Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: Sj++mww7Hz+mDE5q945VT+gqRYQO3kgjP+RrnVjSFsU=
Subject key identifier: 1C:38:51:9C:AF:80:A9:B4:15:D0:2B:45:60:E1:CC:47:91:2E:A3:7E
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 01987E2EF23662C066DB94B9F7A24436315D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 0476
Signing time: Wed 06 Aug 2025 07:01:02 +0000
Manifest this update: Wed 06 Aug 2025 07:01:02 +0000
Manifest next update: Thu 07 Aug 2025 07:01:02 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: Ee5/i4JynD8Ldypj/HLFWyxU8VCMtjOWSbLMwErjWlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:f2:36:62:c0:66:db:94:b9:f7:a2:44:36:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Aug 6 07:01:02 2025 GMT
Not After : Aug 7 07:01:02 2025 GMT
Subject: CN=1c38519caf80a9b415d02b4560e1cc47912ea37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:b1:ce:27:2e:ab:66:55:10:1e:bb:d5:aa:
26:67:09:66:f7:e4:ec:1e:3c:51:a8:21:f8:d7:a9:
db:b6:31:7a:4c:bb:f7:46:e9:5f:2f:14:73:6d:8a:
ab:74:b0:60:e1:6c:65:3e:53:a1:d7:1c:b6:57:e1:
9e:bf:af:2f:52:51:7b:cf:4e:49:ee:4a:b4:87:02:
ab:f5:3a:2a:39:1d:1a:d5:71:7a:98:85:4a:d8:f6:
f5:89:4a:cb:a1:d6:b2:50:1c:55:5f:aa:cc:26:d1:
30:b7:aa:c5:f9:10:58:02:ea:cc:a0:85:14:49:e4:
e0:e8:48:6a:df:c5:23:f8:6f:93:cb:9a:84:f8:5d:
3b:ce:76:12:8d:b9:82:06:25:e9:a7:32:e9:de:54:
aa:d0:c7:04:ad:df:c3:8f:ea:08:27:17:18:c5:f2:
30:d9:59:22:52:d3:66:c3:12:44:f5:36:3d:43:f8:
32:3e:3e:aa:5d:b0:bb:04:88:c4:a6:3b:01:31:03:
ad:be:12:0a:e9:1e:9f:fc:4f:8f:1b:6e:42:6f:00:
46:81:58:d1:9d:4d:7b:b0:29:d0:ac:e9:61:54:00:
03:60:b3:4c:33:ac:7a:9b:d0:a6:f1:db:55:09:f9:
64:07:7b:30:78:54:81:1c:7b:49:26:45:40:0b:df:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:51:9C:AF:80:A9:B4:15:D0:2B:45:60:E1:CC:47:91:2E:A3:7E
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:52:f1:8e:43:39:38:10:aa:e1:74:f8:9f:dd:67:57:c3:
61:df:3c:22:3d:ce:56:54:13:88:f7:b4:cd:6f:49:36:d4:8f:
43:f2:dc:9d:75:c1:85:2f:4b:d9:30:67:d1:c7:a3:37:bc:66:
48:54:0a:64:6e:e8:50:af:26:ac:9f:1b:7a:de:7c:5b:7a:4a:
13:86:71:ee:90:fe:24:33:ec:33:62:7b:d0:01:cb:7d:f2:fd:
fe:03:48:67:c2:10:fe:e6:a2:91:68:3d:c6:f4:93:38:76:b9:
9d:cf:4c:43:2a:f5:07:9b:04:fd:5b:ee:4a:7e:79:43:97:27:
e3:34:a6:ac:ec:df:14:64:a0:0c:a9:fd:da:47:43:4f:a3:22:
44:ef:dc:1a:d3:72:e4:16:03:9c:6a:83:28:ac:44:80:f8:70:
66:ca:94:58:0f:92:d4:4e:02:00:8c:78:76:8e:06:73:2e:f3:
ba:a2:42:f5:26:de:9e:6a:d5:1d:cc:fb:9f:3b:c0:99:08:e9:
52:76:c2:2a:d6:c8:89:28:76:63:ad:09:3c:fd:eb:7b:52:af:
30:c5:66:49:c9:0d:45:3b:a0:cc:85:84:f9:80:8b:ce:81:67:
c5:6e:63:cc:ef:90:ea:d9:c2:e3:e3:2b:1e:a5:a0:95:d2:cb:
3d:7e:03:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LvI2YsBm25S596JENjFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWQ4MzMyZTExOGE5YTIxODdlYWI1ODg0Mjc5ZDY1ODBm
MTE5ZjcwHhcNMjUwODA2MDcwMTAyWhcNMjUwODA3MDcwMTAyWjAzMTEwLwYDVQQD
EygxYzM4NTE5Y2FmODBhOWI0MTVkMDJiNDU2MGUxY2M0NzkxMmVhMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iexzicuq2ZVEB671aomZwlm9+Ts
HjxRqCH416nbtjF6TLv3RulfLxRzbYqrdLBg4WxlPlOh1xy2V+Gev68vUlF7z05J
7kq0hwKr9ToqOR0a1XF6mIVK2Pb1iUrLodayUBxVX6rMJtEwt6rF+RBYAurMoIUU
SeTg6Ehq38Uj+G+Ty5qE+F07znYSjbmCBiXppzLp3lSq0McErd/Dj+oIJxcYxfIw
2VkiUtNmwxJE9TY9Q/gyPj6qXbC7BIjEpjsBMQOtvhIK6R6f/E+PG25CbwBGgVjR
nU17sCnQrOlhVAADYLNMM6x6m9Cm8dtVCflkB3sweFSBHHtJJkVAC99mAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw4UZyvgKm0FdArRWDhzEeRLqN+MB8GA1UdIwQY
MBaAFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUt
ZGVhMzBlY2I3MzZkLzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUtZGVhMzBlY2I3MzZk
LzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/xS8Y5D
OTgQquF0+J/dZ1fDYd88Ij3OVlQTiPe0zW9JNtSPQ/LcnXXBhS9L2TBn0cejN7xm
SFQKZG7oUK8mrJ8bet58W3pKE4Zx7pD+JDPsM2J70AHLffL9/gNIZ8IQ/uaikWg9
xvSTOHa5nc9MQyr1B5sE/VvuSn55Q5cn4zSmrOzfFGSgDKn92kdDT6MiRO/cGtNy
5BYDnGqDKKxEgPhwZsqUWA+S1E4CAIx4do4Gcy7zuqJC9SbenmrVHcz7nzvAmQjp
UnbCKtbIiSh2Y60JPP3re1KvMMVmSckNRTugzIWE+YCLzoFnxW5jzO+Q6tnC4+Mr
HqWgldLLPX4DqA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:08 2025 by rpki-client