Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: MQD4WpHEid6/ZUcTalLuRaNRlgIgatJoSishDKjV/5E=
Subject key identifier: 14:42:F8:29:CC:40:75:DD:E7:71:9D:ED:51:12:72:C8:DA:80:4E:9D
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0198737462FEF3DFD0C7CCA74FF41A3F841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: Ei3kxzmTtweGdwIJCzcbIVx1eGeCCRGL1fzVuIiA5uk=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:62:fe:f3:df:d0:c7:cc:a7:4f:f4:1a:3f:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=1442f829cc4075dde7719ded511272c8da804e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:85:0c:38:fe:70:ef:ed:80:2a:52:c4:7f:
30:4c:e6:3b:91:90:ac:35:2f:52:19:41:68:7e:73:
86:7e:4a:67:27:34:1b:a9:f2:87:85:76:04:8a:d8:
25:cb:4f:cf:cf:d7:d4:bf:b3:c1:6d:24:89:15:b0:
ff:71:3c:1d:47:af:4a:13:61:b0:f2:1d:45:8a:fc:
86:1f:58:82:49:8f:08:58:ed:14:38:de:45:07:e4:
24:5b:e0:3b:f9:f5:a5:f6:f4:4c:56:3a:65:51:af:
96:b7:69:42:ed:a7:70:e4:f7:64:31:2f:3c:c7:02:
2f:c7:5e:78:71:f7:33:7b:49:3d:9f:31:9b:8d:35:
b6:ea:b4:7e:97:13:f8:af:5a:8c:6a:88:37:0d:1d:
1e:53:d5:d1:a1:23:c7:48:49:29:ad:bb:68:af:e9:
09:dd:2d:30:4d:d6:62:32:68:08:13:fc:a4:ac:c6:
16:88:c8:fb:c2:b0:58:2b:35:ac:11:cd:5d:b7:95:
d6:03:3d:73:80:0a:34:26:41:74:d6:cb:21:30:e3:
98:ca:ef:c4:12:0f:f3:90:bf:2d:fa:86:a7:dd:72:
17:bb:df:ad:c8:79:c1:6d:ab:95:d6:31:10:2b:f3:
b0:e9:9d:d8:98:0f:40:a4:cb:bb:cc:ee:e9:54:b6:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:42:F8:29:CC:40:75:DD:E7:71:9D:ED:51:12:72:C8:DA:80:4E:9D
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:a2:45:8f:4b:6a:a2:80:90:34:29:26:ee:ea:4c:38:e5:
c3:cd:67:31:2d:13:f6:4f:62:a2:da:e2:98:5f:dd:f0:8a:96:
89:ad:38:95:25:89:99:d2:91:3d:99:25:88:21:28:ec:85:c4:
4d:92:46:e8:af:90:03:69:f9:5d:41:a6:32:76:84:46:9e:1b:
8c:7f:bc:68:8f:bd:ae:fa:57:2b:65:19:cf:5a:e6:14:fe:09:
87:81:d2:2f:b8:ef:b4:af:52:6c:b9:dc:b9:4a:76:19:a7:58:
89:87:fe:5d:b7:2a:dc:a9:b6:af:c5:8f:f2:36:72:7e:5e:38:
03:37:fc:32:a0:24:70:02:3c:2b:8e:c6:60:02:37:78:26:70:
67:db:e7:9b:cf:a9:9a:de:46:58:ec:6c:88:12:95:30:b8:ba:
ec:01:a5:97:6c:90:7a:e4:99:95:fd:91:49:14:67:21:a5:93:
d8:8d:c9:56:30:a9:81:82:34:ce:3d:5c:cc:e3:40:12:ed:4b:
d4:69:ea:b6:05:ab:a0:d8:98:b6:f5:30:f2:65:bf:95:46:a5:
82:8d:36:1f:4c:d7:00:0d:b0:9c:35:cb:5c:4e:c0:4f:d1:a1:
b5:c2:ed:13:9a:dc:f6:a3:d8:d0:68:98:68:cf:58:6d:81:2b:
49:ee:18:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdGL+89/Qx8ynT/QaP4QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTVmYTcwZTNmN2RmMzYxMTUxZDU1Mzc5ZDRkOWI4NWRh
ZGZkM2QwHhcNMjUwODA0MDUwMTA0WhcNMjUwODA1MDUwMTA0WjAzMTEwLwYDVQQD
EygxNDQyZjgyOWNjNDA3NWRkZTc3MTlkZWQ1MTEyNzJjOGRhODA0ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LKFDDj+cO/tgCpSxH8wTOY7kZCs
NS9SGUFofnOGfkpnJzQbqfKHhXYEitgly0/Pz9fUv7PBbSSJFbD/cTwdR69KE2Gw
8h1FivyGH1iCSY8IWO0UON5FB+QkW+A7+fWl9vRMVjplUa+Wt2lC7adw5PdkMS88
xwIvx154cfcze0k9nzGbjTW26rR+lxP4r1qMaog3DR0eU9XRoSPHSEkprbtor+kJ
3S0wTdZiMmgIE/ykrMYWiMj7wrBYKzWsEc1dt5XWAz1zgAo0JkF01sshMOOYyu/E
Eg/zkL8t+oan3XIXu9+tyHnBbauV1jEQK/Ow6Z3YmA9ApMu7zO7pVLZJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRC+CnMQHXd53Gd7VEScsjagE6dMB8GA1UdIwQY
MBaAFNiV+nDj9982EVHVU3nU2bhdrf09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUt
ZjQ1YjhkYmUyZjk3LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUtZjQ1YjhkYmUyZjk3
LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPCiRY9L
aqKAkDQpJu7qTDjlw81nMS0T9k9iotrimF/d8IqWia04lSWJmdKRPZkliCEo7IXE
TZJG6K+QA2n5XUGmMnaERp4bjH+8aI+9rvpXK2UZz1rmFP4Jh4HSL7jvtK9SbLnc
uUp2GadYiYf+Xbcq3Km2r8WP8jZyfl44Azf8MqAkcAI8K47GYAI3eCZwZ9vnm8+p
mt5GWOxsiBKVMLi67AGll2yQeuSZlf2RSRRnIaWT2I3JVjCpgYI0zj1czONAEu1L
1GnqtgWroNiYtvUw8mW/lUalgo02H0zXAA2wnDXLXE7AT9GhtcLtE5rc9qPY0GiY
aM9YbYErSe4YNw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:00 2025 by rpki-client