Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: jLQHkDCc39l7EzCR+ahL2GkfAUJzUSKbGJ0YzA/fSfQ=
Subject key identifier: E3:0E:44:20:67:4F:EE:0E:FB:C1:08:50:D5:AB:56:41:50:25:27:E5
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 019874191448530EFD98F2D8E8A59931BB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0221
Signing time: Mon 04 Aug 2025 08:00:57 +0000
Manifest this update: Mon 04 Aug 2025 08:00:57 +0000
Manifest next update: Tue 05 Aug 2025 08:00:57 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: lYGRZwUeaoXcK/I1tqHuy9pV2hcQQzO9eWSTTkk2Wr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:14:48:53:0e:fd:98:f2:d8:e8:a5:99:31:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Aug 4 08:00:57 2025 GMT
Not After : Aug 5 08:00:57 2025 GMT
Subject: CN=e30e4420674fee0efbc10850d5ab5641502527e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:47:bc:2f:c8:95:ad:74:3d:9f:59:5a:cf:
c0:76:a8:7c:7e:cd:c0:a0:f8:90:59:6f:24:cc:e7:
fa:13:f7:24:26:16:8d:2d:b9:2e:8a:f6:2d:05:0f:
44:32:0a:c2:4b:28:1a:e8:90:59:d6:9b:c5:9e:5c:
d2:59:1e:8e:8e:1f:86:6a:b3:8e:78:6f:48:d2:0e:
69:f5:0a:62:6e:91:51:8e:39:65:35:ba:d3:c5:74:
18:de:70:31:4c:c2:77:a2:1e:4f:89:bb:ac:5c:74:
b8:d0:68:7e:a6:22:b0:2d:0b:d1:f8:c1:aa:63:18:
0d:c2:f2:a0:c4:7c:0b:db:5f:35:c2:a6:81:06:92:
fe:06:df:4c:e3:33:06:c0:ca:ab:36:71:19:5e:1d:
39:5b:51:64:41:b8:f7:12:fa:98:cd:50:77:fe:dd:
65:9f:f1:77:4a:98:29:32:b1:58:b3:7a:42:3a:33:
71:54:e4:9a:9a:09:1b:4d:6d:98:0b:ab:a6:6b:e3:
a8:1e:53:37:a8:29:9a:63:a0:6b:e7:30:c5:44:e0:
c7:36:6e:ee:d0:0a:89:83:98:a6:f2:f6:01:4a:f7:
32:7e:47:ae:f5:d7:83:56:19:49:d1:f8:e3:86:e0:
9b:49:b6:08:d9:38:f4:9e:a2:76:23:92:ad:31:32:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:44:20:67:4F:EE:0E:FB:C1:08:50:D5:AB:56:41:50:25:27:E5
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:e8:33:12:d2:a8:7a:9d:70:35:5c:28:33:60:b6:84:b8:
60:02:43:6e:e2:1c:f9:50:fe:e2:41:58:c4:9f:8c:ae:32:9d:
b2:f6:b0:db:f6:82:47:71:fd:d3:5e:99:68:7e:f3:41:2c:a8:
04:52:4d:75:80:4b:d2:08:9e:43:c0:3a:ff:03:ae:eb:43:44:
8d:13:82:5a:3d:6f:1f:36:ba:83:b9:4a:85:bd:7d:db:e2:11:
62:7e:1c:67:81:1d:53:64:15:63:4d:af:af:98:da:9d:44:8c:
20:c9:be:43:6d:64:78:c4:6d:f6:15:a6:e1:ef:72:4a:b4:36:
3d:a8:5d:7e:00:30:e0:52:fe:31:a4:23:92:3d:d7:69:b9:26:
88:74:02:2d:47:b8:63:dc:e2:ae:52:66:97:ca:3d:e9:a6:84:
3d:03:fd:c7:ab:23:2f:8b:7c:7d:1e:b7:ce:b5:39:c7:66:06:
33:bc:a9:ad:a8:e0:5a:43:61:51:21:6c:df:48:ee:ed:bd:68:
c8:78:29:37:02:0d:4b:3d:9a:08:b6:54:2b:c1:7c:de:da:c5:
27:6b:1d:01:1e:5f:b4:0c:4f:b6:75:56:f6:68:c6:35:c9:3e:
3f:ca:ab:44:8b:3b:81:91:e3:10:64:c1:18:f8:93:6c:ef:9a:
ee:3e:7d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GRRIUw79mPLY6KWZMbs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MGFkMTExMTMxODMwMGJhNjc4ZTg4ZTA1MDJiMWZjNTFl
MzUzNzkwHhcNMjUwODA0MDgwMDU3WhcNMjUwODA1MDgwMDU3WjAzMTEwLwYDVQQD
EyhlMzBlNDQyMDY3NGZlZTBlZmJjMTA4NTBkNWFiNTY0MTUwMjUyN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ZHvC/Ila10PZ9ZWs/Adqh8fs3A
oPiQWW8kzOf6E/ckJhaNLbkuivYtBQ9EMgrCSyga6JBZ1pvFnlzSWR6Ojh+GarOO
eG9I0g5p9QpibpFRjjllNbrTxXQY3nAxTMJ3oh5PibusXHS40Gh+piKwLQvR+MGq
YxgNwvKgxHwL2181wqaBBpL+Bt9M4zMGwMqrNnEZXh05W1FkQbj3EvqYzVB3/t1l
n/F3SpgpMrFYs3pCOjNxVOSamgkbTW2YC6uma+OoHlM3qCmaY6Br5zDFRODHNm7u
0AqJg5im8vYBSvcyfkeu9deDVhlJ0fjjhuCbSbYI2Tj0nqJ2I5KtMTKSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMORCBnT+4O+8EIUNWrVkFQJSflMB8GA1UdIwQY
MBaAFNkK0RETGDALpnjojgUCsfxR41N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzIt
NWEyN2I4YWYyOGE1LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzItNWEyN2I4YWYyOGE1
LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpnoMxLS
qHqdcDVcKDNgtoS4YAJDbuIc+VD+4kFYxJ+MrjKdsvaw2/aCR3H9016ZaH7zQSyo
BFJNdYBL0gieQ8A6/wOu60NEjROCWj1vHza6g7lKhb192+IRYn4cZ4EdU2QVY02v
r5janUSMIMm+Q21keMRt9hWm4e9ySrQ2PahdfgAw4FL+MaQjkj3XabkmiHQCLUe4
Y9zirlJml8o96aaEPQP9x6sjL4t8fR63zrU5x2YGM7yprajgWkNhUSFs30ju7b1o
yHgpNwINSz2aCLZUK8F83trFJ2sdAR5ftAxPtnVW9mjGNck+P8qrRIs7gZHjEGTB
GPiTbO+a7j59hA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:00 2025 by rpki-client