Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: p+EHoIr9MfFJCuS5KX338aJOeZOCXVATFRR47vbL02I=
Subject key identifier: 5E:CB:99:EB:D7:CE:D7:A1:5E:1D:F2:C2:61:A1:DE:3D:B4:28:D8:16
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01987C77265B6842FA8A2A2D7809BDE5CA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 133D
Signing time: Tue 05 Aug 2025 23:00:39 +0000
Manifest this update: Tue 05 Aug 2025 23:00:39 +0000
Manifest next update: Wed 06 Aug 2025 23:00:39 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: I7VDar7YVrQ4PRYtSRJzqxawaNE5yJgIFkcAUMHWJHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:26:5b:68:42:fa:8a:2a:2d:78:09:bd:e5:ca:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Aug 5 23:00:39 2025 GMT
Not After : Aug 6 23:00:39 2025 GMT
Subject: CN=5ecb99ebd7ced7a15e1df2c261a1de3db428d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:64:b1:6b:0c:01:00:5f:cd:8b:32:ba:ea:
66:71:1e:7b:69:21:44:cf:2d:2c:fa:da:e9:dc:0e:
8e:da:4e:43:89:67:ec:14:4c:7c:d7:10:68:c5:0b:
0f:c9:c3:de:57:9c:3d:df:b5:de:a0:89:19:35:25:
32:18:18:a6:64:ab:66:78:35:83:e0:7b:64:f6:29:
f4:f9:b8:ae:6a:b3:41:d0:6b:0f:5f:d5:9d:71:59:
1a:1d:7b:53:9e:de:29:4d:87:0a:9f:0f:42:86:f4:
d6:71:23:2b:85:61:38:11:15:56:25:7a:d2:e9:3a:
41:85:40:c7:fa:69:e1:93:c9:c6:08:b6:69:f1:4f:
9d:09:a8:50:1b:c0:b1:07:29:39:69:e2:1b:0b:84:
40:48:94:20:71:b9:b0:43:b8:64:17:0c:64:e4:ed:
ee:1c:b4:6b:f5:03:56:21:20:c9:93:8f:0b:e0:56:
b8:31:8a:23:ce:02:85:ae:2f:48:37:01:a5:ba:06:
b1:46:5a:52:4d:64:92:88:dc:78:a8:a0:65:04:14:
f6:a9:ab:c7:5a:69:32:e0:d7:db:9f:6a:eb:90:fe:
a0:18:51:98:a7:40:6a:95:13:52:57:94:28:23:5d:
43:8a:c5:bb:4f:e4:5a:fb:df:d0:a4:5b:73:56:9a:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:99:EB:D7:CE:D7:A1:5E:1D:F2:C2:61:A1:DE:3D:B4:28:D8:16
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:2a:8d:74:83:97:93:53:70:4b:74:65:ba:ef:f9:0c:03:
d8:9c:1b:e9:e4:b2:2a:b7:95:59:1c:18:96:c1:82:67:d4:78:
03:91:20:7a:dc:9d:c6:86:21:eb:4d:10:60:3d:8c:fc:95:7a:
70:04:31:4a:c7:9a:80:c9:70:17:50:d8:c1:ee:84:e8:84:8e:
1f:1c:65:70:ee:c4:56:28:d4:39:e0:45:cc:8e:fc:a9:26:14:
81:0d:c9:bb:c3:ac:b5:dc:37:5c:cf:b5:2c:4c:c8:b4:9f:f0:
cd:36:46:55:1c:56:91:da:33:6d:ad:40:f7:c0:1b:4e:6b:74:
b1:ea:30:f7:83:b2:b8:39:3b:bf:5a:51:d1:5d:a8:fc:cc:5f:
09:e5:ba:03:9c:cd:33:bb:33:8f:f9:37:c1:b9:dc:e4:c5:eb:
e9:9f:16:7b:f7:d7:20:e1:cf:54:d2:2f:47:38:54:92:63:ad:
b0:5f:89:ce:79:fc:f1:75:55:77:78:31:d6:9c:81:99:63:6f:
29:b4:70:16:5e:4f:0a:61:9b:0c:e0:0b:60:9f:a5:0e:18:d0:
7b:13:41:67:fa:bc:9c:79:b9:c8:1c:ab:0e:9a:62:56:3c:9c:
21:ef:bc:6f:4f:6b:74:a7:4a:d9:dc:b5:96:73:f4:9b:5e:a0:
ea:0c:8b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8dyZbaEL6iioteAm95cpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjUwODA1MjMwMDM5WhcNMjUwODA2MjMwMDM5WjAzMTEwLwYDVQQD
Eyg1ZWNiOTllYmQ3Y2VkN2ExNWUxZGYyYzI2MWExZGUzZGI0MjhkODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtClksWsMAQBfzYsyuupmcR57aSFE
zy0s+trp3A6O2k5DiWfsFEx81xBoxQsPycPeV5w937XeoIkZNSUyGBimZKtmeDWD
4Htk9in0+biuarNB0GsPX9WdcVkaHXtTnt4pTYcKnw9ChvTWcSMrhWE4ERVWJXrS
6TpBhUDH+mnhk8nGCLZp8U+dCahQG8CxByk5aeIbC4RASJQgcbmwQ7hkFwxk5O3u
HLRr9QNWISDJk48L4Fa4MYojzgKFri9INwGlugaxRlpSTWSSiNx4qKBlBBT2qavH
Wmky4Nfbn2rrkP6gGFGYp0BqlRNSV5QoI11DisW7T+Ra+9/QpFtzVppHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7LmevXztehXh3ywmGh3j20KNgWMB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf4qjXSD
l5NTcEt0Zbrv+QwD2Jwb6eSyKreVWRwYlsGCZ9R4A5EgetydxoYh600QYD2M/JV6
cAQxSseagMlwF1DYwe6E6ISOHxxlcO7EVijUOeBFzI78qSYUgQ3Ju8Ostdw3XM+1
LEzItJ/wzTZGVRxWkdozba1A98AbTmt0seow94OyuDk7v1pR0V2o/MxfCeW6A5zN
M7szj/k3wbnc5MXr6Z8We/fXIOHPVNIvRzhUkmOtsF+Jznn88XVVd3gx1pyBmWNv
KbRwFl5PCmGbDOALYJ+lDhjQexNBZ/q8nHm5yByrDppiVjycIe+8b09rdKdK2dy1
lnP0m16g6gyLYQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:32 2025 by rpki-client