Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: bIDh2Po393djn8HLpU2Uc/O7HgLM9bNmV5FvbCfLKfw=
Subject key identifier: 96:D9:B3:E7:09:4B:8D:BC:CC:D6:12:DF:7C:33:ED:9C:03:68:F2:19
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 01984AAEC28AC29A5177743BC60D293DD5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: +39OKc+MxV4JoCal4rnnYpkJGdccSgSSWodT63n4h4A=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c2:8a:c2:9a:51:77:74:3b:c6:0d:29:3d:d5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=96d9b3e7094b8dbcccd612df7c33ed9c0368f219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:db:e2:2a:26:b7:21:87:40:dd:0f:04:ef:
13:12:21:1c:97:f7:3d:26:cf:e5:c6:40:b1:6c:9a:
c0:0a:02:39:1b:eb:89:39:9b:07:c2:c5:3c:cf:c9:
ca:d8:37:eb:eb:41:30:c3:84:ff:e5:0d:01:08:c5:
36:2d:c8:89:86:b6:88:85:93:03:a5:ad:24:2f:b8:
76:3b:80:f5:65:37:b8:a0:11:8e:82:a2:14:fc:fc:
aa:6b:6e:13:74:ef:39:22:74:51:1c:b1:36:6b:87:
80:b5:ee:c0:4e:da:08:aa:6e:cf:5f:c6:83:b8:b3:
31:59:18:5f:cf:f4:ec:ca:68:e6:e2:c8:c1:d6:34:
42:d6:c2:51:4a:5e:c2:a0:aa:af:2a:fd:5a:85:ea:
07:f8:20:fd:ff:14:f2:17:e4:fe:76:83:6a:63:29:
b3:40:e3:55:c5:da:55:5c:1e:65:7c:55:38:95:06:
18:02:f9:bd:c4:e1:48:55:57:f5:e7:8f:e9:ed:16:
10:5c:d1:53:df:7b:69:d2:a0:f8:fa:7e:5f:b9:42:
59:54:6c:1f:96:ac:f8:7e:9f:b4:8e:88:d0:4b:9f:
e9:f7:35:6d:e5:78:a8:03:f7:98:96:e4:ce:e1:6e:
37:72:aa:e1:45:26:1b:c9:31:19:8b:6d:a7:2d:89:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:B3:E7:09:4B:8D:BC:CC:D6:12:DF:7C:33:ED:9C:03:68:F2:19
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:81:0e:5a:82:54:13:f1:b2:1b:a3:5d:08:9f:a1:d1:31:9c:
fd:54:f2:2e:84:c6:59:46:32:51:0e:ed:32:1c:c1:25:2f:a1:
fa:b6:84:b5:24:46:51:64:a3:b6:24:4c:36:d5:91:93:98:06:
88:80:4b:8a:d6:de:9a:dd:7e:bc:b5:22:67:68:f5:75:8e:bc:
8e:0e:f6:1d:a3:89:c4:f7:97:d1:08:51:63:6b:ee:34:9f:e7:
f8:c4:fb:d5:db:52:1c:19:dd:a2:71:ee:cc:7c:c4:5f:1e:84:
a2:ab:fd:e4:58:b6:7b:39:50:e0:ef:89:77:59:b6:95:c6:2f:
39:da:28:d9:b0:5e:fd:04:cd:42:33:c6:9d:c1:9d:44:1f:a2:
36:60:4c:1c:da:63:b9:7b:c2:b0:b6:db:55:2a:81:e5:55:b4:
d9:51:7e:b5:7c:f6:7b:44:ed:16:56:33:d7:6f:f5:a4:13:d7:
06:c8:6d:9b:47:65:08:c8:6d:8e:01:85:04:01:f8:5f:66:3d:
44:98:27:1d:ac:20:ef:3a:6a:6c:19:83:57:1b:90:3b:c7:8b:
6a:11:47:87:72:f4:31:f9:6e:7e:27:a3:60:e2:2b:35:45:4e:
00:8a:e9:bd:76:99:ba:48:2e:f6:d7:ac:ec:45:c1:90:a1:01:
2a:56:c2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrsKKwppRd3Q7xg0pPdXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0
NzBiZmYwHhcNMjUwNzI3MDcwMDIzWhcNMjUwNzI4MDcwMDIzWjAzMTEwLwYDVQQD
Eyg5NmQ5YjNlNzA5NGI4ZGJjY2NkNjEyZGY3YzMzZWQ5YzAzNjhmMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPb4iomtyGHQN0PBO8TEiEcl/c9
Js/lxkCxbJrACgI5G+uJOZsHwsU8z8nK2Dfr60Eww4T/5Q0BCMU2LciJhraIhZMD
pa0kL7h2O4D1ZTe4oBGOgqIU/Pyqa24TdO85InRRHLE2a4eAte7ATtoIqm7PX8aD
uLMxWRhfz/Tsymjm4sjB1jRC1sJRSl7CoKqvKv1aheoH+CD9/xTyF+T+doNqYymz
QONVxdpVXB5lfFU4lQYYAvm9xOFIVVf154/p7RYQXNFT33tp0qD4+n5fuUJZVGwf
lqz4fp+0jojQS5/p9zVt5XioA/eYluTO4W43cqrhRSYbyTEZi22nLYloAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbZs+cJS428zNYS33wz7ZwDaPIZMB8GA1UdIwQY
MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt
ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4
LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoEOWoJU
E/GyG6NdCJ+h0TGc/VTyLoTGWUYyUQ7tMhzBJS+h+raEtSRGUWSjtiRMNtWRk5gG
iIBLitbemt1+vLUiZ2j1dY68jg72HaOJxPeX0QhRY2vuNJ/n+MT71dtSHBndonHu
zHzEXx6Eoqv95Fi2ezlQ4O+Jd1m2lcYvOdoo2bBe/QTNQjPGncGdRB+iNmBMHNpj
uXvCsLbbVSqB5VW02VF+tXz2e0TtFlYz12/1pBPXBshtm0dlCMhtjgGFBAH4X2Y9
RJgnHawg7zpqbBmDVxuQO8eLahFHh3L0MflufiejYOIrNUVOAIrpvXaZukgu9tes
7EXBkKEBKlbCpw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:28 2025 by rpki-client