Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 375bIOrIH/7oOYV5nuR5K6SUJU8LvUdXSJfB4AshH50=
Subject key identifier: 7A:27:20:18:CD:B4:7F:BE:F1:A7:0C:45:F5:FA:4F:A0:83:BA:0C:A9
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019849D3895B209020A284E3AB5E087D82F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:56 +0000
Manifest this update: Sun 27 Jul 2025 03:00:56 +0000
Manifest next update: Mon 28 Jul 2025 03:00:56 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: ctCuaONPqeE2H3tD9UV0BGKfgVKoYDWHw3O25EmHyOg=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:89:5b:20:90:20:a2:84:e3:ab:5e:08:7d:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jul 27 03:00:56 2025 GMT
Not After : Jul 28 03:00:56 2025 GMT
Subject: CN=7a272018cdb47fbef1a70c45f5fa4fa083ba0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:cb:7b:49:70:37:54:7f:50:fd:4b:68:34:
8c:ea:51:7f:38:47:0f:0d:0d:70:30:22:17:20:0a:
15:b9:c6:c5:d6:f6:bf:15:77:5e:de:ec:2a:d8:06:
dd:18:59:c9:7a:a4:10:c7:74:e9:9c:35:0a:ad:01:
57:e1:c7:fa:7e:f0:5e:ff:59:ba:a4:6d:b1:83:d8:
f3:de:31:74:78:6e:ab:a1:ad:1e:a0:0b:02:f7:bc:
99:b9:75:be:f8:2c:5d:f5:8f:7d:56:c4:88:ad:a6:
f5:e2:c1:db:90:d3:cb:06:ae:ce:c0:18:ce:c4:7c:
99:f2:f4:9c:d8:58:31:73:5a:3b:4d:40:89:87:36:
78:6e:d0:05:19:f5:49:e9:ce:7c:6c:38:2a:7a:4f:
9e:65:12:bd:d6:6c:65:65:22:ea:fd:e0:25:ed:92:
36:2a:36:9d:0d:a4:95:f8:f6:80:8b:1a:fa:b2:6f:
1a:2d:37:9d:81:2d:99:ca:41:27:75:6a:d8:b9:42:
ea:25:59:59:f3:ee:c9:bc:ab:28:a4:41:b6:7c:bf:
24:71:4b:a2:e5:9e:a5:20:29:07:1b:9e:a2:1b:d2:
18:cf:c7:6b:62:3b:ff:97:ce:67:cf:6b:27:57:d1:
a3:be:c5:a2:07:eb:31:26:29:01:a7:7a:1b:91:73:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:20:18:CD:B4:7F:BE:F1:A7:0C:45:F5:FA:4F:A0:83:BA:0C:A9
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:6c:10:05:1d:5c:ee:d7:92:bf:fd:44:42:a9:9f:ff:4c:
e8:d7:23:a9:32:0f:47:bf:ec:7e:b9:4a:fa:46:d1:a7:48:57:
66:cf:01:56:c9:04:ab:ba:7e:88:54:71:b2:6d:98:96:44:58:
54:b2:76:12:5b:b1:08:75:6c:89:90:a0:bd:2a:77:3d:7d:8b:
56:1f:f9:9b:ac:7a:78:36:15:21:c1:ad:a6:27:26:65:51:17:
f9:0a:b7:9a:38:52:0b:74:9d:72:b4:8d:9e:b5:e2:e2:ac:88:
c6:32:f9:8e:29:ca:8c:2f:d7:66:5e:96:86:23:de:58:24:b3:
54:d4:4a:50:98:02:e3:ff:f8:93:eb:cb:ed:a2:92:db:83:1e:
36:40:b0:56:1a:1c:9a:11:7b:56:14:d0:df:f8:e5:27:60:fd:
bd:68:c3:d5:25:84:ba:38:5c:0d:28:8d:39:09:c8:3d:1e:42:
c8:0a:95:b4:43:b6:ee:de:93:50:b3:0d:b6:18:0e:ce:2f:40:
92:db:4d:aa:8d:97:60:e0:ef:b4:58:6f:ca:cb:f0:08:ad:d7:
4f:2a:f5:af:2b:62:70:d3:e7:f0:a3:6a:91:cd:2a:62:ee:7b:
7d:87:64:8f:43:1e:c0:da:b8:5c:e1:40:0e:80:d1:c8:71:16:
c8:ef:93:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04lbIJAgooTjq14IfYLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjUwNzI3MDMwMDU2WhcNMjUwNzI4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg3YTI3MjAxOGNkYjQ3ZmJlZjFhNzBjNDVmNWZhNGZhMDgzYmEwY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG/Le0lwN1R/UP1LaDSM6lF/OEcP
DQ1wMCIXIAoVucbF1va/FXde3uwq2AbdGFnJeqQQx3TpnDUKrQFX4cf6fvBe/1m6
pG2xg9jz3jF0eG6roa0eoAsC97yZuXW++Cxd9Y99VsSIrab14sHbkNPLBq7OwBjO
xHyZ8vSc2Fgxc1o7TUCJhzZ4btAFGfVJ6c58bDgqek+eZRK91mxlZSLq/eAl7ZI2
KjadDaSV+PaAixr6sm8aLTedgS2ZykEndWrYuULqJVlZ8+7JvKsopEG2fL8kcUui
5Z6lICkHG56iG9IYz8drYjv/l85nz2snV9GjvsWiB+sxJikBp3obkXMREQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHonIBjNtH++8acMRfX6T6CDugypMB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhtsEAUd
XO7Xkr/9REKpn/9M6NcjqTIPR7/sfrlK+kbRp0hXZs8BVskEq7p+iFRxsm2YlkRY
VLJ2EluxCHVsiZCgvSp3PX2LVh/5m6x6eDYVIcGtpicmZVEX+Qq3mjhSC3SdcrSN
nrXi4qyIxjL5jinKjC/XZl6WhiPeWCSzVNRKUJgC4//4k+vL7aKS24MeNkCwVhoc
mhF7VhTQ3/jlJ2D9vWjD1SWEujhcDSiNOQnIPR5CyAqVtEO27t6TULMNthgOzi9A
kttNqo2XYODvtFhvysvwCK3XTyr1ryticNPn8KNqkc0qYu57fYdkj0MewNq4XOFA
DoDRyHEWyO+TEA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:12:16 2025 by rpki-client