Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: 294FBwlK2OBUqQdbx0Cm/OHDexk9qkoUg2hTrs2EhYU=
Subject key identifier: F8:82:5F:03:92:D4:96:73:43:BB:00:C7:94:B9:17:24:54:CE:A2:BC
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01987A1AFDE295506042C6011EA83BBCB26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 12:00:45 +0000
Manifest this update: Tue 05 Aug 2025 12:00:45 +0000
Manifest next update: Wed 06 Aug 2025 12:00:45 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: gGALZ6tp4td19RNYeWhEyL55uza2h0290+lOGJYq1h4=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:fd:e2:95:50:60:42:c6:01:1e:a8:3b:bc:b2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Aug 5 12:00:45 2025 GMT
Not After : Aug 6 12:00:45 2025 GMT
Subject: CN=f8825f0392d4967343bb00c794b9172454cea2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:0d:93:28:a8:86:af:e3:52:c0:83:4b:2c:
2e:10:e9:ef:a6:3d:b9:13:aa:17:40:45:29:af:55:
5c:0b:2b:c4:15:ce:49:ce:4e:75:f4:43:9b:5d:6a:
a5:81:89:78:6e:40:2b:b5:f9:15:88:67:f8:04:33:
cd:84:6e:8d:45:dc:4c:77:dd:82:c9:7a:5f:f5:92:
ed:ef:7d:f5:61:33:47:d1:28:96:42:1e:98:26:5b:
0f:99:ea:fd:39:f3:e1:2d:3b:88:4c:9f:21:c9:3d:
2f:ef:96:67:52:b0:ec:69:88:47:c6:33:6a:63:ca:
a5:34:38:8c:8b:bf:1f:6f:f2:89:89:d0:77:95:1b:
d2:8e:d6:29:65:69:cb:47:50:f1:74:11:78:b5:d6:
81:15:7a:1d:40:00:55:18:dd:a8:02:d7:fd:6f:03:
9d:aa:c8:2e:38:cc:63:52:c0:dd:45:14:3e:ec:86:
fa:cd:f0:34:8a:4f:35:87:6e:3c:4c:00:68:f1:e3:
d7:db:d7:56:0f:1d:01:30:03:4b:af:05:06:03:46:
8e:d0:d9:a0:b8:bf:6d:4d:c9:a0:a6:1f:00:77:56:
42:9c:2a:44:cd:dd:4e:02:14:14:75:de:6a:39:e1:
d4:08:cf:23:2b:1d:93:9e:94:4e:65:3b:c2:dd:77:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:5F:03:92:D4:96:73:43:BB:00:C7:94:B9:17:24:54:CE:A2:BC
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:b7:41:72:3b:78:fd:49:8d:4d:b8:55:65:e2:df:33:4b:
d0:59:da:10:e2:3d:5d:b2:47:52:83:1e:af:96:4d:b5:db:de:
b4:a9:ae:a8:08:ab:c5:bb:7e:ea:53:4a:9a:56:ea:e6:1f:8d:
61:32:a8:3e:c5:23:8c:aa:75:19:21:07:b1:04:78:ca:c5:97:
3d:c6:78:ba:91:e4:7c:d1:65:be:a2:80:ed:dd:20:47:a0:5b:
d8:5a:1d:15:8a:5e:05:b4:c3:a3:cd:ce:0d:e7:d3:ae:02:56:
0a:e8:3c:f8:3e:1d:21:2a:82:21:b0:56:83:22:f5:28:61:8c:
12:86:47:af:3a:87:af:19:6e:36:ae:12:8d:0e:e5:da:c1:30:
2d:26:0b:f7:09:6e:67:42:25:58:29:66:0c:f4:ba:c1:7b:ec:
eb:fc:83:92:5a:af:6e:99:c7:a9:7f:ab:78:79:fb:2f:e7:e4:
c8:42:44:d7:28:41:10:ea:49:e0:16:b7:19:bb:b9:f1:a4:47:
1e:63:2b:c4:26:3e:bf:07:65:1f:96:c6:0d:29:10:eb:82:4d:
f3:75:f1:ae:3b:8d:1f:40:9c:ee:2f:03:0c:0b:25:46:88:d5:
fc:96:6b:2d:9c:65:a1:cd:ef:38:63:b3:cf:ea:40:f4:c8:1f:
f8:d3:d5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6Gv3ilVBgQsYBHqg7vLJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjUwODA1MTIwMDQ1WhcNMjUwODA2MTIwMDQ1WjAzMTEwLwYDVQQD
EyhmODgyNWYwMzkyZDQ5NjczNDNiYjAwYzc5NGI5MTcyNDU0Y2VhMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp0Nkyiohq/jUsCDSywuEOnvpj25
E6oXQEUpr1VcCyvEFc5Jzk519EObXWqlgYl4bkArtfkViGf4BDPNhG6NRdxMd92C
yXpf9ZLt7331YTNH0SiWQh6YJlsPmer9OfPhLTuITJ8hyT0v75ZnUrDsaYhHxjNq
Y8qlNDiMi78fb/KJidB3lRvSjtYpZWnLR1DxdBF4tdaBFXodQABVGN2oAtf9bwOd
qsguOMxjUsDdRRQ+7Ib6zfA0ik81h248TABo8ePX29dWDx0BMANLrwUGA0aO0Nmg
uL9tTcmgph8Ad1ZCnCpEzd1OAhQUdd5qOeHUCM8jKx2TnpROZTvC3Xc9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiCXwOS1JZzQ7sAx5S5FyRUzqK8MB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAi3QXI7
eP1JjU24VWXi3zNL0FnaEOI9XbJHUoMer5ZNtdvetKmuqAirxbt+6lNKmlbq5h+N
YTKoPsUjjKp1GSEHsQR4ysWXPcZ4upHkfNFlvqKA7d0gR6Bb2FodFYpeBbTDo83O
DefTrgJWCug8+D4dISqCIbBWgyL1KGGMEoZHrzqHrxluNq4SjQ7l2sEwLSYL9wlu
Z0IlWClmDPS6wXvs6/yDklqvbpnHqX+reHn7L+fkyEJE1yhBEOpJ4Ba3Gbu58aRH
HmMrxCY+vwdlH5bGDSkQ64JN83XxrjuNH0Cc7i8DDAslRojV/JZrLZxloc3vOGOz
z+pA9Mgf+NPV2A==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:38 2025 by rpki-client