Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: 9AcBbtAje8sh7hCceiDwWO6aryvZeeG2FTkotIp2zF0=
Subject key identifier: 5D:13:4F:6F:57:FA:7A:D5:1A:17:F8:D7:B9:07:AE:F4:A1:09:FE:82
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0198C791E8181A7EC70C507B7376EF7FA858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 165E
Signing time: Wed 20 Aug 2025 13:01:24 +0000
Manifest this update: Wed 20 Aug 2025 13:01:24 +0000
Manifest next update: Thu 21 Aug 2025 13:01:24 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: K6upU/5byv8u2kLpuUfIyqG5ikgJayBeUAIhdvKvaDI=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:91:e8:18:1a:7e:c7:0c:50:7b:73:76:ef:7f:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Aug 20 13:01:24 2025 GMT
Not After : Aug 21 13:01:24 2025 GMT
Subject: CN=5d134f6f57fa7ad51a17f8d7b907aef4a109fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:fb:92:d9:e6:11:22:32:58:20:03:ce:c9:
63:fe:71:bc:3b:cd:51:94:b0:9d:47:4f:a4:c7:fc:
27:d6:d1:c0:47:dc:49:ab:0d:75:96:4b:b7:ac:36:
5a:77:a3:50:eb:f6:a9:c5:8c:ad:b9:73:83:df:58:
ee:23:f9:f4:bc:5e:49:7a:c2:6d:d7:72:7a:a6:26:
6b:27:d9:9a:c4:96:27:5d:ec:82:23:3e:bb:f6:05:
26:9d:83:cd:b2:e1:5d:18:44:cd:ae:32:12:b4:1f:
a8:e4:41:56:c0:e5:2d:7a:61:e4:7a:2f:74:e6:ff:
93:fa:80:3c:1d:c5:86:0c:43:a3:81:94:15:f9:b7:
00:91:e3:1f:33:58:14:71:27:4c:2a:b5:06:b8:48:
7a:3b:63:fc:74:75:e3:8f:f7:e4:6a:96:5e:24:75:
64:3e:08:ab:9d:15:37:45:eb:6d:2d:c7:ee:e3:90:
d3:c3:36:6b:d8:d8:ef:86:a1:4b:6a:ab:37:62:b4:
5b:8a:b6:77:21:89:eb:12:cc:6e:23:83:2d:d6:84:
0c:b7:ea:09:ab:fe:51:ff:75:5c:de:ca:8f:64:00:
d5:2d:61:ab:55:2e:d5:f3:66:b8:50:bb:2b:0d:c9:
24:f3:ff:0c:db:28:06:04:1c:e6:8f:6e:70:ba:51:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:4F:6F:57:FA:7A:D5:1A:17:F8:D7:B9:07:AE:F4:A1:09:FE:82
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:7b:15:bf:17:eb:fb:93:21:e5:c7:c0:44:ed:a5:c0:18:
c3:69:dd:a0:fe:b1:be:ec:cf:e1:e0:c9:10:e4:d3:e5:98:64:
03:b7:e7:90:53:48:66:c7:6e:95:76:a6:e1:de:d3:aa:c8:7d:
3a:b8:af:f7:5f:29:d7:4f:45:48:4f:ca:72:51:89:6b:9c:88:
69:b3:d5:2d:cd:b4:d5:60:74:1e:11:13:81:78:e2:65:2c:77:
01:5e:1d:22:41:d4:c4:8d:b1:05:c9:84:48:02:23:f7:d2:57:
e2:23:83:f9:22:f8:47:2d:7b:f8:5d:e4:a9:e4:bb:c1:1a:4a:
25:fd:f5:72:67:d8:99:b3:6c:fa:2e:26:8a:cf:9f:9d:0a:72:
c2:6a:24:28:de:60:29:6b:a5:2f:fb:aa:77:19:e8:92:a2:3a:
c3:42:0b:09:df:0d:c8:dd:1e:65:af:a5:9f:33:c5:8b:72:9c:
bc:80:ac:ac:c8:07:86:2e:88:58:8d:56:db:15:8f:b9:81:91:
49:97:9f:40:02:f5:69:64:f7:8a:b9:1e:b5:5b:b6:3b:18:4a:
34:19:f9:af:91:45:4e:a7:a0:c7:4c:f7:24:68:ed:48:73:55:
f4:56:10:c9:a2:bb:ae:25:08:ea:96:8e:c0:2d:b7:26:13:db:
cc:c9:53:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHkegYGn7HDFB7c3bvf6hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk
MzRlNTEwHhcNMjUwODIwMTMwMTI0WhcNMjUwODIxMTMwMTI0WjAzMTEwLwYDVQQD
Eyg1ZDEzNGY2ZjU3ZmE3YWQ1MWExN2Y4ZDdiOTA3YWVmNGExMDlmZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRH7ktnmESIyWCADzslj/nG8O81R
lLCdR0+kx/wn1tHAR9xJqw11lku3rDZad6NQ6/apxYytuXOD31juI/n0vF5JesJt
13J6piZrJ9maxJYnXeyCIz679gUmnYPNsuFdGETNrjIStB+o5EFWwOUtemHkei90
5v+T+oA8HcWGDEOjgZQV+bcAkeMfM1gUcSdMKrUGuEh6O2P8dHXjj/fkapZeJHVk
PgirnRU3RettLcfu45DTwzZr2NjvhqFLaqs3YrRbirZ3IYnrEsxuI4Mt1oQMt+oJ
q/5R/3Vc3sqPZADVLWGrVS7V82a4ULsrDckk8/8M2ygGBBzmj25wulHn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0TT29X+nrVGhf417kHrvShCf6CMB8GA1UdIwQY
MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt
NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5
LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7t7Fb8X
6/uTIeXHwETtpcAYw2ndoP6xvuzP4eDJEOTT5ZhkA7fnkFNIZsdulXam4d7Tqsh9
Oriv918p109FSE/KclGJa5yIabPVLc201WB0HhETgXjiZSx3AV4dIkHUxI2xBcmE
SAIj99JX4iOD+SL4Ry17+F3kqeS7wRpKJf31cmfYmbNs+i4mis+fnQpywmokKN5g
KWulL/uqdxnokqI6w0ILCd8NyN0eZa+lnzPFi3KcvICsrMgHhi6IWI1W2xWPuYGR
SZefQAL1aWT3irketVu2OxhKNBn5r5FFTqegx0z3JGjtSHNV9FYQyaK7riUI6paO
wC23JhPbzMlT8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:59 2025 by rpki-client