Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: tGGN4mxV7SNsGFVzQrUZG1EIwtlNnRYcd6t+IpOB/MQ=
Subject key identifier: C9:6C:97:07:BD:CD:8F:F5:5B:78:3D:75:81:7F:CC:BC:6E:9D:23:52
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 0198820BA11A0C7CB4958839768025AFB520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 01:00:56 +0000
Manifest this update: Thu 07 Aug 2025 01:00:56 +0000
Manifest next update: Fri 08 Aug 2025 01:00:56 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: wS/Z9IdYX1DkxZgW9aUTZcw2E8kcqqWkav6PbA1tv0s=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:a1:1a:0c:7c:b4:95:88:39:76:80:25:af:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Aug 7 01:00:56 2025 GMT
Not After : Aug 8 01:00:56 2025 GMT
Subject: CN=c96c9707bdcd8ff55b783d75817fccbc6e9d2352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:24:7e:c9:e0:ed:46:fe:9a:11:95:52:2c:
b8:9a:67:68:77:e8:72:d3:c8:5c:40:b9:c2:b6:27:
55:df:42:28:39:dc:f0:6f:1d:4d:c9:42:24:39:43:
6a:6a:04:63:ba:3d:78:85:13:62:28:68:ad:64:38:
ea:d7:6c:f1:53:6b:c2:bd:d7:39:61:f8:b0:b9:50:
ac:f2:c3:91:b3:7c:e4:45:50:07:8c:fb:e9:8b:55:
8f:fe:ba:6f:15:92:bb:4a:2a:a9:bf:fd:46:c2:57:
6e:5b:f8:cf:60:74:4a:70:11:ee:9e:db:d1:7e:0d:
6d:60:91:99:47:91:0a:79:15:0f:0c:95:18:08:14:
78:36:1c:08:37:81:f2:26:c6:dd:9a:96:b1:10:2a:
4b:41:2c:53:c6:dc:9c:27:31:38:eb:2d:4f:ce:fe:
c1:72:53:08:90:9c:88:ad:b6:a6:4b:ca:30:a3:d2:
9a:19:43:fe:48:8c:b8:ea:0c:f6:aa:b5:a5:c4:07:
b7:59:d5:0d:ca:13:00:08:16:56:f2:4e:06:40:10:
58:86:42:7d:b1:1f:08:67:d4:54:77:46:c6:1d:86:
71:c4:a0:35:ad:a0:32:15:68:d3:2b:8a:f4:f6:30:
07:c2:4a:44:da:50:6d:cb:1b:a9:76:15:d5:19:b5:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:97:07:BD:CD:8F:F5:5B:78:3D:75:81:7F:CC:BC:6E:9D:23:52
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:5c:f7:d3:c7:58:03:32:f0:ec:05:63:8c:35:92:b8:8b:
12:10:cb:02:00:c5:69:f0:6e:18:ab:72:f0:ef:4d:d8:66:de:
a6:44:64:be:77:d1:00:3a:9e:b6:4b:a9:79:ba:a1:21:6c:ca:
10:3d:6c:e3:2f:56:be:90:1c:c8:1e:d3:23:00:0f:f0:70:b6:
d6:d7:b9:0f:22:74:24:79:86:3e:b3:38:48:f5:a3:78:31:8a:
6c:db:b3:39:46:f2:3e:01:89:e9:89:70:28:08:78:db:c5:c1:
b5:e2:08:63:9b:70:cb:36:7b:17:d6:12:c0:43:7c:3f:cd:62:
9d:fb:1f:b3:83:d3:7c:ae:4f:9e:99:a2:72:95:25:ff:4b:92:
ae:0b:54:d2:21:cb:73:54:16:66:fd:44:a9:a4:91:e4:fa:10:
32:1c:ad:17:ad:28:59:16:5a:50:8e:cc:1b:17:f9:fa:e3:c1:
ee:91:9b:db:d9:38:7d:09:6f:39:a5:f4:24:70:4f:a6:82:4f:
47:3b:96:9a:a2:c9:46:05:c7:7a:40:f9:a4:11:7b:6c:c3:86:
58:96:5b:4b:de:79:75:6a:2f:26:e7:45:1f:a1:58:1c:52:19:
a3:9d:84:fd:12:37:4b:68:30:3b:4a:6a:80:ef:25:f8:76:5e:
c3:b8:40:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC6EaDHy0lYg5doAlr7UgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4
NWU0NjEwHhcNMjUwODA3MDEwMDU2WhcNMjUwODA4MDEwMDU2WjAzMTEwLwYDVQQD
EyhjOTZjOTcwN2JkY2Q4ZmY1NWI3ODNkNzU4MTdmY2NiYzZlOWQyMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzUkfsng7Ub+mhGVUiy4mmdod+hy
08hcQLnCtidV30IoOdzwbx1NyUIkOUNqagRjuj14hRNiKGitZDjq12zxU2vCvdc5
YfiwuVCs8sORs3zkRVAHjPvpi1WP/rpvFZK7Siqpv/1GwlduW/jPYHRKcBHuntvR
fg1tYJGZR5EKeRUPDJUYCBR4NhwIN4HyJsbdmpaxECpLQSxTxtycJzE46y1Pzv7B
clMIkJyIrbamS8owo9KaGUP+SIy46gz2qrWlxAe3WdUNyhMACBZW8k4GQBBYhkJ9
sR8IZ9RUd0bGHYZxxKA1raAyFWjTK4r09jAHwkpE2lBtyxupdhXVGbUUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlslwe9zY/1W3g9dYF/zLxunSNSMB8GA1UdIwQY
MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt
NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl
LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU9c99PH
WAMy8OwFY4w1kriLEhDLAgDFafBuGKty8O9N2GbepkRkvnfRADqetkupebqhIWzK
ED1s4y9WvpAcyB7TIwAP8HC21te5DyJ0JHmGPrM4SPWjeDGKbNuzOUbyPgGJ6Ylw
KAh428XBteIIY5twyzZ7F9YSwEN8P81infsfs4PTfK5PnpmicpUl/0uSrgtU0iHL
c1QWZv1EqaSR5PoQMhytF60oWRZaUI7MGxf5+uPB7pGb29k4fQlvOaX0JHBPpoJP
RzuWmqLJRgXHekD5pBF7bMOGWJZbS955dWovJudFH6FYHFIZo52E/RI3S2gwO0pq
gO8l+HZew7hAxA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:53 2025 by rpki-client