Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: KSuhBPulZHuNl+AVSUrqOC3sd/R/uHz81jdmhNXo+ek=
Subject key identifier: D1:CD:3D:B9:E5:8F:06:F3:AE:CA:C2:A5:E2:28:7E:99:DA:21:6F:3B
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 0198D5BBC54D18FD1B437683DB5308C21304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: uHY/CP16QMi5QCOgfbPX98SM7uJRtAeahFFnkAEDWpY=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c5:4d:18:fd:1b:43:76:83:db:53:08:c2:13:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=d1cd3db9e58f06f3aecac2a5e2287e99da216f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:1b:b9:29:87:e0:aa:13:62:1d:2a:64:48:
99:98:2c:2b:51:15:a4:be:22:9d:b8:ff:7a:26:fc:
96:d0:55:a9:1c:7d:49:1c:2f:dd:db:50:e4:1a:19:
22:4a:0a:f2:fb:3c:7f:9d:b2:7d:bb:57:81:09:21:
0a:a0:f1:1c:67:73:70:c0:8c:5f:1d:91:30:27:fa:
79:7b:67:4b:31:05:ad:8c:8d:b5:2d:3e:88:b3:8e:
a7:10:93:7e:34:90:85:fe:44:9c:77:d0:d7:2e:49:
36:03:e5:0c:db:bb:5f:a7:51:d2:ab:41:c3:8d:d8:
3c:95:76:fe:9e:6c:38:4d:75:3b:74:c4:f4:17:2c:
34:21:3f:6e:a3:63:e3:45:ac:e5:63:62:d6:0c:6f:
18:14:0f:e0:17:a3:bd:eb:98:51:90:b8:86:89:2c:
8d:74:f7:d5:a1:5c:9c:f8:25:f6:c9:3c:a5:17:c7:
0c:f1:0e:5b:47:c3:86:3e:ed:1b:13:4b:ea:51:32:
7b:88:48:40:82:57:a3:f7:6a:d0:cf:62:97:7c:c0:
2b:70:66:93:3f:52:0f:c9:c1:e5:ac:b1:e8:34:ea:
bf:06:18:ff:cd:bf:b2:3f:43:e3:95:14:24:80:46:
29:d6:fa:c3:a6:8c:44:94:f2:f4:97:41:1e:36:19:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:3D:B9:E5:8F:06:F3:AE:CA:C2:A5:E2:28:7E:99:DA:21:6F:3B
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:20:24:3b:ce:19:5e:09:4e:16:62:07:a5:cc:0f:08:8d:
22:58:68:48:d2:46:a8:ea:6e:bf:86:06:83:22:77:e2:34:bd:
75:c7:c4:6d:de:fa:16:e4:31:43:6a:0d:d6:1c:93:52:9c:d5:
45:24:f1:38:1c:e7:c4:69:88:f7:46:2f:6d:38:70:bd:17:04:
33:fe:4f:08:4f:64:e3:bf:34:6e:80:5f:7a:44:d5:b4:57:11:
be:3b:93:bb:b8:9a:55:15:a4:1a:d8:3e:c7:fd:c3:f9:cf:12:
e6:f6:02:90:6b:49:52:81:ac:da:28:bf:35:45:00:1d:01:43:
9a:5f:68:f4:b2:ac:ae:86:c8:7e:08:28:24:e1:c0:8c:18:8d:
30:58:7d:1d:61:61:74:65:ca:10:a6:b7:94:b4:72:4a:77:62:
95:06:22:63:fc:42:cf:01:b2:d3:e0:36:73:69:ea:77:b7:29:
ac:f3:72:1b:e1:75:3c:5e:6a:b6:4d:81:0a:b8:db:46:d5:a3:
56:58:d2:98:23:dc:d8:42:94:3a:34:68:7f:83:8a:52:c3:28:
23:b4:f7:98:cd:17:37:d9:67:91:0d:6f:b3:7b:fa:17:fb:75:
64:6e:27:26:ee:c1:e5:6c:85:da:2c:86:d9:99:4f:d6:a2:e8:
f2:6f:e8:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8VNGP0bQ3aD21MIwhMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
EyhkMWNkM2RiOWU1OGYwNmYzYWVjYWMyYTVlMjI4N2U5OWRhMjE2ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn84buSmH4KoTYh0qZEiZmCwrURWk
viKduP96JvyW0FWpHH1JHC/d21DkGhkiSgry+zx/nbJ9u1eBCSEKoPEcZ3NwwIxf
HZEwJ/p5e2dLMQWtjI21LT6Is46nEJN+NJCF/kScd9DXLkk2A+UM27tfp1HSq0HD
jdg8lXb+nmw4TXU7dMT0Fyw0IT9uo2PjRazlY2LWDG8YFA/gF6O965hRkLiGiSyN
dPfVoVyc+CX2yTylF8cM8Q5bR8OGPu0bE0vqUTJ7iEhAglej92rQz2KXfMArcGaT
P1IPycHlrLHoNOq/Bhj/zb+yP0PjlRQkgEYp1vrDpoxElPL0l0EeNhmaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHNPbnljwbzrsrCpeIofpnaIW87MB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcAgJDvO
GV4JThZiB6XMDwiNIlhoSNJGqOpuv4YGgyJ34jS9dcfEbd76FuQxQ2oN1hyTUpzV
RSTxOBznxGmI90YvbThwvRcEM/5PCE9k4780boBfekTVtFcRvjuTu7iaVRWkGtg+
x/3D+c8S5vYCkGtJUoGs2ii/NUUAHQFDml9o9LKsrobIfggoJOHAjBiNMFh9HWFh
dGXKEKa3lLRySndilQYiY/xCzwGy0+A2c2nqd7cprPNyG+F1PF5qtk2BCrjbRtWj
VljSmCPc2EKUOjRof4OKUsMoI7T3mM0XN9lnkQ1vs3v6F/t1ZG4nJu7B5WyF2iyG
2ZlP1qLo8m/opw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:28 2025 by rpki-client