Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: ypv0LO5FgvW8BVO1DYfjxeMAIuBXjWXj7DNkHWjFpbE=
Subject key identifier: A7:90:3C:AF:5D:C7:F2:CB:A4:3B:50:24:18:8D:DB:70:4A:76:66:0C
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019A251CC39CFABB8D124631336D67086D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 155B
Signing time: Mon 27 Oct 2025 10:00:33 +0000
Manifest this update: Mon 27 Oct 2025 10:00:33 +0000
Manifest next update: Tue 28 Oct 2025 10:00:33 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: ncXsZC2QDYVwP65t4nMCfmExyDs+Xj6P1Vf3WneVh4A=)
2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c3:9c:fa:bb:8d:12:46:31:33:6d:67:08:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Oct 27 10:00:33 2025 GMT
Not After : Oct 28 10:00:33 2025 GMT
Subject: CN=a7903caf5dc7f2cba43b5024188ddb704a76660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:85:fd:53:a1:e3:0d:71:39:cc:ac:09:4e:
c1:4e:d7:ba:dc:0c:85:81:bc:90:42:aa:19:f3:17:
1f:cc:77:31:01:5c:b6:4e:fc:b5:cb:65:9f:84:c3:
39:9e:08:7b:5a:e1:7c:e8:c2:57:8d:a7:75:2b:80:
c0:f4:84:a4:ff:ac:c7:02:85:43:c7:62:ad:61:de:
f4:98:32:62:d7:f3:4f:97:6e:04:7f:d8:db:4e:5e:
8f:44:e6:0c:4c:5b:f6:25:3a:be:3c:df:39:4b:6b:
e7:bb:be:b6:1f:d3:81:85:8f:db:69:50:8c:61:72:
e2:dc:19:58:1c:40:06:b3:66:5d:49:09:a0:f0:e0:
b2:dc:6a:2a:e8:9a:01:aa:bc:48:69:b7:c2:38:0c:
46:2d:9c:15:98:c8:7d:fe:75:22:93:53:f8:18:7e:
40:2f:49:96:19:fd:fe:ab:0a:ee:50:a7:d7:cd:7f:
94:ec:3a:ab:d3:32:22:cd:8e:ce:30:2d:87:8e:8f:
5f:46:64:c7:5d:3e:18:c9:d9:0b:f4:d3:14:c9:cb:
f8:9e:52:34:c4:04:17:4a:6e:98:93:1a:20:37:7b:
ec:8f:95:e2:6a:ae:c7:88:c6:76:8e:6e:7c:e3:95:
f8:aa:a9:5c:01:98:72:59:ed:13:e8:d3:2e:72:ec:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:3C:AF:5D:C7:F2:CB:A4:3B:50:24:18:8D:DB:70:4A:76:66:0C
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:17:9c:f8:31:2e:b4:55:76:24:26:0f:86:94:48:81:99:
36:eb:2c:36:a6:89:f3:35:0d:ee:8a:7b:87:e6:28:9c:00:22:
64:95:e4:19:d4:4a:a7:b8:54:e0:94:d6:1c:1d:1f:5b:db:04:
66:19:e7:68:77:03:f8:f6:15:88:ad:4e:d3:4f:13:b6:8c:d6:
5e:ca:5c:7a:bd:35:bf:4a:01:fc:25:dc:11:5b:de:af:56:11:
e5:69:39:ea:24:a6:8f:74:81:5e:03:81:f6:89:fb:b7:a1:78:
8c:d9:0c:8b:c3:24:d6:63:c5:74:18:e3:a3:41:56:be:16:93:
38:d9:df:e5:69:24:bb:e8:e0:3a:2e:de:fe:cb:a5:15:25:84:
a9:92:cf:01:7c:5e:13:51:ce:a3:30:5e:be:42:31:65:b6:07:
aa:0b:a4:e1:25:b2:54:f3:c5:80:0b:3f:4e:16:fe:40:65:ae:
38:8f:e1:25:a7:45:3f:c3:da:46:11:9c:ed:fb:55:3e:b4:7a:
22:1f:92:ac:c3:97:7c:3a:76:92:e9:86:5d:37:05:d8:02:8d:
c3:b5:ef:8d:e3:57:7c:79:a4:9c:71:c2:5d:dd:8a:4b:74:e4:
61:f0:ef:53:bf:e2:51:ad:7b:1e:89:1d:d4:db:6d:c0:a5:fe:
3d:09:db:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHMOc+ruNEkYxM21nCG0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4
ZDM0ZDYwHhcNMjUxMDI3MTAwMDMzWhcNMjUxMDI4MTAwMDMzWjAzMTEwLwYDVQQD
EyhhNzkwM2NhZjVkYzdmMmNiYTQzYjUwMjQxODhkZGI3MDRhNzY2NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5qF/VOh4w1xOcysCU7BTte63AyF
gbyQQqoZ8xcfzHcxAVy2Tvy1y2WfhMM5ngh7WuF86MJXjad1K4DA9ISk/6zHAoVD
x2KtYd70mDJi1/NPl24Ef9jbTl6PROYMTFv2JTq+PN85S2vnu762H9OBhY/baVCM
YXLi3BlYHEAGs2ZdSQmg8OCy3Goq6JoBqrxIabfCOAxGLZwVmMh9/nUik1P4GH5A
L0mWGf3+qwruUKfXzX+U7Dqr0zIizY7OMC2Hjo9fRmTHXT4YydkL9NMUycv4nlI0
xAQXSm6YkxogN3vsj5Xiaq7HiMZ2jm5845X4qqlcAZhyWe0T6NMucuzl8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeQPK9dx/LLpDtQJBiN23BKdmYMMB8GA1UdIwQY
MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt
MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw
LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDYXnPgx
LrRVdiQmD4aUSIGZNussNqaJ8zUN7op7h+YonAAiZJXkGdRKp7hU4JTWHB0fW9sE
ZhnnaHcD+PYViK1O008TtozWXspcer01v0oB/CXcEVver1YR5Wk56iSmj3SBXgOB
9on7t6F4jNkMi8Mk1mPFdBjjo0FWvhaTONnf5Wkku+jgOi7e/sulFSWEqZLPAXxe
E1HOozBevkIxZbYHqguk4SWyVPPFgAs/Thb+QGWuOI/hJadFP8PaRhGc7ftVPrR6
Ih+SrMOXfDp2kumGXTcF2AKNw7XvjeNXfHmknHHCXd2KS3TkYfDvU7/iUa17Hokd
1NttwKX+PQnbLA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:25 2025 by rpki-client