Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 35/QC66gj9DV95XTHo8+rqz/+uV1DlVaZ5vNequiI7M=
Subject key identifier: A2:9A:C6:16:C2:90:3C:86:7C:EB:49:29:36:8F:CF:1C:C6:A3:E3:E7
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 01987C0A16436A0B3B1A161C4778C6D8A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 21:01:32 +0000
Manifest this update: Tue 05 Aug 2025 21:01:32 +0000
Manifest next update: Wed 06 Aug 2025 21:01:32 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: rASbpSfGSYdWxmIk1MtX0kM9BrpiTp3KUiTJj7/2uRo=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:16:43:6a:0b:3b:1a:16:1c:47:78:c6:d8:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Aug 5 21:01:32 2025 GMT
Not After : Aug 6 21:01:32 2025 GMT
Subject: CN=a29ac616c2903c867ceb4929368fcf1cc6a3e3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:27:02:9a:39:c1:ba:db:5a:ab:ab:98:31:
47:b4:97:3d:48:b4:15:cc:8f:a1:68:a4:b4:97:71:
4c:c0:42:77:a7:72:2a:c0:b0:e5:92:6b:e4:f5:f1:
44:76:c2:1d:a0:8e:1a:38:22:08:74:86:a8:1a:00:
d5:df:51:a8:04:81:d7:9f:44:05:8a:e3:fd:0f:3a:
3a:67:fb:a3:a6:21:fe:57:21:ea:4e:76:eb:fa:46:
c2:9c:e4:46:c2:bb:66:78:8e:f4:bd:16:5d:21:c9:
e9:27:6c:7b:96:1b:fe:80:d3:c7:93:e2:99:42:e9:
b1:40:ec:d8:3f:27:20:e2:39:40:6c:5f:96:bb:d2:
b4:23:95:4a:78:11:1a:0a:86:59:ca:dd:fe:ae:5f:
5d:e5:b3:eb:0b:96:19:f2:8d:fa:33:47:20:d9:3e:
9f:73:5a:78:b0:3a:42:16:cb:f2:43:ef:b5:3d:46:
e3:02:b4:02:bd:cf:48:0d:27:24:57:32:20:7e:f2:
d5:da:7d:46:68:1b:88:ab:53:63:03:7a:e8:16:f4:
ce:3e:90:65:eb:4d:57:b3:43:f0:ca:06:12:95:c0:
65:56:7f:f0:54:78:0c:28:0b:22:25:b9:db:79:bb:
1d:83:86:1c:87:42:33:f1:f5:8d:a3:c3:91:f2:0d:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:C6:16:C2:90:3C:86:7C:EB:49:29:36:8F:CF:1C:C6:A3:E3:E7
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:2f:45:8e:4a:57:ff:26:e5:c9:61:39:02:8f:97:b3:8b:
df:92:13:dc:05:76:a1:f4:7f:de:e6:e5:70:48:cf:03:0a:4e:
1a:6d:bd:f5:69:30:55:6b:ed:18:7a:d0:61:78:52:0a:95:44:
08:59:da:c7:97:76:f9:e5:56:90:90:f4:21:c1:e4:2d:e2:30:
13:73:59:8f:71:b6:86:de:7f:7c:ad:69:1c:5e:d3:ad:16:59:
54:9d:90:e0:20:ca:24:b8:ca:9d:44:77:04:2e:44:7c:5b:35:
a1:0e:a2:95:6f:49:d8:17:89:56:fe:47:ab:7f:97:52:74:29:
8c:f6:44:e2:80:77:4a:fb:2b:55:34:5b:31:73:be:90:5f:ed:
f6:0e:32:0f:44:99:c3:50:b8:e4:f9:01:10:37:96:a9:83:84:
c2:87:97:a2:f2:df:1b:a0:80:96:6c:96:a9:96:86:58:87:82:
b2:31:39:00:9c:2b:43:55:3e:8f:ad:28:5b:ed:a6:29:55:49:
e7:66:61:d8:4d:62:f4:ee:b9:37:cb:39:e5:7f:7e:e2:23:bf:
b0:29:6e:d6:cd:72:3f:5e:67:65:3d:18:ef:f7:42:cb:a8:96:
b2:63:05:c9:99:91:15:0a:2c:41:d2:a7:e1:8c:58:7f:d1:13:
3c:15:33:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8ChZDags7GhYcR3jG2KGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjUwODA1MjEwMTMyWhcNMjUwODA2MjEwMTMyWjAzMTEwLwYDVQQD
EyhhMjlhYzYxNmMyOTAzYzg2N2NlYjQ5MjkzNjhmY2YxY2M2YTNlM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14cnApo5wbrbWqurmDFHtJc9SLQV
zI+haKS0l3FMwEJ3p3IqwLDlkmvk9fFEdsIdoI4aOCIIdIaoGgDV31GoBIHXn0QF
iuP9Dzo6Z/ujpiH+VyHqTnbr+kbCnORGwrtmeI70vRZdIcnpJ2x7lhv+gNPHk+KZ
QumxQOzYPycg4jlAbF+Wu9K0I5VKeBEaCoZZyt3+rl9d5bPrC5YZ8o36M0cg2T6f
c1p4sDpCFsvyQ++1PUbjArQCvc9IDSckVzIgfvLV2n1GaBuIq1NjA3roFvTOPpBl
601Xs0PwygYSlcBlVn/wVHgMKAsiJbnbebsdg4Ych0Iz8fWNo8OR8g0FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKaxhbCkDyGfOtJKTaPzxzGo+PnMB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie0vRY5K
V/8m5clhOQKPl7OL35IT3AV2ofR/3ublcEjPAwpOGm299WkwVWvtGHrQYXhSCpVE
CFnax5d2+eVWkJD0IcHkLeIwE3NZj3G2ht5/fK1pHF7TrRZZVJ2Q4CDKJLjKnUR3
BC5EfFs1oQ6ilW9J2BeJVv5Hq3+XUnQpjPZE4oB3SvsrVTRbMXO+kF/t9g4yD0SZ
w1C45PkBEDeWqYOEwoeXovLfG6CAlmyWqZaGWIeCsjE5AJwrQ1U+j60oW+2mKVVJ
52Zh2E1i9O65N8s55X9+4iO/sClu1s1yP15nZT0Y7/dCy6iWsmMFyZmRFQosQdKn
4YxYf9ETPBUz8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:42 2025 by rpki-client