Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: xYQn56qeA3dmXWBCMO7NwjRrb00TwG0Z60r8EqULDc0=
Subject key identifier: 47:5A:67:88:71:E0:BD:3C:91:17:6A:98:ED:39:3F:DD:BC:29:7D:10
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 019885432D12757B780146EC5D8BCBDAEE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 16:00:28 +0000
Manifest this update: Thu 07 Aug 2025 16:00:28 +0000
Manifest next update: Fri 08 Aug 2025 16:00:28 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: /hKw2zQYxf/kvNOS9gCLCqL0guUxU7uE+UcmJSBijVs=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:2d:12:75:7b:78:01:46:ec:5d:8b:cb:da:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Aug 7 16:00:28 2025 GMT
Not After : Aug 8 16:00:28 2025 GMT
Subject: CN=475a678871e0bd3c91176a98ed393fddbc297d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:ba:39:49:28:2c:61:f1:89:f7:7a:67:6e:
22:be:18:54:dd:88:f8:ee:ef:e1:d5:15:5e:97:4d:
5d:72:6a:a2:8d:8a:61:33:2a:56:c9:b6:3d:88:f2:
82:c1:5c:36:5d:07:8c:1f:72:c1:c4:68:1b:e2:ae:
8c:a3:09:f5:9e:f6:7c:b2:2d:1c:93:dd:a8:4d:e2:
7b:0e:2f:bb:88:db:36:d3:a8:fc:50:05:b3:19:8c:
11:a3:98:13:1b:4c:5c:3b:bc:63:f3:ec:16:68:a7:
dd:da:ee:47:e6:21:4d:3e:40:2a:86:ce:6b:cd:bb:
1d:74:9d:d2:67:c2:92:72:5a:37:62:43:c3:47:cb:
72:49:eb:b6:aa:43:ff:9c:7a:5e:17:e8:3d:ca:e9:
a7:17:fe:de:22:45:9a:99:b8:8f:72:a1:5d:a5:de:
ca:19:81:0a:15:9d:2f:b6:e6:d1:41:82:16:30:a0:
e6:3b:b4:b6:46:f5:b4:eb:eb:ad:c8:81:31:30:28:
84:76:96:43:3e:88:21:fc:c2:2a:e9:33:46:4b:66:
ce:62:88:33:11:d7:58:7c:a2:b8:d6:a6:b2:05:95:
c6:20:18:9f:3d:56:8d:d3:d3:8a:4f:62:27:a5:67:
b8:44:17:aa:0f:34:1a:ed:1d:a0:16:41:ab:63:1b:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:67:88:71:E0:BD:3C:91:17:6A:98:ED:39:3F:DD:BC:29:7D:10
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:03:a1:66:39:cc:59:87:42:14:3f:24:0f:4b:e0:66:1c:53:
4c:95:f6:2b:f2:bc:df:f7:95:ab:ed:e5:3e:bc:1b:20:5a:d7:
b3:ba:2c:33:9f:04:3e:2e:26:b4:a1:e1:ea:ad:91:fc:89:d7:
a5:3c:4f:d6:dc:58:e9:72:8b:d4:23:17:a2:ef:f0:da:23:4f:
3f:a8:fb:20:8f:8b:77:4f:f6:00:36:5c:19:e6:b2:4e:66:f1:
58:16:51:99:73:de:cd:6b:4f:89:df:4f:4c:2f:7b:47:da:ed:
7e:a5:67:9d:14:1b:9f:e0:50:ca:48:31:f8:d0:db:82:84:96:
07:c0:ca:13:82:ae:bb:f0:55:3a:1b:1b:20:2c:b1:12:fd:5f:
40:7f:37:68:12:ea:07:4b:1d:c2:aa:fd:a8:eb:07:29:d2:2e:
16:76:eb:61:ac:9f:85:99:37:f7:b7:ea:b1:1b:f8:a2:ed:ef:
bc:16:17:6b:ed:4b:46:8f:95:34:f1:4c:d7:fc:8d:bf:25:19:
ae:ac:a0:d9:55:26:57:96:14:a2:8b:37:53:29:33:d0:5a:db:
85:08:1d:b1:a1:d5:f1:73:43:f9:cd:07:89:92:90:60:49:ab:
ea:d7:a7:63:77:00:89:84:e5:71:a4:b6:91:78:4d:46:8b:7e:
72:85:86:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQy0SdXt4AUbsXYvL2u6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjUwODA3MTYwMDI4WhcNMjUwODA4MTYwMDI4WjAzMTEwLwYDVQQD
Eyg0NzVhNjc4ODcxZTBiZDNjOTExNzZhOThlZDM5M2ZkZGJjMjk3ZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRe6OUkoLGHxifd6Z24ivhhU3Yj4
7u/h1RVel01dcmqijYphMypWybY9iPKCwVw2XQeMH3LBxGgb4q6Mown1nvZ8si0c
k92oTeJ7Di+7iNs206j8UAWzGYwRo5gTG0xcO7xj8+wWaKfd2u5H5iFNPkAqhs5r
zbsddJ3SZ8KSclo3YkPDR8tySeu2qkP/nHpeF+g9yumnF/7eIkWambiPcqFdpd7K
GYEKFZ0vtubRQYIWMKDmO7S2RvW06+utyIExMCiEdpZDPogh/MIq6TNGS2bOYogz
EddYfKK41qayBZXGIBifPVaN09OKT2InpWe4RBeqDzQa7R2gFkGrYxtkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdaZ4hx4L08kRdqmO05P928KX0QMB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwOhZjnM
WYdCFD8kD0vgZhxTTJX2K/K83/eVq+3lPrwbIFrXs7osM58EPi4mtKHh6q2R/InX
pTxP1txY6XKL1CMXou/w2iNPP6j7II+Ld0/2ADZcGeayTmbxWBZRmXPezWtPid9P
TC97R9rtfqVnnRQbn+BQykgx+NDbgoSWB8DKE4Kuu/BVOhsbICyxEv1fQH83aBLq
B0sdwqr9qOsHKdIuFnbrYayfhZk397fqsRv4ou3vvBYXa+1LRo+VNPFM1/yNvyUZ
rqyg2VUmV5YUoos3Uykz0FrbhQgdsaHV8XND+c0HiZKQYEmr6tenY3cAiYTlcaS2
kXhNRot+coWGiQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:10 2025 by rpki-client