Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: +yt/zq2YMK++HA4sShLLfT22AkSMoD3TXnoSR8E1hFY=
Subject key identifier: BF:D4:72:37:C9:6A:10:BD:34:4A:99:76:59:B6:B5:92:FC:68:C6:10
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 01987306AC1BD1698441F48D0B3D0C5864F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0532
Signing time: Mon 04 Aug 2025 03:01:13 +0000
Manifest this update: Mon 04 Aug 2025 03:01:13 +0000
Manifest next update: Tue 05 Aug 2025 03:01:13 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: yd4P6H5ow0x7ZU61aCmfHVZNg8ZIiIU45Iv8u2LjOnA=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ac:1b:d1:69:84:41:f4:8d:0b:3d:0c:58:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Aug 4 03:01:13 2025 GMT
Not After : Aug 5 03:01:13 2025 GMT
Subject: CN=bfd47237c96a10bd344a997659b6b592fc68c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:ec:32:fc:1a:7d:1f:dc:2b:a5:73:8d:ab:
9b:0c:45:7a:7b:82:a8:ee:a3:cb:40:37:07:a3:8e:
4e:f2:ea:2b:93:ed:88:b0:ca:2f:69:f2:60:13:f3:
b8:96:e5:4e:3c:8d:f3:45:2c:01:da:26:5b:94:c5:
da:eb:68:59:35:29:68:54:67:ca:43:d9:5a:7e:5d:
52:c4:39:81:aa:d5:5e:8f:11:4e:ef:16:ce:2b:5a:
47:de:2e:e8:8e:68:34:d6:5b:4e:b4:68:9a:ea:4a:
9c:3c:70:10:e2:1c:25:2a:d1:0f:d8:2d:43:27:ab:
a7:4f:58:18:8c:cd:37:31:2c:8b:58:3a:8e:1e:04:
5e:ca:16:60:1b:93:0c:ae:73:d6:0d:be:b0:b5:60:
b5:29:2c:90:f5:ab:6a:4f:3f:ef:c6:bb:64:b9:54:
8e:c9:b6:a5:12:00:37:72:98:57:ad:b9:24:42:f4:
82:af:97:58:af:d8:9c:ec:ce:19:9c:3a:bc:01:fd:
be:b1:5b:c4:e0:a8:44:b9:1e:d2:cb:87:8e:1d:c9:
9a:42:d3:02:93:5c:51:73:f5:c4:0d:6d:26:f3:f7:
9e:98:89:9d:19:42:f3:c6:29:a7:1c:5b:88:44:b6:
ea:b5:f5:40:6d:51:e7:ce:4a:e0:5b:98:72:ca:0c:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:72:37:C9:6A:10:BD:34:4A:99:76:59:B6:B5:92:FC:68:C6:10
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fb:09:0f:33:53:6e:01:d5:5a:a3:d3:05:8e:e8:95:7e:f8:
f3:37:aa:19:2c:ad:13:66:18:00:44:39:e7:ac:9f:b7:7b:e0:
b2:21:a6:28:a4:0b:1a:cd:5e:a8:ed:32:36:df:c6:6d:44:38:
72:bc:8e:2a:5a:56:db:a2:67:5a:06:fa:6e:a7:c2:0c:cd:1d:
ce:41:10:cc:2b:05:78:10:4b:e1:d5:1d:00:7a:27:00:4b:02:
c1:a3:3a:00:a2:d3:80:c8:f2:cb:97:90:fc:a8:c2:5e:22:53:
7e:0e:d2:83:fd:db:15:31:08:7a:fb:35:9d:94:ff:63:c5:7b:
2c:20:74:a9:fb:52:94:3a:d1:e6:2d:1b:4d:d2:19:03:5a:9c:
4b:54:5b:46:80:06:4c:60:96:9a:b6:3a:7c:43:87:c9:1a:98:
6d:5c:5b:89:60:57:01:66:87:e3:08:ec:39:ca:9d:3b:4b:27:
db:91:ee:08:84:f0:a6:99:d1:b6:54:d1:b5:cc:67:a2:48:29:
23:39:5b:c4:e6:d7:a1:6e:8b:e0:85:97:99:bd:f6:a6:98:7e:
b9:6c:7f:17:37:bd:fb:6c:29:19:c7:07:d0:3e:eb:c2:02:39:
63:41:77:58:94:5b:1f:fd:bf:57:7d:68:b4:b7:cf:96:df:73:
7a:b8:79:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBqwb0WmEQfSNCz0MWGT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUwODA0MDMwMTEzWhcNMjUwODA1MDMwMTEzWjAzMTEwLwYDVQQD
EyhiZmQ0NzIzN2M5NmExMGJkMzQ0YTk5NzY1OWI2YjU5MmZjNjhjNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdDsMvwafR/cK6VzjaubDEV6e4Ko
7qPLQDcHo45O8uork+2IsMovafJgE/O4luVOPI3zRSwB2iZblMXa62hZNSloVGfK
Q9lafl1SxDmBqtVejxFO7xbOK1pH3i7ojmg01ltOtGia6kqcPHAQ4hwlKtEP2C1D
J6unT1gYjM03MSyLWDqOHgReyhZgG5MMrnPWDb6wtWC1KSyQ9atqTz/vxrtkuVSO
ybalEgA3cphXrbkkQvSCr5dYr9ic7M4ZnDq8Af2+sVvE4KhEuR7Sy4eOHcmaQtMC
k1xRc/XEDW0m8/eemImdGULzximnHFuIRLbqtfVAbVHnzkrgW5hyygxlswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/UcjfJahC9NEqZdlm2tZL8aMYQMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/sJDzNT
bgHVWqPTBY7olX748zeqGSytE2YYAEQ556yft3vgsiGmKKQLGs1eqO0yNt/GbUQ4
cryOKlpW26JnWgb6bqfCDM0dzkEQzCsFeBBL4dUdAHonAEsCwaM6AKLTgMjyy5eQ
/KjCXiJTfg7Sg/3bFTEIevs1nZT/Y8V7LCB0qftSlDrR5i0bTdIZA1qcS1RbRoAG
TGCWmrY6fEOHyRqYbVxbiWBXAWaH4wjsOcqdO0sn25HuCITwppnRtlTRtcxnokgp
IzlbxObXoW6L4IWXmb32pph+uWx/Fze9+2wpGccH0D7rwgI5Y0F3WJRbH/2/V31o
tLfPlt9zerh5BA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:41 2025 by rpki-client