Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: yjWmcwceTgoRwcDaYedDT0So4u7aZCCVtvW3aZMVHQ8=
Subject key identifier: F0:DF:E6:07:1B:09:AA:28:1B:AB:03:3E:1C:0B:B8:D8:96:3E:40:3F
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0198887B89614B6468B1BD95A26C091E4F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 06E8
Signing time: Fri 08 Aug 2025 07:00:54 +0000
Manifest this update: Fri 08 Aug 2025 07:00:54 +0000
Manifest next update: Sat 09 Aug 2025 07:00:54 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: +nHIqa6pAVKQfewMqlJW88TF9Go1LS61m5QvbIKSuiY=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:89:61:4b:64:68:b1:bd:95:a2:6c:09:1e:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Aug 8 07:00:54 2025 GMT
Not After : Aug 9 07:00:54 2025 GMT
Subject: CN=f0dfe6071b09aa281bab033e1c0bb8d8963e403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:da:ff:de:dc:05:c0:de:35:bb:c0:09:91:
b5:04:e7:7d:1a:49:61:36:a3:44:c2:4b:86:c8:7b:
da:5c:1c:39:33:69:bc:82:2f:15:13:13:f4:fb:f7:
13:c6:f8:19:33:eb:e2:43:57:46:49:06:a7:db:8f:
c1:25:02:f7:13:b1:d5:f7:63:bb:7f:df:28:3f:2a:
e3:f2:be:a2:e4:52:74:33:c5:5b:e5:9d:43:ba:4b:
3a:1f:9d:5b:3f:f3:f4:32:10:72:b3:8b:65:dc:d9:
b6:56:a9:69:ec:3f:da:37:87:9d:76:56:1b:fd:c1:
2a:e9:3e:81:ca:03:2c:ce:69:99:96:5d:70:8d:fd:
7d:cc:56:d0:26:5e:f5:df:8a:e1:33:71:4d:d7:8d:
eb:ac:66:30:9e:aa:b5:99:03:5b:2b:4d:7c:10:a1:
1e:7b:01:1c:b7:90:a9:26:d6:aa:ee:c6:5b:ee:cb:
1a:e7:89:be:8a:cf:91:ae:90:5f:7b:73:27:25:e3:
c7:f5:8b:f4:38:c1:eb:e5:9f:d4:81:f3:20:65:fd:
f0:e3:11:88:5c:97:49:95:ff:c2:2e:00:f0:c8:96:
d7:86:6d:f3:63:b8:b2:71:89:11:a7:68:3f:fe:79:
4f:a3:63:7b:fb:d0:ce:3d:b4:6b:00:68:01:6f:66:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:E6:07:1B:09:AA:28:1B:AB:03:3E:1C:0B:B8:D8:96:3E:40:3F
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:66:71:56:ce:4b:19:ea:a0:43:5c:01:5f:84:fa:c4:53:
d0:5b:19:9e:b7:43:03:1f:94:dc:b4:e4:a5:fa:d4:3a:b5:26:
bd:75:79:ee:15:36:a0:eb:58:97:bf:da:33:cd:e7:54:40:72:
18:b4:d3:08:53:fe:42:ea:c0:d6:a6:0d:4a:e8:a9:eb:e4:95:
1f:ec:1f:59:0a:ca:a9:7a:63:b1:75:4e:24:ee:2e:e2:91:41:
fc:25:4c:ba:71:a1:ca:4c:64:55:4d:5e:f6:ba:87:d9:79:8b:
85:ec:af:4e:4c:71:bf:37:04:20:94:48:38:ae:93:39:06:90:
e5:b3:98:a2:85:35:88:37:1c:6e:5b:07:cb:2e:92:b1:fe:12:
4f:62:a5:20:b4:f8:3b:0d:a1:dc:cb:24:eb:2d:6f:12:c6:b5:
c5:55:8d:c3:f3:8c:b5:2d:02:4c:3c:6d:75:33:5e:57:34:38:
6a:2e:b2:81:84:15:9f:52:98:ac:44:e7:4a:da:1d:a6:d5:32:
c3:d1:4f:88:ab:b7:d5:1b:62:b7:77:6f:83:09:df:9c:f0:c8:
9f:14:27:2b:5b:93:55:99:cf:eb:6a:0a:2b:b3:7a:1c:65:af:
5a:24:ef:fc:94:91:10:e3:07:59:6d:25:14:b9:6f:f9:e0:63:
2f:c9:7a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIe4lhS2Rosb2VomwJHk8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm
YjBjZDgwHhcNMjUwODA4MDcwMDU0WhcNMjUwODA5MDcwMDU0WjAzMTEwLwYDVQQD
EyhmMGRmZTYwNzFiMDlhYTI4MWJhYjAzM2UxYzBiYjhkODk2M2U0MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVTa/97cBcDeNbvACZG1BOd9Gklh
NqNEwkuGyHvaXBw5M2m8gi8VExP0+/cTxvgZM+viQ1dGSQan24/BJQL3E7HV92O7
f98oPyrj8r6i5FJ0M8Vb5Z1Duks6H51bP/P0MhBys4tl3Nm2Vqlp7D/aN4eddlYb
/cEq6T6BygMszmmZll1wjf19zFbQJl7134rhM3FN143rrGYwnqq1mQNbK018EKEe
ewEct5CpJtaq7sZb7ssa54m+is+RrpBfe3MnJePH9Yv0OMHr5Z/UgfMgZf3w4xGI
XJdJlf/CLgDwyJbXhm3zY7iycYkRp2g//nlPo2N7+9DOPbRrAGgBb2YIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDf5gcbCaooG6sDPhwLuNiWPkA/MB8GA1UdIwQY
MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt
NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi
LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd5mcVbO
SxnqoENcAV+E+sRT0FsZnrdDAx+U3LTkpfrUOrUmvXV57hU2oOtYl7/aM83nVEBy
GLTTCFP+QurA1qYNSuip6+SVH+wfWQrKqXpjsXVOJO4u4pFB/CVMunGhykxkVU1e
9rqH2XmLheyvTkxxvzcEIJRIOK6TOQaQ5bOYooU1iDccblsHyy6Ssf4ST2KlILT4
Ow2h3Msk6y1vEsa1xVWNw/OMtS0CTDxtdTNeVzQ4ai6ygYQVn1KYrETnStodptUy
w9FPiKu31Rtit3dvgwnfnPDInxQnK1uTVZnP62oKK7N6HGWvWiTv/JSREOMHWW0l
FLlv+eBjL8l6Bw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:06 2025 by rpki-client