Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: G4hPLO7c8RJ+3pH3Qu9obPnvA6Zp03z1udBR2W4N9hs=
Subject key identifier: 18:AB:92:E6:77:30:B6:95:48:58:A2:ED:FB:F7:1C:EC:0D:E8:C5:F1
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0198A04EB3979E6E2A49DE0747360074B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0503
Signing time: Tue 12 Aug 2025 22:02:48 +0000
Manifest this update: Tue 12 Aug 2025 22:02:48 +0000
Manifest next update: Wed 13 Aug 2025 22:02:48 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: trRBZZij4rHLLTrQRUZBa7KezHox7F2ek/NQDsVq/Os=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:b3:97:9e:6e:2a:49:de:07:47:36:00:74:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Aug 12 22:02:48 2025 GMT
Not After : Aug 13 22:02:48 2025 GMT
Subject: CN=18ab92e67730b6954858a2edfbf71cec0de8c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:48:38:b4:3d:aa:0a:88:f3:f9:35:6a:de:
60:a3:f6:b0:b0:50:71:28:8a:cd:3d:a9:9d:7c:32:
69:50:69:84:85:2d:62:17:4e:72:5f:63:5e:b2:5e:
22:63:58:31:b9:f9:1f:cf:1d:12:90:98:b4:c3:99:
c4:7b:fa:6d:f0:7a:82:cd:4e:d7:f2:74:4a:b8:9c:
2e:28:d3:16:8a:1b:da:af:01:35:be:15:75:12:60:
b4:f2:a4:94:39:0a:53:21:91:f7:e7:03:cf:62:4c:
a8:a6:b3:47:ff:d3:39:23:6b:bd:51:d4:fa:fb:1d:
29:ea:95:d9:66:a3:e9:0b:ed:f6:b2:2b:ca:c0:c4:
bf:a8:ef:30:b0:43:96:7d:b1:a5:93:6c:15:30:aa:
e0:c5:30:c4:a2:55:ae:60:84:4c:b0:12:26:4e:29:
c4:96:2b:69:e2:81:8f:18:bc:8a:56:c9:60:79:d2:
6c:c6:36:2b:0e:a2:c0:d8:f7:1c:56:51:46:13:b3:
67:f3:83:16:a1:cb:36:48:66:45:0d:33:b5:eb:ec:
29:33:a0:97:50:5e:10:f7:a8:c4:34:6d:c4:c7:bf:
30:74:a9:73:ee:82:76:a0:74:92:2b:86:d6:e2:37:
52:11:47:95:6e:83:05:df:f5:91:cb:29:63:7f:82:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:92:E6:77:30:B6:95:48:58:A2:ED:FB:F7:1C:EC:0D:E8:C5:F1
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:14:49:80:24:51:44:0c:5d:57:61:6a:da:0d:37:92:4e:
a8:cf:8e:b0:aa:3d:7d:0c:87:cb:90:17:44:93:96:9a:5f:bc:
7a:aa:60:a6:13:31:20:c5:4d:20:8b:d0:15:f4:cf:37:03:29:
d8:de:b7:32:45:9b:d7:b8:c0:77:5b:99:82:c6:d4:44:98:5c:
9c:37:3d:da:ca:29:09:ec:43:89:53:da:ab:94:c0:54:ef:80:
e6:4e:b9:1a:7b:68:b8:aa:1a:7d:fa:1f:a1:0b:f4:65:8a:f0:
40:4c:b3:32:43:56:00:87:08:9e:7f:45:65:2f:17:ae:1f:f0:
78:15:0f:4c:ce:6f:5c:d9:bd:6a:d0:4d:d6:cb:7c:01:d3:cc:
58:21:21:c0:7d:91:ea:ef:c9:51:ce:b1:7e:25:c4:de:91:6b:
d6:5b:55:42:a3:e3:af:7a:a4:1a:58:29:87:d2:a3:b4:dd:02:
1b:45:80:ac:f6:06:ee:c4:b1:47:6f:af:cd:8a:6b:8f:53:16:
a8:f7:2c:3c:34:7b:04:42:6e:38:7f:e4:58:42:0b:6c:9a:45:
23:fe:3d:32:b6:78:62:a3:5a:ca:3e:32:29:39:d6:19:05:dd:
5f:d4:a7:61:fd:eb:76:79:38:a7:5c:c8:ff:9d:9a:a7:f6:e9:
c5:ea:c9:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTrOXnm4qSd4HRzYAdLDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjUwODEyMjIwMjQ4WhcNMjUwODEzMjIwMjQ4WjAzMTEwLwYDVQQD
EygxOGFiOTJlNjc3MzBiNjk1NDg1OGEyZWRmYmY3MWNlYzBkZThjNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXlIOLQ9qgqI8/k1at5go/awsFBx
KIrNPamdfDJpUGmEhS1iF05yX2Nesl4iY1gxufkfzx0SkJi0w5nEe/pt8HqCzU7X
8nRKuJwuKNMWihvarwE1vhV1EmC08qSUOQpTIZH35wPPYkyoprNH/9M5I2u9UdT6
+x0p6pXZZqPpC+32sivKwMS/qO8wsEOWfbGlk2wVMKrgxTDEolWuYIRMsBImTinE
litp4oGPGLyKVslgedJsxjYrDqLA2PccVlFGE7Nn84MWocs2SGZFDTO16+wpM6CX
UF4Q96jENG3Ex78wdKlz7oJ2oHSSK4bW4jdSEUeVboMF3/WRyyljf4JXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBirkuZ3MLaVSFii7fv3HOwN6MXxMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzAUSYAk
UUQMXVdhatoNN5JOqM+OsKo9fQyHy5AXRJOWml+8eqpgphMxIMVNIIvQFfTPNwMp
2N63MkWb17jAd1uZgsbURJhcnDc92sopCexDiVPaq5TAVO+A5k65GntouKoaffof
oQv0ZYrwQEyzMkNWAIcInn9FZS8Xrh/weBUPTM5vXNm9atBN1st8AdPMWCEhwH2R
6u/JUc6xfiXE3pFr1ltVQqPjr3qkGlgph9KjtN0CG0WArPYG7sSxR2+vzYprj1MW
qPcsPDR7BEJuOH/kWEILbJpFI/49MrZ4YqNayj4yKTnWGQXdX9SnYf3rdnk4p1zI
/52ap/bpxerJ3g==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:40 2025 by rpki-client