Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: p8gWiVgLqWNvgZG7WAKyS8OstUoWLTIbhLHG56tlEmM=
Subject key identifier: 19:29:85:A4:E5:EC:7D:5A:6D:10:B5:B2:5D:B6:1F:42:4E:43:8D:FD
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019873E396EFAD56D13DC63A867B2363799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:31 +0000
Manifest this update: Mon 04 Aug 2025 07:02:31 +0000
Manifest next update: Tue 05 Aug 2025 07:02:31 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: ZiIEaDPAQ8Os2/ewfkdLZF/wNg9i/sPTDCqYwjPHS0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:96:ef:ad:56:d1:3d:c6:3a:86:7b:23:63:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Aug 4 07:02:31 2025 GMT
Not After : Aug 5 07:02:31 2025 GMT
Subject: CN=192985a4e5ec7d5a6d10b5b25db61f424e438dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:ae:1e:57:6d:c6:05:c8:2a:34:c9:40:8b:
95:67:9f:1d:f7:28:00:06:67:dc:81:ed:ca:44:b7:
0c:1e:25:8e:09:11:19:01:df:2a:60:2b:a3:29:ce:
47:40:f1:be:ce:58:e9:4d:29:7f:c9:be:d0:1d:2d:
3d:62:2d:28:c4:33:6c:73:20:26:07:63:0a:31:92:
fb:30:b0:62:1f:f9:85:92:50:9d:31:02:d0:a6:58:
cd:fd:02:8c:59:04:62:35:c7:2d:7e:f8:60:08:7a:
0e:6c:d1:bb:b6:9d:6f:05:9a:b9:d2:83:0f:b8:04:
8a:2c:60:ba:35:db:92:c2:79:57:e9:22:a7:1f:56:
5b:70:d7:57:16:58:55:3e:94:ea:63:41:2e:a3:6b:
83:77:0f:a2:e3:01:6a:fb:15:0c:76:61:d3:b2:24:
2f:b6:87:98:13:1d:dd:8b:b5:b5:59:45:e8:bd:19:
2e:c7:01:85:b7:d9:08:57:4c:af:b2:13:63:d6:09:
02:77:4e:62:65:18:b8:5b:a0:77:af:dd:cc:7a:7f:
7d:26:78:13:f1:60:d0:0f:54:bf:4d:67:49:78:f0:
c4:b2:a4:a2:10:3a:4e:1f:d1:53:64:28:4f:d2:eb:
31:cf:55:a5:70:66:d4:6a:9c:be:4c:c5:48:67:0c:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:85:A4:E5:EC:7D:5A:6D:10:B5:B2:5D:B6:1F:42:4E:43:8D:FD
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:f9:10:52:ee:53:52:59:98:3f:14:0f:ca:1d:94:d3:28:
19:f8:69:01:65:ef:d1:c9:17:1c:93:d7:9b:fb:35:e2:f0:82:
aa:ae:21:59:4e:ee:01:0b:c6:2e:9e:57:fb:13:e8:53:ae:a8:
61:3e:cc:d2:e7:08:a4:f6:74:3f:ba:39:43:38:a6:b7:fd:25:
f4:12:3c:82:95:34:eb:b9:fd:39:89:2b:26:7f:47:fe:f0:0c:
64:32:07:24:9e:59:16:f2:62:73:cf:94:e4:db:a8:5a:80:eb:
a8:21:3d:0d:79:eb:b5:c8:b4:be:e9:96:15:ae:40:26:32:b9:
6b:d9:e6:54:3f:87:d5:f4:b5:be:96:cc:a1:fb:a5:93:83:ac:
0e:77:31:f2:c2:ae:9a:a4:e4:eb:d6:9a:d0:b1:c5:08:08:94:
4e:d8:0d:5c:9a:6b:81:37:97:35:23:90:cc:e2:46:72:c9:62:
a8:99:b5:42:8e:fd:c8:26:84:b8:72:47:19:6d:12:40:49:45:
0d:00:e8:82:b6:30:30:04:d0:73:c8:b5:68:24:44:83:95:82:
19:b1:e5:f1:74:82:0e:1d:4d:6f:1d:0b:ab:aa:99:70:7a:c8:
7a:ca:f3:0e:3f:78:13:7d:0f:b1:ad:ed:d5:f7:24:26:6c:e1:
94:db:9a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz45bvrVbRPcY6hnsjY3mcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTg3YzlhYzEwZjIwNTE1MmIxMjhlY2RjMjE1N2M5MDI0
OTE2YTQwHhcNMjUwODA0MDcwMjMxWhcNMjUwODA1MDcwMjMxWjAzMTEwLwYDVQQD
EygxOTI5ODVhNGU1ZWM3ZDVhNmQxMGI1YjI1ZGI2MWY0MjRlNDM4ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwyuHldtxgXIKjTJQIuVZ58d9ygA
Bmfcge3KRLcMHiWOCREZAd8qYCujKc5HQPG+zljpTSl/yb7QHS09Yi0oxDNscyAm
B2MKMZL7MLBiH/mFklCdMQLQpljN/QKMWQRiNcctfvhgCHoObNG7tp1vBZq50oMP
uASKLGC6NduSwnlX6SKnH1ZbcNdXFlhVPpTqY0Euo2uDdw+i4wFq+xUMdmHTsiQv
toeYEx3di7W1WUXovRkuxwGFt9kIV0yvshNj1gkCd05iZRi4W6B3r93Men99JngT
8WDQD1S/TWdJePDEsqSiEDpOH9FTZChP0usxz1WlcGbUapy+TMVIZwz9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkphaTl7H1abRC1sl22H0JOQ439MB8GA1UdIwQY
MBaAFNkYfJrBDyBRUrEo7NwhV8kCSRakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEt
MjRiMzA2MDZlMjE5LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEtMjRiMzA2MDZlMjE5
LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWv5EFLu
U1JZmD8UD8odlNMoGfhpAWXv0ckXHJPXm/s14vCCqq4hWU7uAQvGLp5X+xPoU66o
YT7M0ucIpPZ0P7o5Qzimt/0l9BI8gpU067n9OYkrJn9H/vAMZDIHJJ5ZFvJic8+U
5NuoWoDrqCE9DXnrtci0vumWFa5AJjK5a9nmVD+H1fS1vpbMofulk4OsDncx8sKu
mqTk69aa0LHFCAiUTtgNXJprgTeXNSOQzOJGcsliqJm1Qo79yCaEuHJHGW0SQElF
DQDogrYwMATQc8i1aCREg5WCGbHl8XSCDh1Nbx0Lq6qZcHrIesrzDj94E30Psa3t
1fckJmzhlNuabQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:06 2025 by rpki-client