Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: XVG4j7D0a7Dit9HFUblp+IE18MkKZ5eDLx5aG7ywX8Y=
Subject key identifier: 59:6D:4F:DF:38:8E:72:C7:39:C5:C0:DB:CA:06:C5:2C:E7:97:F4:F3
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01987C77512C0B05AD16245B0574843A8D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0D5E
Signing time: Tue 05 Aug 2025 23:00:51 +0000
Manifest this update: Tue 05 Aug 2025 23:00:51 +0000
Manifest next update: Wed 06 Aug 2025 23:00:51 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: rO6fc31xVtzY7uUvyD1r3Fs72Kj9XyzihcWJJTsNFBg=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: KV03Rnxi6WRZwO1a4oGeC3HanlY.roa (hash: 7zq8HVJc+s32NHnBgUroFGKyISFlCLE015+0grkcycE=)
4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:51:2c:0b:05:ad:16:24:5b:05:74:84:3a:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Aug 5 23:00:51 2025 GMT
Not After : Aug 6 23:00:51 2025 GMT
Subject: CN=596d4fdf388e72c739c5c0dbca06c52ce797f4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:77:39:2d:76:66:ab:76:d9:47:cd:3a:5d:
10:40:61:ee:00:aa:41:8d:df:d7:db:7f:9c:2c:83:
27:d0:cc:a7:9d:28:94:94:0b:fd:56:cb:01:63:1b:
a5:50:07:d2:eb:3f:e7:38:50:01:a7:8c:6e:21:11:
5c:70:4f:c1:7e:74:4c:e8:80:f9:55:16:d6:76:64:
05:27:26:8e:c8:86:11:06:3f:ae:4b:ad:c2:75:bc:
b5:7c:83:4e:02:42:dc:d0:0a:4d:4f:3b:e8:76:ce:
e7:5c:17:fd:a1:9c:8e:21:1b:76:3b:ed:20:9a:fb:
7d:97:f9:b1:f1:1d:6f:1f:ba:9e:2d:4d:2c:2a:f2:
7b:3f:27:d7:73:96:58:0a:56:8c:b1:9a:1b:03:3b:
a1:0a:c8:b8:ac:c7:65:09:6e:f5:8a:4b:59:23:f1:
ff:62:dd:15:10:f2:4e:72:61:05:8c:f4:44:cf:a6:
d3:6c:38:e9:b9:a5:34:15:95:c3:f2:58:30:0f:dc:
f3:3e:b2:3f:86:e5:47:2c:68:5c:22:b7:a2:6e:fb:
0a:e9:68:dd:7c:dc:b3:05:33:e9:ab:0f:ca:a9:2d:
48:e2:01:59:c8:5a:22:c3:dd:ea:50:4d:c0:3f:24:
6e:56:18:ec:25:66:1c:63:88:dc:c4:2e:b3:07:8a:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:4F:DF:38:8E:72:C7:39:C5:C0:DB:CA:06:C5:2C:E7:97:F4:F3
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:a4:d7:f7:d9:e1:60:80:77:af:51:70:b8:e3:d3:97:59:
20:3a:5b:90:ad:4e:e4:7b:75:57:a7:bf:ef:7c:a0:63:06:48:
50:21:9a:b2:49:3a:01:0b:a8:11:05:41:63:29:85:b6:cb:7d:
5e:1b:01:90:11:2d:34:8c:c2:e9:49:ec:a6:d9:6e:00:c9:61:
68:3d:51:62:eb:52:b7:ec:58:cc:91:db:6c:49:41:bd:13:8f:
a4:a4:58:21:9e:15:74:c6:2a:27:d4:56:0f:14:3f:a5:3a:1e:
58:f2:eb:a1:16:5f:7b:0c:e1:9d:34:69:44:6e:9f:d2:88:d6:
a0:72:fe:e0:33:15:00:d9:46:4f:4e:38:b8:75:42:f8:9d:1c:
ee:30:db:73:b4:02:7f:35:62:45:26:6f:4e:8a:03:75:75:7c:
91:ea:cf:5c:18:19:f1:9e:ff:98:0b:9d:dd:e3:79:ee:d9:d1:
fa:15:e1:7e:be:d6:55:2d:1b:c3:ea:82:1e:94:37:5e:37:25:
e2:be:ff:91:74:64:17:7f:76:ef:f2:85:18:86:4c:a1:37:8b:
0a:dd:ac:11:50:c1:6e:e7:8c:db:68:34:99:c1:0a:d6:cf:69:
b0:13:56:0f:7e:d7:bf:d9:3a:bb:a4:5a:82:25:cb:b8:8e:f6:
5e:7f:40:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d1EsCwWtFiRbBXSEOo1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjUwODA1MjMwMDUxWhcNMjUwODA2MjMwMDUxWjAzMTEwLwYDVQQD
Eyg1OTZkNGZkZjM4OGU3MmM3MzljNWMwZGJjYTA2YzUyY2U3OTdmNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUJ3OS12Zqt22UfNOl0QQGHuAKpB
jd/X23+cLIMn0MynnSiUlAv9VssBYxulUAfS6z/nOFABp4xuIRFccE/BfnRM6ID5
VRbWdmQFJyaOyIYRBj+uS63Cdby1fINOAkLc0ApNTzvods7nXBf9oZyOIRt2O+0g
mvt9l/mx8R1vH7qeLU0sKvJ7PyfXc5ZYClaMsZobAzuhCsi4rMdlCW71iktZI/H/
Yt0VEPJOcmEFjPREz6bTbDjpuaU0FZXD8lgwD9zzPrI/huVHLGhcIreibvsK6Wjd
fNyzBTPpqw/KqS1I4gFZyFoiw93qUE3APyRuVhjsJWYcY4jcxC6zB4rtGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFltT984jnLHOcXA28oGxSznl/TzMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATguk1/fZ
4WCAd69RcLjj05dZIDpbkK1O5Ht1V6e/73ygYwZIUCGaskk6AQuoEQVBYymFtst9
XhsBkBEtNIzC6UnsptluAMlhaD1RYutSt+xYzJHbbElBvROPpKRYIZ4VdMYqJ9RW
DxQ/pToeWPLroRZfewzhnTRpRG6f0ojWoHL+4DMVANlGT044uHVC+J0c7jDbc7QC
fzViRSZvTooDdXV8kerPXBgZ8Z7/mAud3eN57tnR+hXhfr7WVS0bw+qCHpQ3Xjcl
4r7/kXRkF3927/KFGIZMoTeLCt2sEVDBbueM22g0mcEK1s9psBNWD37Xv9k6u6Ra
giXLuI72Xn9AaA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:47 2025 by rpki-client