Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: JHGbIhOz9oaT5bX6r3BAwFdbTdlgM4Ks/MztyO05EwA=
Subject key identifier: CF:87:3A:44:D8:D3:7A:B5:29:B4:73:7B:9F:CE:6A:D5:B7:05:35:4C
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019873E2DC6A2DB5A33D6276AC0F25835CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 056E
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: riaeMozMh/mB5K4Q/Mclzx99XbZpuGDeWYufOmwOQ6s=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:dc:6a:2d:b5:a3:3d:62:76:ac:0f:25:83:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=cf873a44d8d37ab529b4737b9fce6ad5b705354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:d9:eb:2c:f6:0c:29:1f:ae:1e:63:2c:56:
6a:77:44:67:07:da:64:0e:35:d9:c5:59:21:5f:ee:
80:6c:69:92:1a:af:d5:57:07:80:dc:18:a0:59:16:
e9:ef:0e:79:75:fc:7b:95:99:e2:a4:24:84:02:32:
1d:34:f7:cc:b1:1a:60:7b:d5:33:ef:63:e3:8d:e0:
47:63:e3:dd:d4:7f:9d:01:f9:ed:ff:22:b6:34:c3:
c8:47:8f:32:06:9e:da:5f:ea:ae:06:af:cb:6e:05:
66:e1:d6:cb:4a:60:58:b3:08:19:89:c4:7f:52:87:
b5:2a:c9:35:78:c6:dd:f7:8d:ef:78:c4:93:2d:5f:
43:f8:8c:7f:8a:6a:17:ec:61:b4:1a:4a:ad:3e:90:
aa:cf:89:73:fa:8e:f0:25:d7:27:11:f6:dd:55:30:
6b:37:2f:e0:ef:b6:2a:c7:76:f9:05:3c:b5:6c:71:
64:54:7b:40:e6:ab:ab:85:c7:b9:97:2c:03:2c:01:
88:17:17:9b:5f:a1:c1:54:b0:2e:88:af:4c:84:9e:
a3:65:c9:cd:d6:73:2a:44:d4:7a:d4:24:0b:2d:6f:
48:67:bf:c9:d1:29:0d:ae:d4:41:6c:36:ee:f1:c3:
01:da:64:3e:62:21:ab:ee:8e:38:1a:a6:e7:32:23:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:3A:44:D8:D3:7A:B5:29:B4:73:7B:9F:CE:6A:D5:B7:05:35:4C
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:75:cc:c5:7c:39:e0:d7:d5:ec:dc:cd:a5:40:8e:3f:d4:
f6:01:78:c3:cc:ab:5c:2a:6e:6c:3c:63:c6:a7:cb:49:0f:fa:
86:9a:bf:77:99:71:d9:20:eb:f7:d2:e5:12:09:ef:39:dc:db:
35:1f:4d:a4:33:7a:9b:c0:c1:18:ea:ce:1a:6d:08:40:52:84:
88:65:ed:51:09:34:bc:3e:70:ff:08:67:3a:ec:0f:0b:9d:02:
ea:73:ce:91:f8:f3:46:c0:f1:fc:1d:41:17:a6:49:0b:0d:b7:
9f:85:02:f9:fa:4d:6c:aa:7a:19:b8:08:7f:46:4a:3b:03:2a:
63:03:9b:3c:c8:ea:53:b1:4e:94:f0:cf:23:2b:83:88:55:6f:
8a:d4:ac:09:e8:02:2e:5c:84:7c:a4:ae:17:ba:17:23:6b:4f:
ce:31:85:4b:4d:6b:71:b4:d9:e1:85:c5:43:de:a3:ec:83:20:
c8:d7:9c:34:f8:11:5e:8c:d7:1d:19:0a:85:b8:4d:fe:94:57:
a8:6a:0a:f0:4f:03:4c:25:31:bc:a6:51:4e:00:ea:97:59:68:
d1:ff:cd:31:7f:a3:ed:ee:09:29:57:e5:21:f8:8f:d1:7c:35:
b5:a3:79:fb:25:84:e0:48:9f:ca:11:1e:42:e9:9f:fb:dc:ee:
0f:46:de:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4txqLbWjPWJ2rA8lg1z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjUwODA0MDcwMTQ0WhcNMjUwODA1MDcwMTQ0WjAzMTEwLwYDVQQD
EyhjZjg3M2E0NGQ4ZDM3YWI1MjliNDczN2I5ZmNlNmFkNWI3MDUzNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrZ6yz2DCkfrh5jLFZqd0RnB9pk
DjXZxVkhX+6AbGmSGq/VVweA3BigWRbp7w55dfx7lZnipCSEAjIdNPfMsRpge9Uz
72PjjeBHY+Pd1H+dAfnt/yK2NMPIR48yBp7aX+quBq/LbgVm4dbLSmBYswgZicR/
Uoe1Ksk1eMbd943veMSTLV9D+Ix/imoX7GG0GkqtPpCqz4lz+o7wJdcnEfbdVTBr
Ny/g77Yqx3b5BTy1bHFkVHtA5qurhce5lywDLAGIFxebX6HBVLAuiK9MhJ6jZcnN
1nMqRNR61CQLLW9IZ7/J0SkNrtRBbDbu8cMB2mQ+YiGr7o44GqbnMiOHOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+HOkTY03q1KbRze5/OatW3BTVMMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW51zMV8
OeDX1ezczaVAjj/U9gF4w8yrXCpubDxjxqfLSQ/6hpq/d5lx2SDr99LlEgnvOdzb
NR9NpDN6m8DBGOrOGm0IQFKEiGXtUQk0vD5w/whnOuwPC50C6nPOkfjzRsDx/B1B
F6ZJCw23n4UC+fpNbKp6GbgIf0ZKOwMqYwObPMjqU7FOlPDPIyuDiFVvitSsCegC
LlyEfKSuF7oXI2tPzjGFS01rcbTZ4YXFQ96j7IMgyNecNPgRXozXHRkKhbhN/pRX
qGoK8E8DTCUxvKZRTgDql1lo0f/NMX+j7e4JKVflIfiP0Xw1taN5+yWE4EifyhEe
Qumf+9zuD0befQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:57 2025 by rpki-client