Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: vR3iQM4YMM/tOZ21I5O92CODLmVDC9ONrpKz4NLPbTo=
Subject key identifier: 67:DE:BA:98:CF:36:03:04:0E:4A:4E:4D:26:30:C0:9D:D8:B3:C3:BF
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019883C350F29D8182D32AF80FBCD8D88DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: BC
Signing time: Thu 07 Aug 2025 09:01:12 +0000
Manifest this update: Thu 07 Aug 2025 09:01:12 +0000
Manifest next update: Fri 08 Aug 2025 09:01:12 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: y8ffGMiPb29Zadqeiyov1FogMeq/LQiKbkV7m4Vjlhs=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:50:f2:9d:81:82:d3:2a:f8:0f:bc:d8:d8:8d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Aug 7 09:01:12 2025 GMT
Not After : Aug 8 09:01:12 2025 GMT
Subject: CN=67deba98cf3603040e4a4e4d2630c09dd8b3c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:41:c5:6d:55:ce:1d:07:99:54:40:b6:15:
af:be:2e:8e:1c:a5:4c:55:3e:9e:ba:e9:3f:3b:d7:
5f:9b:56:0b:44:2e:04:01:7b:c4:d6:8c:23:00:02:
a7:05:d1:eb:e4:fb:13:63:99:e3:b6:b2:5e:31:ef:
08:d0:75:b1:fb:e1:5e:3a:c5:ae:99:fa:7f:24:df:
93:c4:21:90:6e:86:e3:b4:41:6f:68:22:fb:e5:53:
0a:d9:fe:48:73:c2:5a:8a:cc:5b:2b:88:6e:6d:47:
9b:56:86:81:19:e8:50:ad:30:37:b0:68:1e:ba:cf:
ef:16:f8:9b:e3:d7:47:8d:7a:cd:ae:0d:3c:b9:d5:
27:76:b5:b0:12:1f:60:9f:4f:e8:ea:0f:76:5d:16:
f5:9f:61:4d:aa:11:3f:c4:ca:a7:11:b4:cb:c9:18:
39:84:81:27:b5:80:52:3f:c4:27:f4:c3:ca:60:b6:
72:4e:bb:0d:46:0f:8e:da:24:c7:ad:f9:45:21:da:
8f:61:ca:20:d9:93:3e:53:4e:23:8a:d9:33:5e:da:
41:ee:4d:4e:ad:9c:bd:aa:7d:3b:d6:28:34:8a:ab:
c0:9c:b3:7f:eb:83:37:5d:c2:4c:cf:45:a4:26:9c:
f7:2c:af:f0:90:5c:fa:d9:31:3a:91:e0:6d:84:a1:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:BA:98:CF:36:03:04:0E:4A:4E:4D:26:30:C0:9D:D8:B3:C3:BF
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:47:42:1f:16:af:01:73:78:b5:64:4d:47:4c:7b:e1:f8:
45:13:0b:94:b6:52:67:d1:dd:ce:64:5d:d7:fa:be:56:7d:11:
0f:2e:36:26:ac:19:67:0a:0a:f6:86:19:4c:7f:11:39:89:d2:
2a:f3:e7:40:bc:e9:d0:4b:45:93:49:60:eb:f0:0f:de:64:7b:
68:0a:f4:a7:08:94:01:70:98:c7:51:f2:0c:d3:43:27:bd:48:
2d:61:11:e2:f5:95:b1:27:e0:d4:54:9c:55:8f:ee:84:65:fd:
67:d0:ff:d1:93:a8:14:cc:af:46:f1:e3:f7:6b:25:53:cd:d4:
26:ec:6d:a2:7c:a0:09:d1:13:70:45:04:f9:82:28:d4:00:bf:
9e:02:ad:a0:ea:67:d7:34:27:25:5c:49:7e:f2:fa:32:bb:c5:
c7:d9:39:d4:14:67:83:45:76:7a:82:ed:92:ef:0d:27:39:d7:
aa:6b:fc:4d:cf:cb:7b:1b:95:6e:4e:e7:f2:df:3b:2e:a2:ee:
ef:2d:c8:b8:cd:fe:cc:a2:76:84:09:4e:28:66:8b:23:db:b8:
e1:94:13:57:b4:f3:2b:b6:12:a6:02:2c:79:81:b1:9f:57:b5:
8e:0e:73:88:37:b8:7d:f4:9a:d0:04:58:0d:7b:19:7b:ac:c4:
6c:a8:8b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw1DynYGC0yr4D7zY2I24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjUwODA3MDkwMTEyWhcNMjUwODA4MDkwMTEyWjAzMTEwLwYDVQQD
Eyg2N2RlYmE5OGNmMzYwMzA0MGU0YTRlNGQyNjMwYzA5ZGQ4YjNjM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHhBxW1Vzh0HmVRAthWvvi6OHKVM
VT6euuk/O9dfm1YLRC4EAXvE1owjAAKnBdHr5PsTY5njtrJeMe8I0HWx++FeOsWu
mfp/JN+TxCGQbobjtEFvaCL75VMK2f5Ic8JaisxbK4hubUebVoaBGehQrTA3sGge
us/vFvib49dHjXrNrg08udUndrWwEh9gn0/o6g92XRb1n2FNqhE/xMqnEbTLyRg5
hIEntYBSP8Qn9MPKYLZyTrsNRg+O2iTHrflFIdqPYcog2ZM+U04jitkzXtpB7k1O
rZy9qn071ig0iqvAnLN/64M3XcJMz0WkJpz3LK/wkFz62TE6keBthKE6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfeupjPNgMEDkpOTSYwwJ3Ys8O/MB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2RHQh8W
rwFzeLVkTUdMe+H4RRMLlLZSZ9HdzmRd1/q+Vn0RDy42JqwZZwoK9oYZTH8ROYnS
KvPnQLzp0EtFk0lg6/AP3mR7aAr0pwiUAXCYx1HyDNNDJ71ILWER4vWVsSfg1FSc
VY/uhGX9Z9D/0ZOoFMyvRvHj92slU83UJuxtonygCdETcEUE+YIo1AC/ngKtoOpn
1zQnJVxJfvL6MrvFx9k51BRng0V2eoLtku8NJznXqmv8Tc/LexuVbk7n8t87LqLu
7y3IuM3+zKJ2hAlOKGaLI9u44ZQTV7TzK7YSpgIseYGxn1e1jg5ziDe4ffSa0ARY
DXsZe6zEbKiLXA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:04 2025 by rpki-client