Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: 1/TpObtgvQWq62SW8PJgr7j/lTuEsKTRGykKOI+APcg=
Subject key identifier: 1F:DD:36:3B:F4:D4:30:EE:37:9E:35:9B:B6:93:4F:F1:31:5F:80:6A
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019849D3AE2CE738743CBDEB262D504D6662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: 1dEqxhYBUPIt40Ak3SH5zbwSYlt/v9tAPOkxbqHRR4U=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ae:2c:e7:38:74:3c:bd:eb:26:2d:50:4d:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=1fdd363bf4d430ee379e359bb6934ff1315f806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:b6:a4:eb:3a:37:03:19:48:1f:ce:e5:c5:
70:d5:32:7b:41:77:d4:96:2e:81:27:e2:9c:ce:c6:
99:35:06:a2:b3:35:40:d0:0a:88:7c:d3:0e:3a:21:
64:c0:4a:c6:c7:1e:72:41:46:d9:e0:ca:0c:f2:00:
12:58:04:e5:60:3d:63:a1:fe:19:a6:34:7a:e7:ed:
93:c4:44:45:ca:ca:5f:10:ef:8d:cf:e8:4f:dd:c9:
6e:44:58:23:71:8e:59:e7:52:08:bd:e4:5c:36:b8:
54:a9:2f:4b:9e:ba:ee:36:ad:de:2c:c7:61:92:f6:
22:0f:9d:95:49:43:a2:a1:9b:8e:2b:d8:3a:52:e0:
4f:01:30:3b:02:ee:35:06:7d:9e:1e:35:07:ec:da:
e4:d3:6e:d6:a5:98:67:f7:7e:8e:0d:ae:0d:61:69:
44:07:c7:f8:1c:f8:0d:3b:5f:de:54:0e:ca:58:9e:
40:db:19:6f:8a:67:ac:19:19:bb:23:7b:cb:ab:bb:
0f:96:cd:a8:24:2c:c2:8e:30:72:80:a0:5f:5c:a9:
df:fa:c3:69:fe:70:b2:07:dd:37:4d:06:49:de:02:
3b:db:cc:7b:c2:1b:db:a0:64:f7:28:2e:a5:9b:26:
ba:7f:6c:4a:40:98:86:3d:18:0c:d5:f4:78:b9:29:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:36:3B:F4:D4:30:EE:37:9E:35:9B:B6:93:4F:F1:31:5F:80:6A
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:f5:22:8a:17:f5:4c:26:70:7c:da:25:e0:66:f5:e7:0b:
f8:9c:3a:d7:4c:79:05:01:08:8c:37:48:9f:2d:df:31:d7:6a:
d4:e3:be:3f:6e:f3:ed:a3:de:66:6b:d1:2e:87:09:3b:b4:0d:
8a:df:ed:39:30:ff:16:d6:ba:d4:f6:89:bd:36:5d:8c:82:b1:
7d:7c:85:c1:36:e1:25:2f:03:fb:61:84:3b:bd:63:1b:37:a4:
bd:5d:9f:bb:cb:5b:62:2c:29:62:6c:90:74:d2:2c:74:15:aa:
76:c8:04:14:00:30:db:49:93:ed:2b:9e:cf:46:73:fd:a4:df:
d3:86:9f:5c:66:59:14:f3:fe:00:f7:ab:db:f2:ad:52:93:ac:
f8:4e:35:54:4c:cb:86:d6:c0:aa:8e:05:6f:5b:04:dd:3f:a3:
7c:03:f9:b9:36:b0:11:ff:6f:06:fa:0c:05:28:ea:82:97:9c:
c6:c1:27:08:c6:65:72:30:8b:a5:cd:bc:8a:21:0b:4f:8e:fd:
e9:05:2e:a8:3f:62:69:78:8d:49:f2:b9:a7:1d:e4:ef:8a:6b:
6e:6c:06:f8:13:5f:9d:aa:bf:90:8f:13:99:93:b8:1e:cc:10:
fd:f3:ab:ff:a4:37:8a:da:f5:90:73:b4:77:32:dd:d7:2a:20:
a3:97:e7:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ064s5zh0PL3rJi1QTWZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjUwNzI3MDMwMTA1WhcNMjUwNzI4MDMwMTA1WjAzMTEwLwYDVQQD
EygxZmRkMzYzYmY0ZDQzMGVlMzc5ZTM1OWJiNjkzNGZmMTMxNWY4MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r+2pOs6NwMZSB/O5cVw1TJ7QXfU
li6BJ+KczsaZNQaiszVA0AqIfNMOOiFkwErGxx5yQUbZ4MoM8gASWATlYD1jof4Z
pjR65+2TxERFyspfEO+Nz+hP3cluRFgjcY5Z51IIveRcNrhUqS9LnrruNq3eLMdh
kvYiD52VSUOioZuOK9g6UuBPATA7Au41Bn2eHjUH7Nrk027WpZhn936ODa4NYWlE
B8f4HPgNO1/eVA7KWJ5A2xlvimesGRm7I3vLq7sPls2oJCzCjjBygKBfXKnf+sNp
/nCyB903TQZJ3gI728x7whvboGT3KC6lmya6f2xKQJiGPRgM1fR4uSmQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/dNjv01DDuN541m7aTT/ExX4BqMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaib1IooX
9UwmcHzaJeBm9ecL+Jw610x5BQEIjDdIny3fMddq1OO+P27z7aPeZmvRLocJO7QN
it/tOTD/Fta61PaJvTZdjIKxfXyFwTbhJS8D+2GEO71jGzekvV2fu8tbYiwpYmyQ
dNIsdBWqdsgEFAAw20mT7Suez0Zz/aTf04afXGZZFPP+APer2/KtUpOs+E41VEzL
htbAqo4Fb1sE3T+jfAP5uTawEf9vBvoMBSjqgpecxsEnCMZlcjCLpc28iiELT479
6QUuqD9iaXiNSfK5px3k74prbmwG+BNfnaq/kI8TmZO4HswQ/fOr/6Q3itr1kHO0
dzLd1yogo5fnAg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:33 2025 by rpki-client