Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: +EO41en5SeW+KDWrzsRaxob26Rqvb1o8h32pE6QnAfc=
Subject key identifier: 58:FF:F8:8E:BB:5D:43:ED:FA:8A:B9:FC:56:1A:7E:C5:72:CC:01:DB
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 019847ADD4C17EDE6E58D2C27426C571A1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 17:00:31 +0000
Manifest this update: Sat 26 Jul 2025 17:00:31 +0000
Manifest next update: Sun 27 Jul 2025 17:00:31 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: nHBPdG7rmPByN0ILtCEZq+zaN5TBLl6EYgkKLmehjD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d4:c1:7e:de:6e:58:d2:c2:74:26:c5:71:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Jul 26 17:00:31 2025 GMT
Not After : Jul 27 17:00:31 2025 GMT
Subject: CN=58fff88ebb5d43edfa8ab9fc561a7ec572cc01db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:2b:7a:77:f2:11:f6:ff:39:cd:6c:9c:9f:
44:9b:52:41:4e:21:4a:64:d6:ea:2b:a0:a3:d7:4c:
73:1b:73:2b:d1:1c:13:ef:50:67:31:13:01:6a:82:
54:78:74:2e:d1:55:c1:a9:06:5d:78:9a:98:9f:80:
7e:8c:57:95:5c:22:c0:a2:7e:c2:18:45:a1:8c:30:
aa:76:3a:aa:de:f5:8c:1f:cd:66:6e:ce:c3:f3:72:
5e:d0:fb:3f:54:49:59:61:ca:fd:02:26:d8:09:3a:
c8:75:b7:fd:d2:07:cb:f8:1e:36:d7:fe:b7:16:59:
98:7e:82:e1:83:ec:f1:7a:be:da:93:31:99:86:b9:
26:13:bc:0a:27:5b:dd:b3:68:8b:01:68:b0:e1:32:
ce:8e:15:f8:ba:5a:14:d7:a2:79:be:8c:f5:a2:34:
73:14:9d:cc:7c:4d:53:60:68:fe:88:c5:77:ff:c6:
d1:e5:4b:0a:03:08:48:58:85:92:f5:a2:b5:73:83:
cc:96:24:29:00:09:28:bf:b1:3e:20:ff:2e:f4:d9:
19:4a:09:b7:5f:1d:48:15:6e:58:ea:5b:d7:c3:01:
ce:08:d0:77:f0:4e:99:8e:be:89:b7:01:43:e3:39:
4e:ec:12:be:77:ad:5a:b0:60:a9:4c:a4:91:de:da:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:F8:8E:BB:5D:43:ED:FA:8A:B9:FC:56:1A:7E:C5:72:CC:01:DB
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:c5:22:e7:1f:b9:38:29:af:14:d1:2f:c1:51:03:e6:05:
96:4f:0b:88:20:9e:9e:7b:44:0f:93:1f:48:91:a3:de:2f:0f:
fe:6d:da:e8:74:81:71:5e:e8:7c:98:f8:c3:e3:38:2a:13:ee:
fa:be:07:bd:17:ee:36:a5:68:93:78:de:db:a3:c3:31:9a:54:
48:57:1c:78:93:26:b4:8d:cf:e1:e1:a7:d0:d6:01:59:31:59:
93:e3:bd:2a:b0:bd:f2:76:fd:b8:8a:10:fa:51:92:fc:9d:5b:
90:7f:86:38:1a:cf:59:90:b6:eb:0f:c1:a8:38:e2:26:6f:32:
51:1b:1a:c2:a4:e7:40:05:1d:58:fb:d2:92:52:14:f1:6f:6b:
94:d8:45:26:ae:aa:87:72:22:d9:7d:42:91:69:36:9d:dc:70:
34:39:a5:b3:a0:6c:c3:77:c5:40:af:c5:ef:d9:7e:29:ef:a5:
66:d1:00:81:be:35:82:aa:ee:c9:6b:80:72:81:22:a4:e2:08:
71:58:8d:91:6a:cf:e9:02:a3:68:b9:50:fe:17:4e:f4:9e:da:
e2:cf:81:3b:aa:1e:3c:33:8a:91:19:07:15:9b:dc:7d:ec:a4:
57:10:2d:5b:9b:da:d8:af:c0:e4:24:63:49:3e:da:f3:db:69:
03:b7:65:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrdTBft5uWNLCdCbFcaHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTU3NjMxZjYwYWRiMTNmMGFlMzY4NjcxY2UwZjg3NDJm
NTk3N2YwHhcNMjUwNzI2MTcwMDMxWhcNMjUwNzI3MTcwMDMxWjAzMTEwLwYDVQQD
Eyg1OGZmZjg4ZWJiNWQ0M2VkZmE4YWI5ZmM1NjFhN2VjNTcyY2MwMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g8renfyEfb/Oc1snJ9Em1JBTiFK
ZNbqK6Cj10xzG3Mr0RwT71BnMRMBaoJUeHQu0VXBqQZdeJqYn4B+jFeVXCLAon7C
GEWhjDCqdjqq3vWMH81mbs7D83Je0Ps/VElZYcr9AibYCTrIdbf90gfL+B421/63
FlmYfoLhg+zxer7akzGZhrkmE7wKJ1vds2iLAWiw4TLOjhX4uloU16J5voz1ojRz
FJ3MfE1TYGj+iMV3/8bR5UsKAwhIWIWS9aK1c4PMliQpAAkov7E+IP8u9NkZSgm3
Xx1IFW5Y6lvXwwHOCNB38E6Zjr6JtwFD4zlO7BK+d61asGCpTKSR3tqAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj/+I67XUPt+oq5/FYafsVyzAHbMB8GA1UdIwQY
MBaAFNrldjH2CtsT8K42hnHOD4dC9Zd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEt
NDM5ZjM2ZTE2NTNhLzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEtNDM5ZjM2ZTE2NTNh
LzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUXFIucf
uTgprxTRL8FRA+YFlk8LiCCenntED5MfSJGj3i8P/m3a6HSBcV7ofJj4w+M4KhPu
+r4HvRfuNqVok3je26PDMZpUSFcceJMmtI3P4eGn0NYBWTFZk+O9KrC98nb9uIoQ
+lGS/J1bkH+GOBrPWZC26w/BqDjiJm8yURsawqTnQAUdWPvSklIU8W9rlNhFJq6q
h3Ii2X1CkWk2ndxwNDmls6Bsw3fFQK/F79l+Ke+lZtEAgb41gqruyWuAcoEipOII
cViNkWrP6QKjaLlQ/hdO9J7a4s+BO6oePDOKkRkHFZvcfeykVxAtW5va2K/A5CRj
ST7a89tpA7dltw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:43 2025 by rpki-client