Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: kA0AtR27GObqvUkTvW6Zjvm9u4l7bLhI4kZsw00+XRE=
Subject key identifier: 84:EE:E8:20:C4:BD:55:83:4E:D4:F6:2F:11:A4:47:31:72:A5:FE:A9
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0199228CED3F1C2BA338F52A247E94FC1E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: TJU4rBJTT5hJGDx9VAJQJWZOllbjAJlLo9jskJgZ6BU=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ed:3f:1c:2b:a3:38:f5:2a:24:7e:94:fc:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=84eee820c4bd55834ed4f62f11a4473172a5fea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:c4:45:38:73:fa:64:dc:9c:59:51:12:73:
00:21:02:35:6f:c8:5b:5a:5b:a0:b4:8b:56:c7:f3:
03:16:c1:2b:1a:73:61:e9:b3:ce:de:f8:cd:25:8f:
d4:99:61:ed:b0:d1:b4:72:63:d0:f6:62:62:17:da:
a4:f0:6c:ba:f6:19:04:a1:e8:00:a9:26:97:b1:e3:
3a:a2:e8:bb:27:cb:82:cf:33:e6:67:8d:f5:d6:74:
a6:76:e2:be:36:56:6a:68:d4:59:27:4d:59:77:88:
ee:59:6d:38:e1:70:0b:5e:88:ac:2c:3b:48:7b:66:
da:30:e6:a0:03:fc:95:cb:8a:e6:cc:9e:35:8c:b8:
e1:ed:ae:64:f2:36:b0:d8:19:c7:6e:e4:46:15:b6:
ee:03:37:14:31:ca:42:4f:33:d9:0c:54:59:a9:79:
ec:c7:d6:47:2d:8d:34:68:1f:ca:b8:7e:05:eb:58:
d2:7b:a5:45:0b:f0:10:1c:44:89:11:d9:5e:b8:c1:
be:28:05:0e:86:40:d8:63:e9:7c:e4:f0:a1:0c:69:
b7:4d:06:b5:c9:17:42:03:04:42:b9:d5:a0:77:87:
ed:36:85:45:eb:b6:9e:1b:0c:f4:ca:30:e4:80:50:
ec:ab:c2:d4:f4:04:52:43:b2:6d:66:60:28:1d:bc:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:E8:20:C4:BD:55:83:4E:D4:F6:2F:11:A4:47:31:72:A5:FE:A9
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:cb:fe:e0:26:6e:f2:f9:e6:f5:76:8a:a8:b0:e5:80:53:
b2:a8:44:9d:16:19:01:bc:e9:37:1a:71:74:27:3f:d2:6d:66:
a0:ed:9b:9f:b2:41:9d:e0:09:e8:f1:5d:b6:d4:1d:98:8b:89:
71:65:20:0e:6b:aa:d1:40:eb:62:04:4d:59:56:6e:64:d6:c0:
42:24:c0:df:8f:cb:f9:9d:41:8a:db:79:a1:e4:7e:bb:89:24:
23:a7:8b:39:bb:36:3d:17:5a:f3:ae:44:2f:32:1f:25:04:ba:
a6:15:d2:6b:73:44:f0:7f:dc:9b:71:c4:6a:f6:64:cc:7c:ef:
87:0c:32:24:86:de:ac:f9:bd:16:4a:57:ba:0c:69:42:7c:d3:
cd:13:3c:af:7f:45:ed:bf:68:d0:37:f3:5e:b7:a8:ce:53:74:
45:f8:55:54:01:4c:b1:d5:36:68:6a:47:64:7f:9e:2b:1f:b3:
1a:74:96:4e:d5:ac:e0:1e:78:16:b7:23:e2:a1:74:ac:d5:28:
6c:be:5d:40:c8:b2:68:94:2f:a8:40:b4:7a:d1:1c:df:7b:8c:
3f:78:09:5d:a4:8e:c8:f8:0e:9f:f9:b0:12:df:f1:6b:6a:92:
6f:10:a9:32:3c:90:49:66:92:d7:b8:48:1e:04:b5:1f:ca:67:
fa:2e:1c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijO0/HCujOPUqJH6U/B6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjUwOTA3MDUwMTI1WhcNMjUwOTA4MDUwMTI1WjAzMTEwLwYDVQQD
Eyg4NGVlZTgyMGM0YmQ1NTgzNGVkNGY2MmYxMWE0NDczMTcyYTVmZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1TERThz+mTcnFlREnMAIQI1b8hb
WlugtItWx/MDFsErGnNh6bPO3vjNJY/UmWHtsNG0cmPQ9mJiF9qk8Gy69hkEoegA
qSaXseM6oui7J8uCzzPmZ4311nSmduK+NlZqaNRZJ01Zd4juWW044XALXoisLDtI
e2baMOagA/yVy4rmzJ41jLjh7a5k8jaw2BnHbuRGFbbuAzcUMcpCTzPZDFRZqXns
x9ZHLY00aB/KuH4F61jSe6VFC/AQHESJEdleuMG+KAUOhkDYY+l85PChDGm3TQa1
yRdCAwRCudWgd4ftNoVF67aeGwz0yjDkgFDsq8LU9ARSQ7JtZmAoHbzNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITu6CDEvVWDTtT2LxGkRzFypf6pMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTLL/uAm
bvL55vV2iqiw5YBTsqhEnRYZAbzpNxpxdCc/0m1moO2bn7JBneAJ6PFdttQdmIuJ
cWUgDmuq0UDrYgRNWVZuZNbAQiTA34/L+Z1Bitt5oeR+u4kkI6eLObs2PRda865E
LzIfJQS6phXSa3NE8H/cm3HEavZkzHzvhwwyJIberPm9FkpXugxpQnzTzRM8r39F
7b9o0DfzXreozlN0RfhVVAFMsdU2aGpHZH+eKx+zGnSWTtWs4B54Frcj4qF0rNUo
bL5dQMiyaJQvqEC0etEc33uMP3gJXaSOyPgOn/mwEt/xa2qSbxCpMjyQSWaS17hI
HgS1H8pn+i4c0w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:31 2025 by rpki-client