Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: QmbWeLEPxC3xe0bdLPzVCNEaiUZtxShzLF0kzLrfx50=
Subject key identifier: 92:BD:37:20:54:3A:A4:45:9F:BD:8D:B9:02:1F:55:A8:E5:FA:E9:47
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0198353A15BDC338B96060F8AD4CA0CAEA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0D4B
Signing time: Wed 23 Jul 2025 03:00:55 +0000
Manifest this update: Wed 23 Jul 2025 03:00:55 +0000
Manifest next update: Thu 24 Jul 2025 03:00:55 +0000
Files and hashes: 1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: j0GVyZrX4J4n9TaTvOucD1TXT0rdBR8KM2RuP/zLWsg=)
3: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
4: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
5: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
6: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
7: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (hash: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=)
8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:15:bd:c3:38:b9:60:60:f8:ad:4c:a0:ca:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jul 23 03:00:55 2025 GMT
Not After : Jul 24 03:00:55 2025 GMT
Subject: CN=92bd3720543aa4459fbd8db9021f55a8e5fae947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:95:c9:4a:49:49:30:eb:cf:ec:8d:5b:38:
a5:ae:70:56:9e:f6:79:1b:5b:90:90:a8:99:78:1b:
fe:c8:89:f0:98:0a:bf:16:7e:81:27:cf:38:77:66:
f5:16:d3:9c:83:86:92:d8:6c:1b:60:45:2e:75:e7:
04:a2:3c:5e:d7:3f:32:29:cc:07:97:2e:84:9b:2f:
d3:24:ce:3a:2d:37:fe:73:e7:f8:7b:fd:e9:53:6a:
36:ff:42:e4:76:7b:27:82:a2:f3:67:98:80:b6:fe:
85:b5:31:59:80:fe:c8:97:ad:50:6f:fc:78:63:c4:
66:55:8c:b8:15:c7:da:76:94:33:28:04:3e:66:4d:
5a:36:35:1d:c8:8b:34:3b:7d:ee:16:4c:d0:a2:a4:
61:c3:4f:41:6a:8a:b5:33:9d:4d:3c:98:d0:28:aa:
ff:50:f0:61:a9:95:ec:86:51:d0:72:18:98:f7:da:
57:2f:c1:cd:c9:a6:b1:f6:6a:4e:bc:62:d2:a1:33:
c2:e7:c4:6d:1e:be:cb:bc:78:23:d2:26:29:20:53:
ed:80:f3:29:45:2f:a8:00:c6:b9:71:e8:84:70:a8:
7c:3b:3a:37:0d:46:1b:c6:be:ab:60:3e:21:7e:aa:
98:62:77:e5:00:da:4b:5e:70:80:06:9f:e1:03:ad:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:37:20:54:3A:A4:45:9F:BD:8D:B9:02:1F:55:A8:E5:FA:E9:47
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:68:4a:0b:d8:02:d3:8e:ac:1d:bf:6e:e2:c8:11:26:db:dc:
29:b6:bd:d3:95:80:36:27:12:3a:d6:46:7b:04:e2:4b:51:ea:
e4:8c:56:3d:23:1c:c8:56:f3:b7:b0:89:4b:4e:7a:8a:b4:f7:
21:9b:b0:da:de:6a:76:b7:3b:80:f3:51:f2:68:33:09:88:51:
7b:71:b4:15:c5:5c:22:51:a7:38:5b:64:cd:cf:1c:e1:a1:7d:
17:61:7a:11:f7:ff:d1:ac:2a:5e:fd:8c:c7:c4:6a:3d:fe:af:
49:3b:f0:4a:14:03:20:dc:06:fa:e7:cb:1e:ae:f8:1a:6a:5e:
89:d5:c2:b7:d0:93:25:ed:ad:8a:ae:a5:71:02:8a:53:3b:37:
1c:49:76:84:71:29:dd:e6:04:0c:bc:22:1c:94:35:75:65:d5:
29:53:c4:af:49:70:a4:61:80:cf:03:1f:68:35:91:2a:86:6a:
83:ef:9f:6f:6e:c2:a0:13:87:74:82:38:fb:7e:25:b8:7d:6c:
6c:8c:d0:fa:81:f0:a5:76:33:5a:a2:42:bd:7d:b6:17:e4:fe:
88:1c:c4:98:f7:89:1e:cb:71:75:3a:a3:07:f3:ac:5c:3a:03:
fe:e2:f9:df:83:82:5d:79:1e:bd:2d:3e:5d:cd:8f:70:87:69:
72:5f:bd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1OhW9wzi5YGD4rUygyuo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw
YWI3NzAwHhcNMjUwNzIzMDMwMDU1WhcNMjUwNzI0MDMwMDU1WjAzMTEwLwYDVQQD
Eyg5MmJkMzcyMDU0M2FhNDQ1OWZiZDhkYjkwMjFmNTVhOGU1ZmFlOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfKVyUpJSTDrz+yNWzilrnBWnvZ5
G1uQkKiZeBv+yInwmAq/Fn6BJ884d2b1FtOcg4aS2GwbYEUudecEojxe1z8yKcwH
ly6Emy/TJM46LTf+c+f4e/3pU2o2/0LkdnsngqLzZ5iAtv6FtTFZgP7Il61Qb/x4
Y8RmVYy4FcfadpQzKAQ+Zk1aNjUdyIs0O33uFkzQoqRhw09Baoq1M51NPJjQKKr/
UPBhqZXshlHQchiY99pXL8HNyaax9mpOvGLSoTPC58RtHr7LvHgj0iYpIFPtgPMp
RS+oAMa5ceiEcKh8Ozo3DUYbxr6rYD4hfqqYYnflANpLXnCABp/hA62J+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK9NyBUOqRFn72NuQIfVajl+ulHMB8GA1UdIwQY
MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt
MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4
LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGhKC9gC
046sHb9u4sgRJtvcKba905WANicSOtZGewTiS1Hq5IxWPSMcyFbzt7CJS056irT3
IZuw2t5qdrc7gPNR8mgzCYhRe3G0FcVcIlGnOFtkzc8c4aF9F2F6Eff/0awqXv2M
x8RqPf6vSTvwShQDINwG+ufLHq74GmpeidXCt9CTJe2tiq6lcQKKUzs3HEl2hHEp
3eYEDLwiHJQ1dWXVKVPEr0lwpGGAzwMfaDWRKoZqg++fb27CoBOHdII4+34luH1s
bIzQ+oHwpXYzWqJCvX22F+T+iBzEmPeJHstxdTqjB/OsXDoD/uL534OCXXkevS0+
Xc2PcIdpcl+9Cg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 04:39:54 2025 by rpki-client