Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: QFxXkRIiA2XN041Zy+vdBQDtNVgNnUbQYTqWwGcNAAs=
Subject key identifier: E0:9A:8B:98:B0:53:25:EE:F5:77:CB:5A:C0:BC:D2:DD:FC:52:40:A5
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 0198733D3D20481E4B9069887519E5FD8186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 54jQMhV0RzPg2IQkjFk9EnuvWICzBRjF6uTQRcO8ODw=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3d:20:48:1e:4b:90:69:88:75:19:e5:fd:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=e09a8b98b05325eef577cb5ac0bcd2ddfc5240a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:31:c7:d9:8b:5d:ae:3b:49:da:3b:b3:e9:
ca:7c:19:38:a8:62:9e:ca:eb:03:44:64:b7:e9:54:
09:84:ae:e1:4d:b4:23:6f:96:6c:6b:5c:d7:2d:aa:
5d:cd:86:dd:07:d0:7f:dc:94:65:3b:a9:fb:31:ec:
8a:f4:d5:3d:b0:0c:0c:8d:aa:66:68:ef:b4:32:ae:
20:cb:24:95:b0:ea:f7:20:e8:b1:5c:ad:1b:08:84:
e9:34:8e:db:a7:86:0a:9a:1b:57:c2:2a:07:72:6f:
6c:d2:cb:46:b9:4c:6d:8f:7b:5b:74:b3:25:d6:de:
2e:1c:15:fc:b6:86:f2:89:38:04:f8:1a:dc:94:2c:
bd:d1:8d:a9:ad:c5:fc:b2:88:94:2f:cb:62:3d:8b:
23:19:81:f4:f9:ed:4d:92:c0:e6:0d:66:0d:6e:f7:
37:ec:be:27:3b:d6:1c:f8:65:eb:5f:40:87:7e:aa:
83:f2:94:74:24:c6:61:d2:ca:fd:ef:e8:5e:5c:0b:
1b:1c:c3:ef:84:19:7d:3b:38:98:71:29:9f:55:ea:
64:e2:db:38:36:d1:7c:42:17:50:3d:b1:25:97:ae:
df:cb:c0:cc:52:b0:e3:97:e3:1f:ea:00:93:75:8b:
52:12:20:21:b7:75:7f:f4:bf:1c:df:4c:c3:f3:2c:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:8B:98:B0:53:25:EE:F5:77:CB:5A:C0:BC:D2:DD:FC:52:40:A5
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:72:74:8c:4e:d3:17:70:8d:c6:91:e0:31:33:fa:43:5a:
15:bc:0f:3a:3e:82:40:a2:9d:f6:5b:8d:0f:7b:04:c3:ad:69:
3f:98:d4:dd:ff:9e:b8:c9:03:7a:f1:e2:87:0c:da:45:d3:ae:
47:7d:5f:82:b7:88:a3:50:5b:61:f9:cf:56:52:dc:53:7b:7d:
90:d3:8a:e5:53:e8:40:56:6c:d9:99:f0:7f:30:84:ca:93:e0:
cd:bf:ee:1a:f5:71:94:af:6b:36:ca:36:9e:0a:5e:df:6f:da:
17:a4:d7:2b:15:45:da:a8:04:42:36:54:e9:4c:56:d2:9c:e6:
0f:1d:26:20:b8:c9:52:c8:60:55:c6:36:6d:26:d0:6d:1f:90:
1a:15:b6:d5:07:d0:89:93:e7:78:fc:6f:7c:11:50:3b:0d:8b:
af:37:04:1b:ea:50:2d:ef:a1:e3:59:35:95:b6:73:eb:28:70:
f9:f6:93:61:b2:da:6b:c8:6f:4b:6b:56:07:16:87:86:3f:35:
b6:c1:7f:35:f1:14:22:f5:9a:d1:fc:ad:4d:bd:0b:47:2e:67:
1a:b5:bf:3f:8c:8f:2e:87:f1:90:16:8a:ea:08:ec:37:9b:2b:
69:50:a3:11:28:ca:8d:6e:25:c3:40:10:17:f1:b9:fa:2b:e2:
21:4b:fd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPT0gSB5LkGmIdRnl/YGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2
N2EwYzEwHhcNMjUwODA0MDQwMDQ5WhcNMjUwODA1MDQwMDQ5WjAzMTEwLwYDVQQD
EyhlMDlhOGI5OGIwNTMyNWVlZjU3N2NiNWFjMGJjZDJkZGZjNTI0MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZIxx9mLXa47Sdo7s+nKfBk4qGKe
yusDRGS36VQJhK7hTbQjb5Zsa1zXLapdzYbdB9B/3JRlO6n7MeyK9NU9sAwMjapm
aO+0Mq4gyySVsOr3IOixXK0bCITpNI7bp4YKmhtXwioHcm9s0stGuUxtj3tbdLMl
1t4uHBX8tobyiTgE+BrclCy90Y2prcX8soiUL8tiPYsjGYH0+e1NksDmDWYNbvc3
7L4nO9Yc+GXrX0CHfqqD8pR0JMZh0sr97+heXAsbHMPvhBl9OziYcSmfVepk4ts4
NtF8QhdQPbEll67fy8DMUrDjl+Mf6gCTdYtSEiAht3V/9L8c30zD8yzhBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCai5iwUyXu9XfLWsC80t38UkClMB8GA1UdIwQY
MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt
Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw
LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhVydIxO
0xdwjcaR4DEz+kNaFbwPOj6CQKKd9luND3sEw61pP5jU3f+euMkDevHihwzaRdOu
R31fgreIo1BbYfnPVlLcU3t9kNOK5VPoQFZs2ZnwfzCEypPgzb/uGvVxlK9rNso2
ngpe32/aF6TXKxVF2qgEQjZU6UxW0pzmDx0mILjJUshgVcY2bSbQbR+QGhW21QfQ
iZPnePxvfBFQOw2LrzcEG+pQLe+h41k1lbZz6yhw+faTYbLaa8hvS2tWBxaHhj81
tsF/NfEUIvWa0fytTb0LRy5nGrW/P4yPLofxkBaK6gjsN5sraVCjESjKjW4lw0AQ
F/G5+iviIUv9bQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:18 2025 by rpki-client