Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: LXBjtbtjN7tIHfoZcsvCJzReXxJGI9ujxgLE7D82hwo=
Subject key identifier: BA:8C:3D:CE:FF:EE:00:03:55:11:2F:9E:E5:2B:F9:EF:AF:B8:5A:50
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 0198D65FC0AE7F3FE8C424A09C2FB78E5FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 05A1
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: Twkx8pgKEGjSXwDoRxVE6xjFB04s7CGXwWA4SMY9v7Y=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c0:ae:7f:3f:e8:c4:24:a0:9c:2f:b7:8e:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=ba8c3dceffee000355112f9ee52bf9efafb85a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:93:9d:75:2c:52:f9:11:e3:55:ed:96:73:
d9:1d:d3:55:6c:54:bf:db:21:0c:7f:7e:ad:9c:ef:
b4:67:5b:28:7b:7a:21:bc:e9:d1:9e:06:9d:b1:bf:
95:84:d9:cc:c6:9f:1f:05:c2:c1:b7:86:fa:92:66:
dc:ef:12:45:45:1e:36:4d:3a:24:d1:87:91:8e:a8:
34:81:9f:66:97:48:8f:12:fc:32:f5:fb:01:66:5d:
e1:73:21:91:ba:92:88:ab:db:4a:7c:6d:f5:f4:05:
f9:a4:db:8c:f9:1c:10:76:e5:4c:7f:0a:f5:85:61:
d1:f8:8e:c4:3b:f2:38:10:0f:8e:60:3a:76:eb:41:
c6:c2:3f:f7:f2:ff:30:7d:95:1c:ff:a8:ca:29:6a:
e8:1d:91:91:38:16:5f:5e:1b:47:c7:a7:cd:74:48:
79:61:ce:a1:3b:87:f0:f3:62:a6:3d:b6:b7:76:0d:
fc:91:8a:71:62:42:f6:2a:22:58:78:9b:3a:3b:5a:
36:48:ff:a6:cd:ab:f1:fa:38:47:09:18:49:15:38:
75:d6:15:c6:fe:f8:62:f7:90:ea:ce:6b:54:0e:e4:
5c:1a:2b:eb:eb:85:07:8b:3a:3e:a9:dd:72:2e:c0:
90:f9:b4:54:95:dc:75:30:f2:51:06:48:f1:39:4e:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:3D:CE:FF:EE:00:03:55:11:2F:9E:E5:2B:F9:EF:AF:B8:5A:50
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0a:b3:91:69:43:3c:78:3f:e6:95:f8:15:06:23:7e:76:ce:
f9:7f:de:fd:83:8f:0e:fe:b0:4e:40:df:6f:aa:d7:fe:b7:3f:
b5:7f:66:05:4b:e7:ae:37:a8:62:58:a4:f6:77:e8:0f:5b:e3:
15:78:ba:42:21:f4:b1:c5:17:80:4b:2c:45:27:0b:b6:a4:a3:
6b:a3:b5:4b:cf:b3:f5:c3:3b:d0:b8:bc:4c:f2:40:f5:bc:e5:
13:2f:73:06:a1:f1:62:a0:44:d3:e3:af:88:ed:01:b2:e7:f3:
db:5f:5d:75:11:d7:dd:12:a5:6e:ee:df:2a:a7:b3:af:ec:99:
92:a6:61:8c:1e:ae:ee:f0:9d:d8:a9:a6:3f:11:c7:26:9d:70:
fb:e8:c3:59:cc:99:0e:09:f0:48:45:a1:18:a6:ae:fa:8c:06:
b7:24:9c:df:0e:b6:c5:ca:73:a1:cb:5d:b1:34:8f:7d:95:dc:
dd:09:da:44:f5:4b:1c:42:f2:3f:76:21:be:50:51:9c:8b:da:
5d:39:88:fa:63:e2:e1:37:2c:96:25:9c:29:f7:72:4b:29:cc:
cc:56:2c:ae:2b:e3:a5:e6:70:d2:56:b7:55:8a:01:c0:ec:27:
45:75:22:16:40:2d:b2:9c:8f:f2:b0:54:00:df:42:de:24:31:
4b:96:0f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8Cufz/oxCSgnC+3jl/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjUwODIzMTAwMDU2WhcNMjUwODI0MTAwMDU2WjAzMTEwLwYDVQQD
EyhiYThjM2RjZWZmZWUwMDAzNTUxMTJmOWVlNTJiZjllZmFmYjg1YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIuTnXUsUvkR41XtlnPZHdNVbFS/
2yEMf36tnO+0Z1soe3ohvOnRngadsb+VhNnMxp8fBcLBt4b6kmbc7xJFRR42TTok
0YeRjqg0gZ9ml0iPEvwy9fsBZl3hcyGRupKIq9tKfG319AX5pNuM+RwQduVMfwr1
hWHR+I7EO/I4EA+OYDp260HGwj/38v8wfZUc/6jKKWroHZGROBZfXhtHx6fNdEh5
Yc6hO4fw82KmPba3dg38kYpxYkL2KiJYeJs6O1o2SP+mzavx+jhHCRhJFTh11hXG
/vhi95DqzmtUDuRcGivr64UHizo+qd1yLsCQ+bRUldx1MPJRBkjxOU7OKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqMPc7/7gADVREvnuUr+e+vuFpQMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAqzkWlD
PHg/5pX4FQYjfnbO+X/e/YOPDv6wTkDfb6rX/rc/tX9mBUvnrjeoYlik9nfoD1vj
FXi6QiH0scUXgEssRScLtqSja6O1S8+z9cM70Li8TPJA9bzlEy9zBqHxYqBE0+Ov
iO0Bsufz219ddRHX3RKlbu7fKqezr+yZkqZhjB6u7vCd2KmmPxHHJp1w++jDWcyZ
DgnwSEWhGKau+owGtySc3w62xcpzoctdsTSPfZXc3QnaRPVLHELyP3YhvlBRnIva
XTmI+mPi4TcsliWcKfdySynMzFYsrivjpeZw0la3VYoBwOwnRXUiFkAtspyP8rBU
AN9C3iQxS5YPnA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:16 2025 by rpki-client