Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: 7mrqdl29viJNfsB87fvtMRdYfKn9MdpBrGPbYjqmXQE=
Subject key identifier: C0:3E:2B:B0:23:84:96:03:87:67:81:1D:8A:65:5A:A1:54:14:BB:37
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019922C360E7F36325DFB7253BA923FEE314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 058D
Signing time: Sun 07 Sep 2025 06:00:53 +0000
Manifest this update: Sun 07 Sep 2025 06:00:53 +0000
Manifest next update: Mon 08 Sep 2025 06:00:53 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: ifdRUJoD2ARBFRGNgy2FGYzH57xckO0l1JFw1sAkwvU=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:60:e7:f3:63:25:df:b7:25:3b:a9:23:fe:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Sep 7 06:00:53 2025 GMT
Not After : Sep 8 06:00:53 2025 GMT
Subject: CN=c03e2bb0238496038767811d8a655aa15414bb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:d2:55:93:28:75:a7:13:b1:24:9a:dd:ee:
bd:1d:c5:f1:84:8e:da:5c:bc:f9:a8:39:14:11:14:
af:b5:ef:68:39:ec:67:62:2e:76:f9:1e:03:9e:ff:
39:d4:e7:a5:56:57:9f:7d:1a:14:c7:aa:2e:43:28:
d2:00:9a:e5:ec:83:c0:e2:0d:1c:fb:0d:ad:20:22:
30:85:10:55:d2:02:c4:06:6c:8e:6b:9c:3d:f4:cd:
d1:ee:f3:5f:54:aa:57:6e:1e:d7:5d:96:5a:56:1b:
e9:ce:5d:04:4b:19:b2:3f:52:46:43:6c:73:06:7f:
b1:5c:22:60:9f:0c:22:b9:92:26:28:6c:41:08:5e:
47:e5:16:fb:7b:40:b2:22:7d:93:33:97:83:0d:56:
a2:a0:29:59:db:24:6f:a6:99:5c:d0:83:ec:fd:69:
4c:9c:67:52:e3:cf:8f:94:89:ff:4f:12:92:32:f4:
a7:a2:cd:ee:b9:94:7c:1d:86:4e:46:a7:ef:02:9b:
e4:f4:09:c3:e6:bf:92:ab:67:4c:49:79:23:cf:ef:
0f:a1:b6:a7:76:03:b0:9b:55:4f:3c:41:65:e8:28:
95:88:68:7c:39:79:e9:f8:67:1a:36:fd:a5:82:37:
3d:10:a4:9a:65:21:68:04:cb:95:de:35:fb:ce:57:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:2B:B0:23:84:96:03:87:67:81:1D:8A:65:5A:A1:54:14:BB:37
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:4a:57:82:9f:70:da:21:b3:90:e0:ec:5c:14:d2:97:f3:
21:d6:15:91:0f:7b:d1:59:46:37:fc:0c:8d:80:de:fe:c2:c2:
ea:5f:cc:82:0f:20:6c:f7:3c:40:60:d6:f8:cc:34:a3:36:b9:
ad:62:d4:98:3c:83:0a:9a:81:89:65:83:b9:53:6b:ae:52:f1:
ad:45:9f:96:e8:c5:f0:bd:dc:00:d4:e6:92:1c:72:33:33:23:
b7:af:e7:87:46:e8:d5:03:60:99:ce:7b:7e:55:51:44:1e:be:
44:43:50:7c:f1:ce:37:8e:b7:8f:40:ed:c2:f3:30:91:7a:e5:
a8:7b:e4:90:e5:2e:3d:e8:23:fd:99:25:26:f5:f5:e7:a7:09:
2e:83:ef:39:14:de:f4:68:97:f7:66:48:d6:22:b8:ca:e6:13:
0d:aa:87:74:e0:db:f3:11:ff:eb:a4:fc:d2:54:d2:52:12:c2:
fb:d7:00:68:1c:30:e1:f4:1e:4e:40:e3:a2:e4:b8:9f:05:4d:
8b:90:38:21:ac:48:bc:85:88:58:1c:dd:77:92:cb:c1:22:60:
18:10:32:e2:97:02:0d:f4:da:7e:71:88:63:73:8a:32:21:3d:
77:83:3c:c3:fc:48:ef:2b:6b:2d:4e:2b:d6:ac:d2:c5:f5:0f:
5c:4a:b2:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw2Dn82Ml37clO6kj/uMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUwOTA3MDYwMDUzWhcNMjUwOTA4MDYwMDUzWjAzMTEwLwYDVQQD
EyhjMDNlMmJiMDIzODQ5NjAzODc2NzgxMWQ4YTY1NWFhMTU0MTRiYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLSVZModacTsSSa3e69HcXxhI7a
XLz5qDkUERSvte9oOexnYi52+R4Dnv851OelVleffRoUx6ouQyjSAJrl7IPA4g0c
+w2tICIwhRBV0gLEBmyOa5w99M3R7vNfVKpXbh7XXZZaVhvpzl0ESxmyP1JGQ2xz
Bn+xXCJgnwwiuZImKGxBCF5H5Rb7e0CyIn2TM5eDDVaioClZ2yRvpplc0IPs/WlM
nGdS48+PlIn/TxKSMvSnos3uuZR8HYZORqfvApvk9AnD5r+Sq2dMSXkjz+8Poban
dgOwm1VPPEFl6CiViGh8OXnp+GcaNv2lgjc9EKSaZSFoBMuV3jX7zldUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA+K7AjhJYDh2eBHYplWqFUFLs3MB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/FKV4Kf
cNohs5Dg7FwU0pfzIdYVkQ970VlGN/wMjYDe/sLC6l/Mgg8gbPc8QGDW+Mw0oza5
rWLUmDyDCpqBiWWDuVNrrlLxrUWflujF8L3cANTmkhxyMzMjt6/nh0bo1QNgmc57
flVRRB6+RENQfPHON463j0DtwvMwkXrlqHvkkOUuPegj/ZklJvX156cJLoPvORTe
9GiX92ZI1iK4yuYTDaqHdODb8xH/66T80lTSUhLC+9cAaBww4fQeTkDjouS4nwVN
i5A4IaxIvIWIWBzdd5LLwSJgGBAy4pcCDfTafnGIY3OKMiE9d4M8w/xI7ytrLU4r
1qzSxfUPXEqyqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:39 2025 by rpki-client