8zNCzlpaeqdDpHPwj7x2O+A6w+pZKfLfGZXTunQm9/tqZorLlxXh8NJRCmNL47UR
1Z9io8+CLceCH4NnjGor1G0y55TJurO9tWKEBnMZ6M+q104Jlga0UXqJvPfzGoWT
qJtYLLFNPtGGPydKTZxOZNTq0P1wBrO+1OPg6+bp98wrkiMAiyJLrLm+Q+Q9sqLp
G2OUmebDWsxs0A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:08 2025 by rpki-client