
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier: SyY2YJOih+R+f89vjyzVQgrMIJ0ncH1dz0LrC4aX1hg=
Subject key identifier: A1:DF:73:FB:2F:86:8C:FD:28:84:C3:7C:62:3A:6D:51:A4:EE:93:DB
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019829360F87169E091AF5E13A1B70E1ACB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number: 14
Signing time: Sun 20 Jul 2025 19:01:05 +0000
Manifest this update: Sun 20 Jul 2025 19:01:05 +0000
Manifest next update: Mon 21 Jul 2025 19:01:05 +0000
Files and hashes: 1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: Z7rjilOOgNwcS600uhM/X7nmwW1yRgtc18zs7he5WmU=)
2: YZaUjQlCbflfEUbT2gpPLo1ny_U.roa (hash: +SwgIn7dK0HQ0r746yPpM+Y8qQkIQQdi0ZZhu/E+a8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:36:0f:87:16:9e:09:1a:f5:e1:3a:1b:70:e1:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Jul 20 19:01:05 2025 GMT
Not After : Jul 21 19:01:05 2025 GMT
Subject: CN=a1df73fb2f868cfd2884c37c623a6d51a4ee93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:0c:14:4f:61:01:a2:14:09:c7:2b:fc:d2:
bf:d7:66:42:bf:2b:27:0d:19:fa:da:06:91:eb:82:
bb:a3:6f:8e:75:16:fb:65:45:46:37:c7:9f:f5:8d:
1e:98:6c:e1:64:c9:f7:ad:a8:24:70:1f:c9:b2:a0:
04:1e:73:da:0e:7b:e8:5d:c0:66:d6:b5:86:02:7c:
d0:32:70:a9:64:23:90:e8:33:7b:f8:77:4c:2e:68:
1b:f4:f2:fd:a9:1f:b0:e0:8f:d9:a9:11:7e:35:ba:
ef:6c:3c:e2:91:90:e3:6f:ba:c5:35:dc:16:d9:56:
e0:a8:2d:4e:2e:5c:5b:6c:0a:db:5e:d4:b3:8e:2c:
31:35:86:8c:45:60:82:d7:a6:8b:5a:c0:7f:ea:cf:
c7:29:6e:fc:a9:53:ba:9e:60:77:f6:40:3b:b2:76:
9a:22:41:ed:28:c7:9b:b5:52:cc:8b:fd:3f:78:a9:
7e:92:30:c4:94:81:83:68:b5:d1:04:c3:89:26:f2:
51:4b:9f:b6:c2:e6:3c:89:a0:e5:bf:ce:a6:61:bd:
5c:b9:d9:21:99:38:0e:02:e3:ad:22:6d:cb:ed:19:
38:90:4e:9c:4f:d5:50:0d:7d:2e:73:09:fc:38:19:
3c:5f:99:40:4f:90:a4:85:8b:9d:c3:dc:44:29:f5:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:73:FB:2F:86:8C:FD:28:84:C3:7C:62:3A:6D:51:A4:EE:93:DB
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:c4:1e:7e:7d:d2:55:88:f9:c1:93:b0:4c:1b:5b:ea:bc:
f4:01:c4:40:eb:3b:ec:ba:6d:b3:23:e3:09:83:7a:a8:15:16:
c0:b9:bc:41:76:1f:a6:9b:52:7f:5b:c4:5e:a8:23:43:dd:7f:
0f:d4:48:62:51:b6:5d:7e:bf:b4:a9:8b:b8:c2:90:37:7e:e9:
d2:e5:80:6c:4f:5c:22:58:aa:41:08:28:d5:fa:d2:24:75:93:
d7:ab:3c:e1:2d:47:07:10:8d:ff:58:c5:65:2a:03:25:ad:9c:
e0:0c:13:5c:6a:a7:9f:1b:bd:2f:8b:18:b6:28:53:44:fd:84:
10:6e:72:03:2e:5a:4d:52:92:2b:2c:00:4a:11:da:43:1a:28:
c8:d5:d0:79:61:bb:7d:ce:42:38:0c:fa:a4:b0:96:2e:b2:35:
75:03:8b:da:8b:c1:46:5a:a9:d4:f1:ac:cf:82:96:35:4b:b8:
b5:ba:9e:6f:72:5d:a5:fc:49:2d:cd:c2:5d:54:40:ff:46:95:
6d:aa:f3:d4:94:a5:58:a4:84:21:e6:4b:fe:dd:b6:2f:c0:f3:
97:48:09:7f:a1:16:21:9b:a4:88:77:80:b0:3e:b0:6d:94:7f:
9a:0f:f7:99:23:df:d6:4e:3a:09:d0:7b:d8:f4:be:a5:c2:01:
50:96:b0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgpNg+HFp4JGvXhOhtw4aywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy
MzZhMDYwHhcNMjUwNzIwMTkwMTA1WhcNMjUwNzIxMTkwMTA1WjAzMTEwLwYDVQQD
EyhhMWRmNzNmYjJmODY4Y2ZkMjg4NGMzN2M2MjNhNmQ1MWE0ZWU5M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0gMFE9hAaIUCccr/NK/12ZCvysn
DRn62gaR64K7o2+OdRb7ZUVGN8ef9Y0emGzhZMn3ragkcB/JsqAEHnPaDnvoXcBm
1rWGAnzQMnCpZCOQ6DN7+HdMLmgb9PL9qR+w4I/ZqRF+NbrvbDzikZDjb7rFNdwW
2VbgqC1OLlxbbArbXtSzjiwxNYaMRWCC16aLWsB/6s/HKW78qVO6nmB39kA7snaa
IkHtKMebtVLMi/0/eKl+kjDElIGDaLXRBMOJJvJRS5+2wuY8iaDlv86mYb1cudkh
mTgOAuOtIm3L7Rk4kE6cT9VQDX0ucwn8OBk8X5lAT5CkhYudw9xEKfVdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHfc/svhoz9KITDfGI6bVGk7pPbMB8GA1UdIwQY
MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt
NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl
LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyrEHn59
0lWI+cGTsEwbW+q89AHEQOs77LptsyPjCYN6qBUWwLm8QXYfpptSf1vEXqgjQ91/
D9RIYlG2XX6/tKmLuMKQN37p0uWAbE9cIliqQQgo1frSJHWT16s84S1HBxCN/1jF
ZSoDJa2c4AwTXGqnnxu9L4sYtihTRP2EEG5yAy5aTVKSKywAShHaQxooyNXQeWG7
fc5COAz6pLCWLrI1dQOL2ovBRlqp1PGsz4KWNUu4tbqeb3JdpfxJLc3CXVRA/0aV
barz1JSlWKSEIeZL/t22L8Dzl0gJf6EWIZukiHeAsD6wbZR/mg/3mSPf1k46CdB7
2PS+pcIBUJawUg==
-----END CERTIFICATE-----
Generated at Mon Jul 21 00:19:52 2025 by rpki-client