
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: KH7BJP3gaOfKjlo/Hz42aNyUxBzm+i8TwS5DkUf6jXw=
Subject key identifier: C2:50:F5:FB:9C:B7:0D:98:52:8F:BC:CD:58:20:7A:4D:B0:10:B7:2E
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0198477731D3883831A4F8B2E67225EB5226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0C6B
Signing time: Sat 26 Jul 2025 16:00:50 +0000
Manifest this update: Sat 26 Jul 2025 16:00:50 +0000
Manifest next update: Sun 27 Jul 2025 16:00:50 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: 5welN4FYXKPyT+8AEaliqQvxN5g7Hhab7Vi3P+kwp1I=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:31:d3:88:38:31:a4:f8:b2:e6:72:25:eb:52:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jul 26 16:00:50 2025 GMT
Not After : Jul 27 16:00:50 2025 GMT
Subject: CN=c250f5fb9cb70d98528fbccd58207a4db010b72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:9d:7e:94:a2:2b:c3:57:57:7e:35:d5:02:
e5:33:9d:61:49:65:68:d1:6e:1d:1a:af:cd:fe:2f:
e4:17:33:1e:9d:ce:91:d9:3d:16:92:24:db:a2:61:
0b:b6:99:3e:d8:38:42:d9:f4:21:25:3e:9f:22:ad:
60:1e:ba:54:f6:71:34:1e:60:ad:24:aa:8c:8b:7a:
4b:02:22:a1:ec:89:a2:0a:f5:2d:ab:4c:54:db:91:
21:11:37:68:b9:ba:a0:1c:53:5e:4f:4b:d2:03:f7:
e7:c5:2f:71:98:b0:fd:7a:07:af:9b:9f:6c:b4:0d:
39:ad:e4:36:0c:92:3e:6d:44:8f:ce:a8:8b:3e:12:
fd:0f:67:d1:13:5d:51:04:b2:20:60:67:3e:ea:cf:
5c:d0:fd:d1:ae:3b:ae:8f:a2:0c:74:45:80:67:22:
b4:55:78:6d:ba:5f:69:c7:e6:2c:13:9a:e5:71:d8:
2a:2a:2f:bc:a1:46:5d:e5:64:69:5e:6d:1e:87:a0:
b0:ae:48:57:15:16:9e:ce:5f:0b:8b:e7:13:38:b6:
00:d2:3b:60:3c:65:05:17:16:03:5c:24:e8:e6:2f:
c4:d2:cc:b6:78:55:a9:f4:a4:12:b9:c9:ae:ea:41:
ce:e0:de:bf:0a:65:9a:bd:6f:ed:31:6c:95:3a:e9:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:50:F5:FB:9C:B7:0D:98:52:8F:BC:CD:58:20:7A:4D:B0:10:B7:2E
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:87:aa:82:be:e2:1b:7a:13:29:09:46:28:be:73:df:1f:
31:76:ad:17:b0:ff:f9:ba:d1:e4:86:82:cf:43:81:54:df:04:
72:3e:e8:84:c1:1a:50:a4:db:82:af:2e:a6:e8:95:ac:65:88:
97:2e:91:ca:5b:c5:5d:7a:dc:43:c5:48:d2:05:b2:e8:d5:62:
d2:0a:6f:80:37:1b:4d:71:8d:86:33:22:a8:05:f1:53:2b:ed:
67:ee:52:ae:2e:2d:45:cc:3a:9d:86:b7:31:e1:34:73:4c:0f:
42:ed:50:28:b9:2b:1c:a0:30:ce:51:62:12:f4:09:e4:ce:c9:
ad:40:68:ed:93:27:e9:66:c1:6c:26:51:2f:ad:3e:ad:29:dd:
1f:08:87:3b:f2:a9:f5:a8:08:6b:6e:46:d4:1f:00:b5:82:d6:
95:ac:2a:7a:5d:df:8a:b6:1e:5b:76:76:0a:54:c8:07:93:81:
67:9f:8b:2c:5f:e1:72:ab:de:ef:fc:ee:77:be:62:1a:a4:6d:
a8:c5:be:7b:52:7a:85:4b:2d:9d:56:04:7b:75:b0:06:54:f9:
0b:e4:be:10:18:90:40:fb:f5:48:ec:9e:e6:34:bf:21:5b:49:
69:cd:d3:93:b3:f6:fc:ff:fe:12:46:58:2f:96:f7:03:b4:e5:
9b:ee:d1:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdzHTiDgxpPiy5nIl61ImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjUwNzI2MTYwMDUwWhcNMjUwNzI3MTYwMDUwWjAzMTEwLwYDVQQD
EyhjMjUwZjVmYjljYjcwZDk4NTI4ZmJjY2Q1ODIwN2E0ZGIwMTBiNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeedfpSiK8NXV3411QLlM51hSWVo
0W4dGq/N/i/kFzMenc6R2T0WkiTbomELtpk+2DhC2fQhJT6fIq1gHrpU9nE0HmCt
JKqMi3pLAiKh7ImiCvUtq0xU25EhETdoubqgHFNeT0vSA/fnxS9xmLD9egevm59s
tA05reQ2DJI+bUSPzqiLPhL9D2fRE11RBLIgYGc+6s9c0P3Rrjuuj6IMdEWAZyK0
VXhtul9px+YsE5rlcdgqKi+8oUZd5WRpXm0eh6CwrkhXFRaezl8Li+cTOLYA0jtg
PGUFFxYDXCTo5i/E0sy2eFWp9KQSucmu6kHO4N6/CmWavW/tMWyVOuksFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJQ9fuctw2YUo+8zVggek2wELcuMB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ+HqoK+
4ht6EykJRii+c98fMXatF7D/+brR5IaCz0OBVN8Ecj7ohMEaUKTbgq8upuiVrGWI
ly6RylvFXXrcQ8VI0gWy6NVi0gpvgDcbTXGNhjMiqAXxUyvtZ+5Sri4tRcw6nYa3
MeE0c0wPQu1QKLkrHKAwzlFiEvQJ5M7JrUBo7ZMn6WbBbCZRL60+rSndHwiHO/Kp
9agIa25G1B8AtYLWlawqel3firYeW3Z2ClTIB5OBZ5+LLF/hcqve7/zud75iGqRt
qMW+e1J6hUstnVYEe3WwBlT5C+S+EBiQQPv1SOye5jS/IVtJac3Tk7P2/P/+EkZY
L5b3A7Tlm+7Rcw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:53 2025 by rpki-client