
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: UiOL6navSUwAjMDNlyVzC6OVgtQqfarBhn4B9+cGV+0=
Subject key identifier: B0:2E:D6:58:05:27:38:91:AD:39:85:A3:0E:EC:95:2B:5B:4B:53:FE
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 019881D54CC139E9490984F2403ED965AB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 15AE
Signing time: Thu 07 Aug 2025 00:01:36 +0000
Manifest this update: Thu 07 Aug 2025 00:01:36 +0000
Manifest next update: Fri 08 Aug 2025 00:01:36 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: ur9Nwo0xgqdPXtCMFQLS97cLB3T1WUixWkhndOjmYic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:4c:c1:39:e9:49:09:84:f2:40:3e:d9:65:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Aug 7 00:01:36 2025 GMT
Not After : Aug 8 00:01:36 2025 GMT
Subject: CN=b02ed65805273891ad3985a30eec952b5b4b53fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:c1:4a:ed:64:43:9b:3c:af:67:b3:c8:94:
50:d3:b3:23:87:87:4c:f0:06:ab:3b:79:11:af:93:
41:76:b6:32:e0:2d:62:08:6a:be:9d:52:a0:96:f8:
e7:1c:6f:90:4c:df:35:36:ac:ee:73:36:2b:e7:20:
e8:98:29:19:99:6d:d1:a5:bc:c7:8c:0e:9c:58:63:
79:9d:88:c0:5b:52:1f:75:74:b9:9d:2f:3e:41:ac:
54:4d:cb:97:c9:36:5f:8f:a5:78:0e:cf:c2:ca:1a:
df:97:77:4a:33:3b:78:b4:cf:61:74:c7:b3:68:56:
1a:8b:44:d4:51:32:6c:50:92:73:c6:07:9c:09:13:
04:0d:89:5f:36:9f:75:6f:32:5e:92:19:fb:7d:a6:
b3:0b:87:7a:5a:7d:d5:34:a4:63:fd:e9:1a:7b:80:
ab:3a:22:f4:b2:81:76:8a:6f:c8:7f:39:a3:f9:4f:
da:61:a6:5e:5d:c8:fc:36:ac:dd:29:5a:1f:b8:09:
51:25:ad:aa:2c:5a:85:ff:13:0d:77:03:c8:bc:80:
67:27:e5:90:03:6a:6e:ac:50:dc:00:fe:fc:d0:83:
c2:93:46:a3:d8:10:4d:79:38:dc:b0:d7:08:7f:6c:
b5:0f:06:96:a2:c1:ee:9f:a4:ec:ea:9a:1c:76:d9:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2E:D6:58:05:27:38:91:AD:39:85:A3:0E:EC:95:2B:5B:4B:53:FE
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:57:95:2f:d8:f1:e7:f5:11:67:6a:5e:34:ab:4a:2b:ea:60:
38:66:59:25:87:5c:ba:5f:a1:8d:a8:fa:cc:8a:5e:4a:72:4a:
07:7a:01:32:7b:84:79:b6:4c:e4:ca:7e:8d:61:a6:b8:2e:64:
06:5a:ac:2c:16:57:2d:cc:cf:63:09:aa:88:10:f8:39:e0:27:
21:0f:00:a8:7e:07:17:38:42:17:9b:09:f7:87:59:29:99:6a:
9c:22:91:f3:0a:47:6b:ad:84:98:37:2f:5f:22:4b:e4:48:92:
2a:1c:b5:6d:23:7c:e5:fe:75:b8:03:db:fd:13:cd:99:ad:fb:
a8:21:97:13:71:d9:fb:9e:5f:c0:6c:53:4f:d6:f8:d0:0b:6b:
36:c9:1b:09:90:f5:e2:7c:49:09:9a:40:06:d0:2b:28:06:de:
42:26:66:27:12:03:1e:3c:89:a0:0a:31:ba:d2:72:a7:f0:f7:
dd:c5:6c:84:47:20:16:d9:6a:19:62:46:57:7e:68:f5:9c:85:
7f:58:99:bc:ab:40:ec:00:ee:38:78:e5:4b:20:0e:0a:9d:66:
eb:c6:3d:8f:88:7d:7a:e1:a1:0d:6c:4e:f1:e1:bb:21:c8:e3:
22:99:5e:d9:9e:dd:78:cc:8d:38:3e:a3:68:c7:d6:6d:b5:24:
7f:0a:fe:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1UzBOelJCYTyQD7ZZauAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQ2ZjQ4NDUzMGU1N2NjNjBlM2E4NjVhNjk1OTQ4NDc2
YzQxM2YwHhcNMjUwODA3MDAwMTM2WhcNMjUwODA4MDAwMTM2WjAzMTEwLwYDVQQD
EyhiMDJlZDY1ODA1MjczODkxYWQzOTg1YTMwZWVjOTUyYjViNGI1M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+rBSu1kQ5s8r2ezyJRQ07Mjh4dM
8AarO3kRr5NBdrYy4C1iCGq+nVKglvjnHG+QTN81NqzuczYr5yDomCkZmW3RpbzH
jA6cWGN5nYjAW1IfdXS5nS8+QaxUTcuXyTZfj6V4Ds/Cyhrfl3dKMzt4tM9hdMez
aFYai0TUUTJsUJJzxgecCRMEDYlfNp91bzJekhn7faazC4d6Wn3VNKRj/ekae4Cr
OiL0soF2im/Ifzmj+U/aYaZeXcj8NqzdKVofuAlRJa2qLFqF/xMNdwPIvIBnJ+WQ
A2purFDcAP780IPCk0aj2BBNeTjcsNcIf2y1DwaWosHun6Ts6pocdtn/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAu1lgFJziRrTmFow7slStbS1P+MB8GA1UdIwQY
MBaAFNmtb0hFMOV8xg46hlppWUhHbEE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUt
ZDE4MWQxZjc2MTI4LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUtZDE4MWQxZjc2MTI4
LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1eVL9jx
5/URZ2peNKtKK+pgOGZZJYdcul+hjaj6zIpeSnJKB3oBMnuEebZM5Mp+jWGmuC5k
BlqsLBZXLczPYwmqiBD4OeAnIQ8AqH4HFzhCF5sJ94dZKZlqnCKR8wpHa62EmDcv
XyJL5EiSKhy1bSN85f51uAPb/RPNma37qCGXE3HZ+55fwGxTT9b40AtrNskbCZD1
4nxJCZpABtArKAbeQiZmJxIDHjyJoAoxutJyp/D33cVshEcgFtlqGWJGV35o9ZyF
f1iZvKtA7ADuOHjlSyAOCp1m68Y9j4h9euGhDWxO8eG7IcjjIple2Z7deMyNOD6j
aMfWbbUkfwr+Hg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:58 2025 by rpki-client