Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: xoVEZYvfLexu47EJJLIa0mT7FSSeiT2RshAJhnCkgDM=
Subject key identifier: 04:B2:67:3E:67:2C:26:73:65:2D:F9:68:4B:DF:5A:DE:3A:44:61:6C
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01988B1008225D95602BD1DF9D89AED93739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1413
Signing time: Fri 08 Aug 2025 19:02:20 +0000
Manifest this update: Fri 08 Aug 2025 19:02:20 +0000
Manifest next update: Sat 09 Aug 2025 19:02:20 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: fXr5OL3ptCDs95evQiPgM1vKDO/POZm7ODCo/qZDJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:08:22:5d:95:60:2b:d1:df:9d:89:ae:d9:37:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Aug 8 19:02:20 2025 GMT
Not After : Aug 9 19:02:20 2025 GMT
Subject: CN=04b2673e672c2673652df9684bdf5ade3a44616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:f5:bd:03:c3:d0:b4:b5:b1:29:3d:8e:5c:
67:2e:24:d3:ed:5a:04:d4:da:2e:36:20:54:70:f9:
c9:54:27:91:cb:6e:ba:f6:42:b0:52:81:79:3b:fb:
47:77:aa:18:a8:60:3a:99:7c:3c:13:5f:32:81:08:
1d:d6:03:3b:3e:f7:89:03:f2:9c:96:33:ac:ea:b6:
60:77:58:69:d4:fa:22:0b:3e:18:6f:48:71:bf:2f:
d8:ab:56:ab:06:4a:71:e9:f5:28:bf:cb:84:b9:44:
ec:1d:5f:17:dd:77:b0:ab:63:e1:45:45:aa:98:4a:
68:ee:a5:db:54:c6:59:12:0a:67:43:60:ef:c5:e9:
63:44:24:5f:29:35:ec:6b:76:6f:50:27:f2:f7:59:
49:f7:f6:f9:be:56:3d:91:d3:0f:db:c3:28:66:b7:
b5:32:47:f8:fa:0e:2f:c2:1b:f3:4b:8b:4d:94:3c:
f0:f8:b7:44:56:e2:4b:42:25:59:68:cf:bd:24:69:
61:0d:b9:ec:39:ec:18:d3:68:cd:9c:e9:ca:9b:f0:
59:28:ff:66:a6:44:5d:e2:bd:96:f1:92:62:37:95:
4f:9e:4f:08:b4:84:63:b6:9e:c0:80:bc:6b:f2:5a:
ec:49:6e:85:63:41:57:d7:e9:76:ea:58:98:0c:47:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:67:3E:67:2C:26:73:65:2D:F9:68:4B:DF:5A:DE:3A:44:61:6C
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:17:c1:0c:cc:f1:f5:68:79:b2:18:bb:be:db:ce:e1:a1:
34:3e:38:ab:1c:98:e0:57:cd:1e:fb:89:57:5c:ea:96:53:e9:
49:6b:79:e1:af:25:fd:b0:1d:60:02:55:b8:35:76:38:58:96:
1b:49:dd:58:c3:82:6e:8c:06:96:51:d7:dc:a8:e8:73:ff:96:
45:01:26:30:8e:14:9a:d6:3f:34:cf:0f:4c:5d:5b:8a:8f:2d:
1c:01:ab:e9:6c:bb:fb:42:0d:ac:36:c0:09:74:0b:62:23:3a:
e1:87:c5:e5:a4:2f:1f:c3:f5:4a:2e:a9:e6:ec:c3:90:c8:43:
4e:1e:ea:16:b7:71:d4:74:05:38:3b:4f:9c:8c:47:7c:ab:4c:
d2:b4:5b:8c:90:df:5d:b4:80:1d:33:2a:0a:1d:e9:5d:34:c3:
ca:10:0f:16:db:d4:e1:b8:b0:c6:ce:dc:a5:b9:41:a5:aa:26:
56:a2:a4:4d:ca:b8:03:d6:19:db:ef:8e:89:d5:b9:b8:28:7e:
33:cd:d9:5c:e2:41:6f:b6:df:8f:9e:ed:5e:34:ad:5e:7a:0b:
e9:d3:bf:79:c5:c0:76:33:c1:4a:8d:86:da:d0:93:82:75:e1:
b3:06:85:3a:1b:ff:b2:64:a9:78:b7:af:36:22:85:74:db:63:
a8:41:1b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEAgiXZVgK9HfnYmu2Tc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1
YTMzYTEwHhcNMjUwODA4MTkwMjIwWhcNMjUwODA5MTkwMjIwWjAzMTEwLwYDVQQD
EygwNGIyNjczZTY3MmMyNjczNjUyZGY5Njg0YmRmNWFkZTNhNDQ2MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiff1vQPD0LS1sSk9jlxnLiTT7VoE
1NouNiBUcPnJVCeRy2669kKwUoF5O/tHd6oYqGA6mXw8E18ygQgd1gM7PveJA/Kc
ljOs6rZgd1hp1PoiCz4Yb0hxvy/Yq1arBkpx6fUov8uEuUTsHV8X3Xewq2PhRUWq
mEpo7qXbVMZZEgpnQ2DvxeljRCRfKTXsa3ZvUCfy91lJ9/b5vlY9kdMP28MoZre1
Mkf4+g4vwhvzS4tNlDzw+LdEVuJLQiVZaM+9JGlhDbnsOewY02jNnOnKm/BZKP9m
pkRd4r2W8ZJiN5VPnk8ItIRjtp7AgLxr8lrsSW6FY0FX1+l26liYDEeOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASyZz5nLCZzZS35aEvfWt46RGFsMB8GA1UdIwQY
MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt
MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx
LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacIXwQzM
8fVoebIYu77bzuGhND44qxyY4FfNHvuJV1zqllPpSWt54a8l/bAdYAJVuDV2OFiW
G0ndWMOCbowGllHX3Kjoc/+WRQEmMI4UmtY/NM8PTF1bio8tHAGr6Wy7+0INrDbA
CXQLYiM64YfF5aQvH8P1Si6p5uzDkMhDTh7qFrdx1HQFODtPnIxHfKtM0rRbjJDf
XbSAHTMqCh3pXTTDyhAPFtvU4biwxs7cpblBpaomVqKkTcq4A9YZ2++OidW5uCh+
M83ZXOJBb7bfj57tXjStXnoL6dO/ecXAdjPBSo2G2tCTgnXhswaFOhv/smSpeLev
NiKFdNtjqEEbhw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:41 2025 by rpki-client