Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: onM6WpVU+VAbq6tsrWdoldqD67HmxpuqS//sjFhCMI4=
Subject key identifier: 47:73:D5:92:C2:E9:79:1E:16:A4:ED:35:E6:8E:8E:F0:62:B9:A7:4E
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019923D61C5A7103D305461B9DC0B93AFBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 11:00:58 +0000
Manifest this update: Sun 07 Sep 2025 11:00:58 +0000
Manifest next update: Mon 08 Sep 2025 11:00:58 +0000
Files and hashes: 1: 1HJjsYIKgn5m4aKZWr3wynalRwQ.roa (hash: 4AW+T8DVNHH/qCqGZo07n9kC0wNSFK9esxUBxaOybzo=)
2: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: XHHH3hdKQIHYHpn9TMai60Q7DW9zpg6ycp2xXYbHNd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:1c:5a:71:03:d3:05:46:1b:9d:c0:b9:3a:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Sep 7 11:00:58 2025 GMT
Not After : Sep 8 11:00:58 2025 GMT
Subject: CN=4773d592c2e9791e16a4ed35e68e8ef062b9a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:85:d8:25:da:73:78:0b:ee:b4:6e:99:30:
4b:e0:47:db:93:5a:e8:72:3e:be:5c:2d:d7:af:7f:
39:35:13:f2:ac:95:7e:9a:70:97:6a:5b:fc:99:c7:
b9:f3:f2:be:21:a3:84:1c:92:09:80:50:10:3c:0e:
0f:e2:34:85:86:3e:26:7b:3c:0e:49:70:87:3f:27:
0e:e7:e8:9e:5d:e3:57:43:45:b8:52:c5:8b:85:f8:
fe:eb:39:d8:bb:f4:6e:c6:c7:df:6c:9b:e2:b6:74:
8d:12:20:c0:c4:b4:b7:63:c4:1c:78:c0:8f:9e:fe:
4f:1d:8b:03:b0:67:a9:b1:b1:44:02:ad:8f:af:f7:
06:2f:0b:fa:ae:4a:4e:59:e4:a2:d7:ed:8f:d7:90:
0a:a9:85:cf:f7:bf:3f:0e:d6:a4:dc:46:dc:d2:0b:
5f:1e:d6:7d:e1:54:f3:c1:44:cf:f0:b4:41:af:2e:
39:8a:14:db:50:39:4e:00:6b:ec:69:93:02:25:f9:
78:e4:12:6d:8f:db:04:f3:1e:47:de:e7:ca:9f:8f:
1c:d9:ff:73:de:ff:02:fe:16:05:af:23:0e:7b:de:
a4:b0:b0:33:4f:23:4e:06:20:16:00:9d:89:89:04:
b8:b1:c6:47:43:82:a1:a9:03:67:db:fd:d5:79:d8:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:D5:92:C2:E9:79:1E:16:A4:ED:35:E6:8E:8E:F0:62:B9:A7:4E
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:34:2c:46:24:3d:a9:57:75:9a:15:c2:12:89:f6:da:86:
a1:e7:e5:ae:f6:99:e4:df:c4:ac:6e:b8:bf:49:c8:d6:f3:47:
f1:4d:ce:86:80:99:15:47:70:f8:ef:29:b7:4f:a4:54:6a:31:
80:20:c6:8f:a8:9f:28:dc:05:ac:dc:9d:ed:e2:01:4f:a8:32:
64:d9:64:7c:f1:b8:02:b6:61:5f:d3:80:c7:02:fb:11:a9:c6:
5b:a2:c3:47:59:8f:7f:95:9f:4b:d9:64:bb:85:f0:9d:4a:2d:
17:07:a9:96:99:7c:cb:50:e8:1b:64:63:0c:e5:3f:27:0e:ee:
1a:86:8a:08:ea:30:71:4a:68:4f:06:9b:c6:82:99:70:83:86:
a1:99:bd:7f:da:ee:c7:3f:0e:69:cd:ac:89:aa:4d:18:d9:fc:
1d:33:55:db:76:7f:b7:04:b6:15:8e:84:c9:83:e5:98:f5:a5:
e7:c5:8d:90:c6:84:66:3d:12:70:18:e3:bc:01:9c:1d:ac:93:
64:3c:82:b5:d4:39:f0:76:e5:7c:ba:81:00:ef:69:0e:78:23:
01:5f:a8:7c:2a:58:8c:6c:a7:d8:49:28:a4:71:39:8f:1a:46:
35:ab:13:dd:ff:9d:b6:9f:b2:c8:0d:d9:f3:61:90:d3:1e:46:
71:f4:4a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1hxacQPTBUYbncC5Ovv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy
Y2U0NjYwHhcNMjUwOTA3MTEwMDU4WhcNMjUwOTA4MTEwMDU4WjAzMTEwLwYDVQQD
Eyg0NzczZDU5MmMyZTk3OTFlMTZhNGVkMzVlNjhlOGVmMDYyYjlhNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA126F2CXac3gL7rRumTBL4Efbk1ro
cj6+XC3Xr385NRPyrJV+mnCXalv8mce58/K+IaOEHJIJgFAQPA4P4jSFhj4mezwO
SXCHPycO5+ieXeNXQ0W4UsWLhfj+6znYu/RuxsffbJvitnSNEiDAxLS3Y8QceMCP
nv5PHYsDsGepsbFEAq2Pr/cGLwv6rkpOWeSi1+2P15AKqYXP978/Dtak3Ebc0gtf
HtZ94VTzwUTP8LRBry45ihTbUDlOAGvsaZMCJfl45BJtj9sE8x5H3ufKn48c2f9z
3v8C/hYFryMOe96ksLAzTyNOBiAWAJ2JiQS4scZHQ4KhqQNn2/3VedhKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdz1ZLC6XkeFqTtNeaOjvBiuadOMB8GA1UdIwQY
MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt
YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl
LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnE0LEYk
PalXdZoVwhKJ9tqGoeflrvaZ5N/ErG64v0nI1vNH8U3OhoCZFUdw+O8pt0+kVGox
gCDGj6ifKNwFrNyd7eIBT6gyZNlkfPG4ArZhX9OAxwL7EanGW6LDR1mPf5WfS9lk
u4XwnUotFweplpl8y1DoG2RjDOU/Jw7uGoaKCOowcUpoTwabxoKZcIOGoZm9f9ru
xz8Oac2siapNGNn8HTNV23Z/twS2FY6EyYPlmPWl58WNkMaEZj0ScBjjvAGcHayT
ZDyCtdQ58HblfLqBAO9pDngjAV+ofCpYjGyn2EkopHE5jxpGNasT3f+dtp+yyA3Z
82GQ0x5GcfRKDw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:25 2025 by rpki-client