Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 7CcEj76LvrETmEA8ZwzEMda5Bw0IVrKqpfoB31uvIEM=
Subject key identifier: 62:5E:FA:80:DE:A2:F3:1E:D4:02:FF:46:F1:A7:65:A2:B8:8F:46:EC
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 0198D473980D05C67A10EDBD8A2FE71304E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:03:21 +0000
Manifest this update: Sat 23 Aug 2025 01:03:21 +0000
Manifest next update: Sun 24 Aug 2025 01:03:21 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 9GLtquMILXDvpndPOaXQGMgQdYxUFcKraV4qxIHuQQE=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:98:0d:05:c6:7a:10:ed:bd:8a:2f:e7:13:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Aug 23 01:03:21 2025 GMT
Not After : Aug 24 01:03:21 2025 GMT
Subject: CN=625efa80dea2f31ed402ff46f1a765a2b88f46ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:11:7c:5c:35:7e:9b:d8:05:1c:21:ad:b9:
be:d1:d7:c1:0b:f9:d2:87:cc:53:13:3f:02:e5:59:
44:e1:ed:50:b7:d0:de:c3:94:f2:df:a5:37:f0:e4:
0f:94:13:3d:44:50:85:15:9f:5f:f8:6e:75:96:97:
ef:b3:59:75:85:37:af:40:90:92:0d:d0:d9:b1:03:
bb:58:48:8c:7a:a0:f5:99:58:4c:4a:14:a2:18:e0:
21:f0:b7:a4:bc:8b:d8:ac:83:89:1d:f3:11:23:5e:
08:4b:8c:5b:e5:f8:3f:8f:c7:d0:43:78:07:c4:17:
19:8a:c9:06:ef:41:92:ac:40:cc:ac:cb:aa:1a:09:
75:06:46:65:09:6f:7a:ed:6b:d4:6d:9f:65:1b:92:
c0:82:c8:78:7c:c0:c7:12:ea:7e:13:79:7c:2a:12:
68:f3:77:15:0a:14:5a:ad:ee:54:78:29:f7:78:62:
2f:f9:07:66:59:40:b9:81:a6:22:95:27:fa:86:88:
15:dd:1b:b1:63:c4:b4:52:31:76:e9:18:40:22:01:
80:2f:e6:7d:b2:b8:f5:09:83:c6:b5:05:5d:3a:ef:
80:38:1a:40:bc:c0:a6:5b:b2:9b:00:d8:b7:80:71:
8f:0d:a5:b7:36:f8:91:79:fd:bf:4d:15:83:33:39:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:FA:80:DE:A2:F3:1E:D4:02:FF:46:F1:A7:65:A2:B8:8F:46:EC
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:94:b9:dd:fc:32:46:b7:02:a5:cf:c1:0b:b7:16:8c:26:
84:20:bd:2b:5f:f0:b4:b1:4d:d5:d6:fb:1f:96:40:2a:1a:24:
4f:2b:66:7c:ae:70:e0:64:c0:78:c5:11:4d:94:e9:bc:7f:41:
30:1d:e5:fa:4e:1f:fa:08:99:b3:41:9e:46:3e:d1:43:fa:ff:
76:90:e6:44:dd:a8:36:b9:4a:a8:ab:1a:ee:d8:72:82:6c:e9:
a5:8e:a6:b2:6f:01:c8:28:98:90:fd:c9:6e:91:07:c9:fd:e5:
e3:49:c7:a3:c8:f5:29:cf:8c:74:d5:37:c3:9e:ab:38:9a:72:
1c:79:55:55:5b:57:77:2e:19:d4:1a:f0:db:55:f1:16:d4:3d:
19:d4:47:9b:22:10:37:82:a2:d6:c4:d6:5f:61:2e:56:f4:7e:
1a:e1:3a:54:74:ee:db:51:a5:0c:d9:17:a8:c5:7d:b3:fc:fe:
e1:38:c8:d1:16:32:00:df:d1:ff:2c:43:48:06:f0:37:de:b1:
6a:e9:59:a6:8c:a6:e3:21:06:e7:8c:49:ec:9b:05:6f:b7:75:
7f:c5:89:c1:ba:b9:7f:5c:6c:18:57:f3:3d:a1:93:96:fc:56:
02:67:dc:ae:40:04:43:50:0d:b9:3c:70:23:c2:4d:84:8b:19:
e6:da:be:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc5gNBcZ6EO29ii/nEwTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjUwODIzMDEwMzIxWhcNMjUwODI0MDEwMzIxWjAzMTEwLwYDVQQD
Eyg2MjVlZmE4MGRlYTJmMzFlZDQwMmZmNDZmMWE3NjVhMmI4OGY0NmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozIRfFw1fpvYBRwhrbm+0dfBC/nS
h8xTEz8C5VlE4e1Qt9Dew5Ty36U38OQPlBM9RFCFFZ9f+G51lpfvs1l1hTevQJCS
DdDZsQO7WEiMeqD1mVhMShSiGOAh8LekvIvYrIOJHfMRI14IS4xb5fg/j8fQQ3gH
xBcZiskG70GSrEDMrMuqGgl1BkZlCW967WvUbZ9lG5LAgsh4fMDHEup+E3l8KhJo
83cVChRare5UeCn3eGIv+QdmWUC5gaYilSf6hogV3RuxY8S0UjF26RhAIgGAL+Z9
srj1CYPGtQVdOu+AOBpAvMCmW7KbANi3gHGPDaW3NviRef2/TRWDMzlvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJe+oDeovMe1AL/RvGnZaK4j0bsMB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgKUud38
Mka3AqXPwQu3FowmhCC9K1/wtLFN1db7H5ZAKhokTytmfK5w4GTAeMURTZTpvH9B
MB3l+k4f+giZs0GeRj7RQ/r/dpDmRN2oNrlKqKsa7thygmzppY6msm8ByCiYkP3J
bpEHyf3l40nHo8j1Kc+MdNU3w56rOJpyHHlVVVtXdy4Z1Brw21XxFtQ9GdRHmyIQ
N4Ki1sTWX2EuVvR+GuE6VHTu21GlDNkXqMV9s/z+4TjI0RYyAN/R/yxDSAbwN96x
aulZpoym4yEG54xJ7JsFb7d1f8WJwbq5f1xsGFfzPaGTlvxWAmfcrkAEQ1ANuTxw
I8JNhIsZ5tq+9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:56 2025 by rpki-client