Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: inXNz3iRXB+vHZZ0Tn53b8PSOgqjFhv9qjWqQwSJG2U=
Subject key identifier: 80:FF:CF:26:1B:25:BE:79:BE:DF:91:EA:ED:2F:84:0A:3E:A1:7E:29
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019873E403A0B0608CE243DEA747FFF27C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 15A4
Signing time: Mon 04 Aug 2025 07:02:59 +0000
Manifest this update: Mon 04 Aug 2025 07:02:59 +0000
Manifest next update: Tue 05 Aug 2025 07:02:59 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: KHX62zQRxierHBOwNt/wkiXMRhLCEtNTvjl3LlSsyGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:03:a0:b0:60:8c:e2:43:de:a7:47:ff:f2:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Aug 4 07:02:59 2025 GMT
Not After : Aug 5 07:02:59 2025 GMT
Subject: CN=80ffcf261b25be79bedf91eaed2f840a3ea17e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:8b:09:f9:65:53:c3:53:cf:62:a2:a6:a6:
39:e7:0d:23:c8:05:6c:c7:b2:5e:40:ab:b4:e9:9d:
0e:7e:8e:7d:96:bc:86:c6:0c:1f:92:d7:81:ff:a7:
5f:83:03:28:8f:78:92:e3:4d:f1:8d:a9:dd:86:8e:
c8:cb:57:82:2a:46:63:82:a7:80:b3:e0:de:1f:8c:
49:5c:9f:ba:60:d3:54:ef:e6:95:31:87:70:6f:bc:
87:ad:e1:93:ac:17:e7:1a:35:a8:1d:60:08:05:bc:
e6:ba:e5:78:7c:3e:3c:56:40:25:59:8f:56:a2:67:
c6:1d:1e:ac:a9:f5:1f:e4:fa:8d:f3:30:37:9e:14:
da:ed:8d:af:bf:0f:7f:32:18:8b:a8:9e:77:bb:4d:
ca:01:b4:10:01:fa:91:2b:ca:5f:fe:80:37:ba:53:
c4:68:e8:41:6c:27:8b:8c:51:2b:af:6b:6f:24:a5:
74:55:cb:aa:df:f5:72:cc:61:2d:48:1a:fc:3a:d2:
f5:2b:14:a8:98:f2:fb:2c:13:89:77:8a:c5:21:82:
db:e7:e5:49:75:2e:3f:0d:fa:c6:26:04:f9:06:7a:
69:9f:14:ec:01:e7:24:72:75:98:7c:92:78:90:bf:
04:ad:a1:c2:6c:ef:ef:b5:33:b8:c2:07:85:ab:13:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:CF:26:1B:25:BE:79:BE:DF:91:EA:ED:2F:84:0A:3E:A1:7E:29
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:de:d7:6a:43:47:da:f7:88:7c:7b:ec:a3:e5:19:23:30:65:
ec:b6:7c:fe:bb:b0:28:5c:08:b3:ad:6a:63:e6:ad:f2:ed:0c:
32:52:cc:b2:54:62:e4:5f:97:91:b0:7d:89:ec:c9:fb:e9:91:
6b:64:c0:f2:3d:1b:e4:15:5f:d9:93:08:67:43:cc:f6:d0:f1:
a4:d4:f5:3e:7d:cb:84:7c:18:0e:73:51:7d:03:27:e5:8f:b9:
5a:5b:11:ce:92:ba:80:e4:d0:95:32:1b:71:2e:ec:6f:e4:5e:
d9:40:2c:7f:0d:26:f0:f2:64:c1:2c:27:39:fb:9c:83:8d:05:
0c:5d:3a:b5:55:8f:7a:dd:0c:93:cc:a4:02:d4:6c:6a:ae:d0:
4a:a4:4f:a2:ee:26:9b:b2:bd:6a:3d:37:77:6d:55:77:40:82:
4e:20:e3:83:76:5c:dd:b8:5e:0a:0f:40:24:9f:48:d3:af:24:
32:f8:6a:b2:7e:50:b6:a8:f2:0b:9b:83:70:38:34:20:3d:11:
57:db:da:fb:19:b3:1a:c0:d2:f3:ae:0c:6b:1f:ac:94:8a:30:
f8:cb:9e:7f:1c:ab:f8:4e:a5:d9:8d:e7:d4:a7:4a:3b:16:3f:
d4:fc:eb:1b:a9:69:d2:05:6f:9c:5b:13:6a:7b:d9:68:1b:b7:
22:25:98:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz5AOgsGCM4kPep0f/8nyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4
ODBmM2IwHhcNMjUwODA0MDcwMjU5WhcNMjUwODA1MDcwMjU5WjAzMTEwLwYDVQQD
Eyg4MGZmY2YyNjFiMjViZTc5YmVkZjkxZWFlZDJmODQwYTNlYTE3ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolOLCfllU8NTz2KipqY55w0jyAVs
x7JeQKu06Z0Ofo59lryGxgwfkteB/6dfgwMoj3iS403xjandho7Iy1eCKkZjgqeA
s+DeH4xJXJ+6YNNU7+aVMYdwb7yHreGTrBfnGjWoHWAIBbzmuuV4fD48VkAlWY9W
omfGHR6sqfUf5PqN8zA3nhTa7Y2vvw9/MhiLqJ53u03KAbQQAfqRK8pf/oA3ulPE
aOhBbCeLjFErr2tvJKV0Vcuq3/VyzGEtSBr8OtL1KxSomPL7LBOJd4rFIYLb5+VJ
dS4/DfrGJgT5BnppnxTsAeckcnWYfJJ4kL8EraHCbO/vtTO4wgeFqxOcuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID/zyYbJb55vt+R6u0vhAo+oX4pMB8GA1UdIwQY
MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt
NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh
LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv97XakNH
2veIfHvso+UZIzBl7LZ8/ruwKFwIs61qY+at8u0MMlLMslRi5F+XkbB9iezJ++mR
a2TA8j0b5BVf2ZMIZ0PM9tDxpNT1Pn3LhHwYDnNRfQMn5Y+5WlsRzpK6gOTQlTIb
cS7sb+Re2UAsfw0m8PJkwSwnOfucg40FDF06tVWPet0Mk8ykAtRsaq7QSqRPou4m
m7K9aj03d21Vd0CCTiDjg3Zc3bheCg9AJJ9I068kMvhqsn5QtqjyC5uDcDg0ID0R
V9va+xmzGsDS864Max+slIow+Muefxyr+E6l2Y3n1KdKOxY/1PzrG6lp0gVvnFsT
anvZaBu3IiWYNw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:01 2025 by rpki-client