Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: 2UzZYFHe7Fff1i3rHJg8UyugRixUFxmteGfMY8EPZBA=
Subject key identifier: FF:7B:29:27:FA:2A:2A:68:D4:44:18:E2:9F:C2:0A:A9:03:21:97:C9
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 01987C40B5A533841DCADEB0235C3459B97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1334
Signing time: Tue 05 Aug 2025 22:01:12 +0000
Manifest this update: Tue 05 Aug 2025 22:01:12 +0000
Manifest next update: Wed 06 Aug 2025 22:01:12 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: Iiaa/1KwKjii9GASiCW2XPY3+SrsfyGT9ZuRRCvheo4=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:b5:a5:33:84:1d:ca:de:b0:23:5c:34:59:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Aug 5 22:01:12 2025 GMT
Not After : Aug 6 22:01:12 2025 GMT
Subject: CN=ff7b2927fa2a2a68d44418e29fc20aa9032197c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:9a:c2:7a:4a:4b:28:4d:04:04:77:b1:3c:
ad:9d:da:56:e8:d3:69:87:a0:cf:18:fe:5d:8f:b4:
dd:ae:eb:2b:cf:f2:a0:aa:69:83:b3:df:9b:43:e2:
22:33:33:bc:b1:2b:0e:5d:e3:40:3e:11:10:ce:67:
57:14:69:e5:fb:94:22:6e:1f:3b:1f:ee:c4:5d:9e:
b5:de:14:99:6b:99:00:a8:9f:41:c6:7c:19:80:91:
84:21:bf:4d:a2:cd:c9:94:a1:ce:22:76:a7:e6:dd:
94:b0:c8:f2:81:2b:be:00:d7:a8:eb:b2:32:e1:d0:
ef:ff:95:8c:13:f4:76:f2:53:69:e6:82:c6:23:6a:
4d:3d:eb:8b:bd:34:d7:90:04:d7:e9:1a:b7:f2:64:
b6:af:67:20:35:a5:15:01:99:81:8e:a6:3b:be:d2:
31:5f:f9:85:b5:62:1a:2f:68:f0:f9:ab:e9:58:23:
7f:93:1d:a9:70:25:d1:46:73:35:eb:43:df:9c:37:
64:d7:5f:43:09:b8:98:17:6b:b5:c8:3c:33:8a:63:
a9:84:cf:06:fe:b6:21:0a:f6:59:d4:c4:98:b5:9f:
ff:50:8b:81:a8:93:39:2b:16:29:fb:e1:f0:f1:bf:
33:7a:52:ba:77:9b:1b:b3:46:08:51:8f:8e:53:ff:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:29:27:FA:2A:2A:68:D4:44:18:E2:9F:C2:0A:A9:03:21:97:C9
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:96:97:e6:27:e5:eb:33:dc:54:3e:f9:91:05:e4:ae:1f:83:
ae:ae:f3:35:f8:0b:7a:d8:11:0f:6e:a3:dc:b2:11:97:5b:d7:
c7:0e:08:00:f6:e4:b2:4a:51:e5:ef:63:8e:91:94:b8:b9:18:
d9:b6:3c:a7:4e:c3:f4:05:2a:af:5a:1d:d2:c1:a1:2a:a9:d4:
31:76:d3:ce:24:d8:0a:b6:fc:70:f6:7b:6f:47:51:ef:64:de:
c5:bf:bd:8f:48:d7:75:32:e7:6d:90:0f:44:73:5a:d1:13:82:
69:66:8e:a7:70:20:bd:ad:fb:cc:89:1a:51:1d:45:b2:89:a0:
99:3c:f6:d7:02:35:98:98:a5:83:53:68:35:a8:14:e8:dd:eb:
06:90:c0:37:8c:b1:47:8d:94:05:28:9b:09:97:d3:e3:ef:24:
96:33:c5:4f:04:ee:c8:a4:e1:c9:a8:1f:6d:51:16:9f:df:f4:
ee:df:bf:55:bd:8b:c7:91:e9:24:57:84:95:2b:42:b0:b9:de:
c3:44:73:68:0e:c6:42:83:f8:bd:f4:af:f5:d9:fc:4b:cb:d4:
d8:10:71:e8:a9:ba:5e:bf:cf:34:22:3e:09:0f:5e:50:dc:c0:
9e:05:a2:42:ce:75:ed:43:51:cd:b7:f5:87:14:6d:73:a4:1e:
2b:bc:9f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QLWlM4Qdyt6wI1w0Wbl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz
Mzc5NDMwHhcNMjUwODA1MjIwMTEyWhcNMjUwODA2MjIwMTEyWjAzMTEwLwYDVQQD
EyhmZjdiMjkyN2ZhMmEyYTY4ZDQ0NDE4ZTI5ZmMyMGFhOTAzMjE5N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UiawnpKSyhNBAR3sTytndpW6NNp
h6DPGP5dj7Tdrusrz/KgqmmDs9+bQ+IiMzO8sSsOXeNAPhEQzmdXFGnl+5Qibh87
H+7EXZ613hSZa5kAqJ9BxnwZgJGEIb9Nos3JlKHOInan5t2UsMjygSu+ANeo67Iy
4dDv/5WME/R28lNp5oLGI2pNPeuLvTTXkATX6Rq38mS2r2cgNaUVAZmBjqY7vtIx
X/mFtWIaL2jw+avpWCN/kx2pcCXRRnM160PfnDdk119DCbiYF2u1yDwzimOphM8G
/rYhCvZZ1MSYtZ//UIuBqJM5KxYp++Hw8b8zelK6d5sbs0YIUY+OU/9a6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP97KSf6Kipo1EQY4p/CCqkDIZfJMB8GA1UdIwQY
MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt
NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5
LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJaX5ifl
6zPcVD75kQXkrh+Drq7zNfgLetgRD26j3LIRl1vXxw4IAPbkskpR5e9jjpGUuLkY
2bY8p07D9AUqr1od0sGhKqnUMXbTziTYCrb8cPZ7b0dR72Texb+9j0jXdTLnbZAP
RHNa0ROCaWaOp3Agva37zIkaUR1FsomgmTz21wI1mJilg1NoNagU6N3rBpDAN4yx
R42UBSibCZfT4+8kljPFTwTuyKThyagfbVEWn9/07t+/Vb2Lx5HpJFeElStCsLne
w0RzaA7GQoP4vfSv9dn8S8vU2BBx6Km6Xr/PNCI+CQ9eUNzAngWiQs517UNRzbf1
hxRtc6QeK7yf8w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:20 2025 by rpki-client