Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: JSYeN9AvqD2ND00z1BxJd1BWfuOQK/5q6ChDHga4RQU=
Subject key identifier: E4:AB:6A:0C:8F:D4:02:8D:E1:BD:B8:BD:47:DF:33:03:07:5B:14:91
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019849652948CA7E16285B1069C320159FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0CAC
Signing time: Sun 27 Jul 2025 01:00:22 +0000
Manifest this update: Sun 27 Jul 2025 01:00:22 +0000
Manifest next update: Mon 28 Jul 2025 01:00:22 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: OZcaYKn8GumpoRLj1egOXdumzKco7oSbLR8NNzQuBq8=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:29:48:ca:7e:16:28:5b:10:69:c3:20:15:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Jul 27 01:00:22 2025 GMT
Not After : Jul 28 01:00:22 2025 GMT
Subject: CN=e4ab6a0c8fd4028de1bdb8bd47df3303075b1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:1a:46:37:9e:6b:c7:85:61:03:28:65:13:
f8:f4:4f:4b:bf:8e:80:0e:e0:d9:9a:8f:97:c4:c1:
9d:23:c4:3c:ce:7d:21:4a:2c:46:8d:08:a1:23:59:
89:6a:c9:ba:20:29:05:12:f6:9e:4a:45:7c:bf:96:
64:96:fa:3c:e6:5e:10:e3:82:b8:c3:b4:ea:15:6b:
9c:64:7c:10:8b:61:a8:1d:b4:4e:65:91:8a:c6:f7:
53:56:fa:72:01:e3:60:37:db:8d:fc:a3:90:bd:53:
f3:54:a8:46:01:51:a0:d5:c1:a2:47:8d:b4:4d:2e:
89:f5:61:b5:3b:bf:c6:68:fd:1d:0f:72:4c:0f:c9:
f6:5b:c3:57:92:40:8b:ee:2e:af:a8:23:c4:78:d5:
d9:b2:15:3f:f4:d6:62:72:39:3a:56:98:4e:3e:34:
c7:28:fe:18:cc:b8:12:b7:aa:58:1b:e3:dc:1b:53:
a9:42:30:a9:2e:5b:28:7b:af:f7:21:1b:e0:02:b4:
59:c5:1c:6e:a6:3a:0b:8a:d5:0f:66:1e:21:72:89:
c5:3c:82:77:ac:03:04:96:ca:e6:5f:b4:40:c9:70:
db:a7:15:e5:18:48:7f:1b:a1:b2:7f:2e:76:ac:6d:
0e:c7:de:5a:98:81:4e:0e:5f:23:72:ba:55:4c:66:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:6A:0C:8F:D4:02:8D:E1:BD:B8:BD:47:DF:33:03:07:5B:14:91
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:be:89:0b:40:65:c9:f5:45:ba:8c:a8:05:17:c0:40:92:60:
63:6a:8a:cc:10:63:03:b7:ce:b0:43:51:0c:31:cf:2f:e9:5e:
fb:c2:be:ba:c6:d3:19:c5:22:ea:93:34:0d:6f:90:91:3a:2b:
4f:fc:a6:dc:bc:9f:7c:a6:a3:c3:d4:85:bd:84:45:c0:3f:94:
ec:8f:85:21:af:ae:d7:14:a2:2f:c6:24:49:ed:ae:55:b5:bf:
60:0d:bc:56:bc:89:6c:87:66:df:36:ac:69:a2:e6:6a:df:2f:
4b:3a:09:6d:7f:84:e7:59:b9:94:e0:d7:6a:a6:83:f4:33:09:
85:e9:6b:70:f3:71:23:c2:24:61:7e:5e:20:a5:2f:5c:bb:a0:
2c:21:18:58:c2:45:4a:ef:f4:0a:95:39:f4:bd:56:cf:c2:a8:
a9:f1:28:45:14:3c:a9:fc:95:85:da:f3:53:09:65:77:70:43:
8b:f3:3e:da:3c:3f:5b:c2:74:38:6d:c8:ee:51:97:e6:3e:b1:
92:70:29:9e:04:38:86:d5:43:a3:a4:30:32:2b:bc:cf:6e:fa:
c3:b1:67:fb:10:7d:2b:de:97:6a:86:be:c3:ec:2c:08:b6:51:
dc:37:f6:2b:92:a1:f1:10:f6:2f:05:bd:a1:2d:8b:3e:d2:86:
a2:4d:76:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZSlIyn4WKFsQacMgFZ/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjUwNzI3MDEwMDIyWhcNMjUwNzI4MDEwMDIyWjAzMTEwLwYDVQQD
EyhlNGFiNmEwYzhmZDQwMjhkZTFiZGI4YmQ0N2RmMzMwMzA3NWIxNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobYaRjeea8eFYQMoZRP49E9Lv46A
DuDZmo+XxMGdI8Q8zn0hSixGjQihI1mJasm6ICkFEvaeSkV8v5Zklvo85l4Q44K4
w7TqFWucZHwQi2GoHbROZZGKxvdTVvpyAeNgN9uN/KOQvVPzVKhGAVGg1cGiR420
TS6J9WG1O7/GaP0dD3JMD8n2W8NXkkCL7i6vqCPEeNXZshU/9NZicjk6VphOPjTH
KP4YzLgSt6pYG+PcG1OpQjCpLlsoe6/3IRvgArRZxRxupjoLitUPZh4hconFPIJ3
rAMElsrmX7RAyXDbpxXlGEh/G6Gyfy52rG0Ox95amIFODl8jcrpVTGbOuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSragyP1AKN4b24vUffMwMHWxSRMB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN76JC0Bl
yfVFuoyoBRfAQJJgY2qKzBBjA7fOsENRDDHPL+le+8K+usbTGcUi6pM0DW+QkTor
T/ym3LyffKajw9SFvYRFwD+U7I+FIa+u1xSiL8YkSe2uVbW/YA28VryJbIdm3zas
aaLmat8vSzoJbX+E51m5lODXaqaD9DMJhelrcPNxI8IkYX5eIKUvXLugLCEYWMJF
Su/0CpU59L1Wz8KoqfEoRRQ8qfyVhdrzUwlld3BDi/M+2jw/W8J0OG3I7lGX5j6x
knApngQ4htVDo6QwMiu8z276w7Fn+xB9K96Xaoa+w+wsCLZR3Df2K5Kh8RD2LwW9
oS2LPtKGok12hQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:01 2025 by rpki-client