Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: JuY0szrVfQAaJ6nZgWsOmx5jCdxWWfff6yW66UFhJDg=
Subject key identifier: 47:8A:FC:5B:83:3D:81:52:CC:9B:26:E8:0B:CF:D2:3D:73:64:29:DE
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019874509131FAC1F10F10EC727EA18AF502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 064F
Signing time: Mon 04 Aug 2025 09:01:33 +0000
Manifest this update: Mon 04 Aug 2025 09:01:33 +0000
Manifest next update: Tue 05 Aug 2025 09:01:33 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: lR4c4+9qXVG3VV9153bNtMwQuSaxNlagnlmhn3YRFBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:91:31:fa:c1:f1:0f:10:ec:72:7e:a1:8a:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Aug 4 09:01:33 2025 GMT
Not After : Aug 5 09:01:33 2025 GMT
Subject: CN=478afc5b833d8152cc9b26e80bcfd23d736429de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:b2:cd:26:b8:47:92:6b:7f:40:91:b3:d1:
9b:4c:5e:2c:f8:22:07:54:93:80:d7:ba:34:75:b3:
8e:ec:3f:7a:8c:24:aa:c4:34:b4:6a:b6:55:df:cc:
49:f8:81:37:9b:6f:d9:be:0e:70:4b:8d:e3:fb:81:
06:63:7b:34:a2:19:dd:c4:0a:9a:44:8f:da:e3:2b:
a7:8c:10:fb:4d:3c:50:db:f3:23:00:cd:4d:f3:2d:
dc:e0:6d:b3:13:bc:41:e8:29:0c:80:54:d5:a0:de:
6f:eb:68:ec:92:eb:71:19:65:e0:87:8c:77:59:da:
62:4a:e7:ee:1d:4e:23:e6:3b:e1:b8:c3:e5:a3:8b:
bf:0a:ac:3a:f2:0d:57:4e:b4:9b:ea:ae:c8:2f:c1:
ff:ec:4e:f8:ba:10:0f:f3:f7:8c:a7:a0:54:6e:f0:
75:f4:6e:01:fe:09:b6:ff:aa:a9:79:12:ae:c4:f6:
1e:08:a6:f4:04:db:48:19:24:8c:ac:8a:87:54:53:
ae:04:b9:e1:ef:35:63:5c:88:d9:b7:f8:66:f8:db:
9e:a0:fa:ff:b0:63:23:ee:c2:67:d4:3e:07:bc:31:
b8:a4:9a:84:75:5e:fa:15:dc:b1:12:7f:4b:2e:eb:
bc:9c:20:58:a1:36:4e:2c:56:bd:cb:94:ad:8d:4b:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:FC:5B:83:3D:81:52:CC:9B:26:E8:0B:CF:D2:3D:73:64:29:DE
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c1:4e:26:21:1c:b0:d4:b2:41:66:19:a6:ba:5a:9d:f2:2c:
20:5e:67:97:f6:f1:9e:36:6c:77:67:ac:a5:f4:a0:c7:30:ff:
b7:0b:f7:a5:7b:98:15:29:ff:7d:2b:e2:ea:f4:27:79:f9:1a:
a1:8e:ba:ff:1b:90:fd:07:c3:09:12:53:d9:1a:d2:f5:d4:39:
93:52:74:a0:79:15:aa:37:42:d5:7f:14:6c:49:f9:6e:26:63:
ff:91:e4:fb:c2:a8:2b:80:ec:6a:88:67:70:ae:19:91:43:18:
0a:07:6c:a6:52:d5:49:1c:c1:78:91:07:11:79:a8:8b:9d:01:
d5:ac:98:a3:23:70:59:85:8a:62:14:7e:8e:e3:a6:fe:bc:3d:
ee:64:dd:cb:cd:38:11:fd:ed:4d:4f:ba:e9:b1:68:84:81:9a:
3b:d9:31:0c:aa:01:7a:64:9b:f9:0c:de:95:7b:e3:84:ba:9b:
02:1c:4a:b4:46:fc:c3:9b:dc:af:61:ca:bd:19:db:83:c4:3d:
29:1d:fc:32:b0:ac:d4:72:d7:0a:47:87:82:ce:ff:23:06:76:
d7:dc:13:81:52:c1:ed:9b:1d:4f:43:e2:5f:67:45:b3:bf:8b:
4f:51:94:17:a0:17:49:e7:b9:0f:18:7c:f7:3f:34:4e:be:09:
85:74:60:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJEx+sHxDxDscn6hivUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw
ZjYxY2MwHhcNMjUwODA0MDkwMTMzWhcNMjUwODA1MDkwMTMzWjAzMTEwLwYDVQQD
Eyg0NzhhZmM1YjgzM2Q4MTUyY2M5YjI2ZTgwYmNmZDIzZDczNjQyOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuluyzSa4R5Jrf0CRs9GbTF4s+CIH
VJOA17o0dbOO7D96jCSqxDS0arZV38xJ+IE3m2/Zvg5wS43j+4EGY3s0ohndxAqa
RI/a4yunjBD7TTxQ2/MjAM1N8y3c4G2zE7xB6CkMgFTVoN5v62jskutxGWXgh4x3
WdpiSufuHU4j5jvhuMPlo4u/Cqw68g1XTrSb6q7IL8H/7E74uhAP8/eMp6BUbvB1
9G4B/gm2/6qpeRKuxPYeCKb0BNtIGSSMrIqHVFOuBLnh7zVjXIjZt/hm+NueoPr/
sGMj7sJn1D4HvDG4pJqEdV76FdyxEn9LLuu8nCBYoTZOLFa9y5StjUsOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeK/FuDPYFSzJsm6AvP0j1zZCneMB8GA1UdIwQY
MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt
M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw
LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcFOJiEc
sNSyQWYZprpanfIsIF5nl/bxnjZsd2espfSgxzD/twv3pXuYFSn/fSvi6vQnefka
oY66/xuQ/QfDCRJT2RrS9dQ5k1J0oHkVqjdC1X8UbEn5biZj/5Hk+8KoK4Dsaohn
cK4ZkUMYCgdsplLVSRzBeJEHEXmoi50B1ayYoyNwWYWKYhR+juOm/rw97mTdy804
Ef3tTU+66bFohIGaO9kxDKoBemSb+QzelXvjhLqbAhxKtEb8w5vcr2HKvRnbg8Q9
KR38MrCs1HLXCkeHgs7/IwZ219wTgVLB7ZsdT0PiX2dFs7+LT1GUF6AXSee5Dxh8
9z80Tr4JhXRgAw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:44 2025 by rpki-client