Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: Tyf6WB8gnaRZjFHMnfLgnmqs5wkK6XvrrHqTv+oYTpg=
Subject key identifier: 44:A9:59:1F:99:BD:B7:B3:4B:3A:9B:EE:AF:8E:1B:6F:75:00:B6:62
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 01988467B195F63364BA77FBEFB787B064F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 0F99
Signing time: Thu 07 Aug 2025 12:00:44 +0000
Manifest this update: Thu 07 Aug 2025 12:00:44 +0000
Manifest next update: Fri 08 Aug 2025 12:00:44 +0000
Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: Q9P0/owgY+cgGVLp2CYa3oFuXQtq7fFfl3uXT2ORxPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:b1:95:f6:33:64:ba:77:fb:ef:b7:87:b0:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Aug 7 12:00:44 2025 GMT
Not After : Aug 8 12:00:44 2025 GMT
Subject: CN=44a9591f99bdb7b34b3a9beeaf8e1b6f7500b662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:58:88:52:c1:cc:82:2f:9d:ba:23:33:fa:8a:
2d:23:c4:d6:5b:be:54:72:cd:fc:d9:f2:aa:dd:15:
46:a8:cc:d5:91:df:97:0d:8d:67:4b:12:11:6e:4f:
68:7b:2e:1b:3d:9b:7c:60:6a:5b:8d:05:d5:f2:46:
49:f5:93:56:ef:44:e9:1e:77:0b:1d:3a:c2:06:70:
05:0d:a3:64:6a:23:98:d1:95:b4:9b:76:5c:ab:7b:
f9:e5:3b:1c:f1:5d:54:70:0b:f3:86:9c:b7:7f:ba:
48:ea:ab:56:ce:61:0b:4d:ae:97:4a:f9:3b:1a:2b:
f5:d2:ab:7d:0e:99:4b:a9:a2:ce:d2:64:e7:b5:c3:
a8:8a:8a:51:64:f3:4e:70:83:1a:ac:a0:96:ae:15:
85:32:81:12:72:15:82:6c:1d:35:2b:4a:5f:ec:35:
cf:8c:54:c0:c0:60:49:b5:9c:da:c0:31:ae:45:90:
cd:9b:60:c3:90:74:32:f7:73:ea:81:02:bf:bd:73:
43:4d:9d:fd:73:8f:0a:17:30:bc:9b:96:a1:d7:39:
0a:9e:63:e5:e1:a7:84:00:90:79:ad:52:f3:7c:eb:
8d:46:5b:af:46:3b:16:07:f0:c3:b4:fb:99:4c:ac:
73:8b:fd:b5:19:4e:e3:e3:4a:40:c0:60:83:aa:cd:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A9:59:1F:99:BD:B7:B3:4B:3A:9B:EE:AF:8E:1B:6F:75:00:B6:62
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:71:ad:a5:3f:0b:62:02:86:28:3e:bd:d5:cd:1b:f8:61:45:
5f:5b:ad:63:91:5f:e8:44:4b:29:1b:95:d8:d2:d9:ac:d3:fb:
6e:d8:a7:fe:02:71:d2:55:aa:f9:c0:43:14:2a:00:a9:b6:0a:
ae:dc:b0:ef:83:fc:8a:e8:32:98:27:70:4b:a1:41:93:5f:59:
fa:cb:00:81:7e:17:cd:33:27:3f:cb:9a:8f:9f:c8:be:8b:53:
a8:91:a8:81:ae:63:32:a0:cf:a3:80:cb:60:4c:b0:f6:98:a9:
11:f5:77:9b:32:11:40:ca:f7:67:f0:c6:29:4f:1f:87:56:5d:
bf:1c:19:83:fb:10:2a:19:ca:7e:12:62:a7:a2:3b:db:ef:47:
60:4e:76:be:ea:18:71:fb:a6:c4:50:a3:d7:94:c3:60:a2:a3:
92:2d:26:72:25:2f:08:10:ea:03:dd:72:34:29:a5:22:d6:fa:
cf:e9:07:44:e3:19:8e:0e:ba:5b:80:4b:19:f0:5a:34:27:df:
24:07:9e:67:51:e7:48:52:36:c9:24:a6:c2:44:8c:65:30:f0:
ec:49:a5:bc:ed:81:51:88:e2:7a:fe:ba:9a:de:d6:bd:81:13:
6c:55:e8:c9:34:54:30:0b:25:fb:e5:a2:21:53:1e:2e:4b:ad:
33:65:ce:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEZ7GV9jNkunf777eHsGT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjUwODA3MTIwMDQ0WhcNMjUwODA4MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg0NGE5NTkxZjk5YmRiN2IzNGIzYTliZWVhZjhlMWI2Zjc1MDBiNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FiIUsHMgi+duiMz+ootI8TWW75U
cs382fKq3RVGqMzVkd+XDY1nSxIRbk9oey4bPZt8YGpbjQXV8kZJ9ZNW70TpHncL
HTrCBnAFDaNkaiOY0ZW0m3Zcq3v55Tsc8V1UcAvzhpy3f7pI6qtWzmELTa6XSvk7
Giv10qt9DplLqaLO0mTntcOoiopRZPNOcIMarKCWrhWFMoESchWCbB01K0pf7DXP
jFTAwGBJtZzawDGuRZDNm2DDkHQy93PqgQK/vXNDTZ39c48KFzC8m5ah1zkKnmPl
4aeEAJB5rVLzfOuNRluvRjsWB/DDtPuZTKxzi/21GU7j40pAwGCDqs0TEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESpWR+ZvbezSzqb7q+OG291ALZiMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3GtpT8L
YgKGKD691c0b+GFFX1utY5Ff6ERLKRuV2NLZrNP7btin/gJx0lWq+cBDFCoAqbYK
rtyw74P8iugymCdwS6FBk19Z+ssAgX4XzTMnP8uaj5/IvotTqJGoga5jMqDPo4DL
YEyw9pipEfV3mzIRQMr3Z/DGKU8fh1ZdvxwZg/sQKhnKfhJip6I72+9HYE52vuoY
cfumxFCj15TDYKKjki0mciUvCBDqA91yNCmlItb6z+kHROMZjg66W4BLGfBaNCff
JAeeZ1HnSFI2ySSmwkSMZTDw7EmlvO2BUYjiev66mt7WvYETbFXoyTRUMAsl++Wi
IVMeLkutM2XOyA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:07 2025 by rpki-client