Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: 2qW926LdokQnnx1yHz9iBGyP7XbdJPekEPqwd31g6dI=
Subject key identifier: C6:C3:89:CC:3D:7E:B6:F9:50:0E:1E:58:FD:13:F7:14:A0:00:80:82
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019843D0AA7205669960066679907DA5BD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 035E
Signing time: Fri 25 Jul 2025 23:00:05 +0000
Manifest this update: Fri 25 Jul 2025 23:00:05 +0000
Manifest next update: Sat 26 Jul 2025 23:00:05 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: x8tOl9mBcFxtMVoO6UcVfQksGwdADXUJjvfu/Jh0UaA=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:aa:72:05:66:99:60:06:66:79:90:7d:a5:bd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jul 25 23:00:05 2025 GMT
Not After : Jul 26 23:00:05 2025 GMT
Subject: CN=c6c389cc3d7eb6f9500e1e58fd13f714a0008082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:b6:fc:ec:f7:32:14:08:91:35:5b:2f:c1:
54:ac:cc:b5:72:06:d5:ce:45:97:f3:0d:a0:5e:f4:
42:ab:32:c7:f2:7a:b0:7d:c9:19:12:31:80:c2:68:
8c:25:a8:d5:40:0c:6f:a5:7d:9c:13:05:2c:a6:5b:
2e:55:ca:09:77:76:7e:c9:80:76:1c:ba:35:a8:ff:
c8:ff:4e:6e:ee:ae:65:81:3d:dd:26:28:d2:72:5b:
58:21:f0:ac:56:31:2f:32:e5:fc:04:86:50:09:2d:
74:41:bb:7d:55:27:ce:6d:d0:99:45:53:a0:cc:9f:
30:d9:56:e9:ec:81:4b:6e:bd:c4:da:54:bf:f5:93:
26:e4:25:89:c2:e5:de:9c:ef:ae:01:85:e3:38:81:
be:3d:74:98:f4:63:32:41:58:eb:37:8c:30:6f:a7:
72:47:a9:11:6f:00:17:33:d6:20:09:97:43:dc:de:
94:f4:e6:56:c6:dc:ed:20:af:77:1d:82:1d:21:62:
5c:1a:26:84:8b:58:45:c2:d5:c4:24:c9:0a:ce:13:
8d:6a:6c:0a:e3:10:21:d3:df:c2:7f:7f:a1:29:64:
96:2b:f1:9c:fe:05:bf:96:e6:79:4e:d7:d0:ed:94:
56:2d:8a:32:b3:e2:d6:b7:a9:b5:fa:57:c8:0f:a6:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:89:CC:3D:7E:B6:F9:50:0E:1E:58:FD:13:F7:14:A0:00:80:82
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4f:81:e7:c4:93:5a:56:68:74:a6:fa:7d:77:96:27:78:1c:
40:3b:56:14:c0:14:08:20:f4:d7:e1:e2:96:b6:b8:ba:d5:9f:
fb:ef:8b:81:98:7f:9f:41:5f:b3:37:58:24:59:a0:e1:4f:83:
69:71:2a:a9:32:d9:08:f7:d6:2a:47:17:23:2f:87:d6:c5:53:
ea:6f:f0:63:16:70:e5:35:1b:ce:87:b2:33:6f:a4:41:41:91:
a8:ca:10:61:88:10:ca:e6:bf:93:34:9d:84:09:f4:7c:ab:be:
ab:9f:e9:f6:61:c1:a0:fd:7b:44:76:5c:97:e1:4e:2d:9d:31:
e3:7d:bb:93:e4:31:b3:a1:31:b7:32:04:9a:29:28:b7:34:90:
a0:c8:04:59:d2:be:af:90:bb:07:59:bc:60:28:df:21:af:84:
ad:1d:52:6f:a2:df:e5:c6:c6:33:9a:d8:7b:3b:44:94:7a:ae:
21:af:ec:74:95:9b:6c:76:9e:ff:5e:aa:c3:de:94:5c:87:46:
09:bf:43:6b:ee:42:98:fc:2f:f9:c9:2c:73:28:98:45:2e:4e:
5b:5f:84:01:52:2f:b8:f4:b0:17:5f:e2:b9:38:ef:40:9b:6f:
51:1a:a7:41:6a:ac:8b:11:e6:80:85:c0:b4:9b:c5:b8:4a:43:
2b:b7:4c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhD0KpyBWaZYAZmeZB9pb2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz
NmZkZGIwHhcNMjUwNzI1MjMwMDA1WhcNMjUwNzI2MjMwMDA1WjAzMTEwLwYDVQQD
EyhjNmMzODljYzNkN2ViNmY5NTAwZTFlNThmZDEzZjcxNGEwMDA4MDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyS2/Oz3MhQIkTVbL8FUrMy1cgbV
zkWX8w2gXvRCqzLH8nqwfckZEjGAwmiMJajVQAxvpX2cEwUsplsuVcoJd3Z+yYB2
HLo1qP/I/05u7q5lgT3dJijScltYIfCsVjEvMuX8BIZQCS10Qbt9VSfObdCZRVOg
zJ8w2Vbp7IFLbr3E2lS/9ZMm5CWJwuXenO+uAYXjOIG+PXSY9GMyQVjrN4wwb6dy
R6kRbwAXM9YgCZdD3N6U9OZWxtztIK93HYIdIWJcGiaEi1hFwtXEJMkKzhONamwK
4xAh09/Cf3+hKWSWK/Gc/gW/luZ5TtfQ7ZRWLYoys+LWt6m1+lfID6YziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbDicw9frb5UA4eWP0T9xSgAICCMB8GA1UdIwQY
MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt
YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5
LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArk+B58ST
WlZodKb6fXeWJ3gcQDtWFMAUCCD01+Hilra4utWf+++LgZh/n0FfszdYJFmg4U+D
aXEqqTLZCPfWKkcXIy+H1sVT6m/wYxZw5TUbzoeyM2+kQUGRqMoQYYgQyua/kzSd
hAn0fKu+q5/p9mHBoP17RHZcl+FOLZ0x4327k+Qxs6ExtzIEmikotzSQoMgEWdK+
r5C7B1m8YCjfIa+ErR1Sb6Lf5cbGM5rYeztElHquIa/sdJWbbHae/16qw96UXIdG
Cb9Da+5CmPwv+ckscyiYRS5OW1+EAVIvuPSwF1/iuTjvQJtvURqnQWqsixHmgIXA
tJvFuEpDK7dMEg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:01:06 2025 by rpki-client