Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: 3Aazt0x0MXtnzKQW7DVMAw1AIQO/bE23ISM9KF2pDFY=
Subject key identifier: 4F:B4:D5:B8:82:BE:F9:D7:A5:D4:A8:31:5A:66:2D:66:F1:70:64:59
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0198D51630BCDD149BA0E282F275E9067E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1310
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: xW87OJLGKsd7X+SfyKZ0WSvGIospDozuAR5GbDmi2Ng=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:30:bc:dd:14:9b:a0:e2:82:f2:75:e9:06:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=4fb4d5b882bef9d7a5d4a8315a662d66f1706459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:6d:3c:8d:2c:4c:2f:20:1d:92:48:a9:d5:
44:0e:3b:59:2d:de:08:66:1e:7a:db:5d:9f:84:8c:
fc:2b:19:93:3d:f0:16:ad:9d:69:81:73:2f:66:b2:
d4:cc:ed:dd:58:13:cc:07:4b:ec:6d:cc:1d:ca:14:
d1:4e:58:2b:43:d0:c0:a4:f0:50:e4:aa:4b:e3:e7:
fa:05:e9:28:a0:1f:cf:5b:cb:c2:cc:84:ce:59:c9:
21:e3:1c:8b:a2:47:b6:93:26:88:42:08:7b:58:2f:
f4:ca:5f:02:1a:b1:67:74:5f:59:bc:f1:28:f9:a9:
ff:d6:50:e0:44:cf:77:5f:7b:d0:53:9d:90:5a:86:
7f:76:cf:54:20:fb:4c:6e:d3:9f:1b:cc:7c:4d:b2:
5c:d7:ce:4a:06:be:10:93:d2:26:28:49:2e:48:dd:
8b:2b:53:1b:c9:4e:b9:3c:2e:51:c3:30:48:c6:8a:
3b:e6:31:f8:44:3c:8b:66:98:93:6c:bf:87:d9:74:
f2:60:ce:68:b2:80:f6:9d:17:b2:a7:7f:63:d4:0e:
7c:8f:8a:9e:c1:05:28:c4:e0:8b:0e:11:c4:21:d5:
52:df:ae:2a:78:a4:cb:60:57:53:bd:01:b7:7c:bb:
3d:e1:2a:90:17:09:87:38:39:64:bc:03:5f:7d:5c:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:D5:B8:82:BE:F9:D7:A5:D4:A8:31:5A:66:2D:66:F1:70:64:59
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:25:61:1b:2e:02:b2:d8:e4:c3:75:38:47:77:cb:2b:0f:
6e:e6:46:d6:0f:d7:b0:80:77:c2:bb:cd:b7:4d:52:6a:33:e2:
55:0b:d5:f8:55:8e:3d:01:44:22:2c:16:e7:02:15:aa:f2:09:
20:9c:6e:a8:5b:f1:10:ed:55:48:f4:a2:7c:ed:4a:52:2b:60:
e8:ce:61:3c:ef:f1:78:ee:8d:ea:cf:4d:0e:cf:3e:27:3b:a2:
fc:01:62:ca:f7:79:c9:63:67:03:c8:9b:12:a4:e5:21:59:3b:
0c:d6:b0:93:ea:a1:85:16:9e:da:60:11:fb:78:c9:f8:d2:86:
99:7e:a9:5a:45:8c:9d:84:91:d4:fa:13:63:73:c1:6f:5c:44:
4e:eb:f9:14:ad:0e:c7:73:ee:4e:3e:10:59:95:13:3b:96:df:
b4:b4:00:7d:13:30:76:83:6c:29:49:63:4e:7d:39:90:d1:2e:
a4:d2:81:12:ee:c2:53:0b:c9:52:b1:11:8c:23:a8:27:82:07:
38:af:db:9a:23:20:0b:50:b3:3f:31:4b:80:99:51:aa:cc:aa:
13:73:b5:76:dd:32:57:03:1d:46:a3:47:04:93:b8:84:c9:50:
bb:4d:80:7e:c1:c9:d6:6f:02:bc:ef:99:99:11:97:69:d5:df:
cc:64:19:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFjC83RSboOKC8nXpBn4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjUwODIzMDQwMDU3WhcNMjUwODI0MDQwMDU3WjAzMTEwLwYDVQQD
Eyg0ZmI0ZDViODgyYmVmOWQ3YTVkNGE4MzE1YTY2MmQ2NmYxNzA2NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHJtPI0sTC8gHZJIqdVEDjtZLd4I
Zh56212fhIz8KxmTPfAWrZ1pgXMvZrLUzO3dWBPMB0vsbcwdyhTRTlgrQ9DApPBQ
5KpL4+f6BekooB/PW8vCzITOWckh4xyLoke2kyaIQgh7WC/0yl8CGrFndF9ZvPEo
+an/1lDgRM93X3vQU52QWoZ/ds9UIPtMbtOfG8x8TbJc185KBr4Qk9ImKEkuSN2L
K1MbyU65PC5RwzBIxoo75jH4RDyLZpiTbL+H2XTyYM5osoD2nReyp39j1A58j4qe
wQUoxOCLDhHEIdVS364qeKTLYFdTvQG3fLs94SqQFwmHODlkvANffVwLpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+01biCvvnXpdSoMVpmLWbxcGRZMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFAlYRsu
ArLY5MN1OEd3yysPbuZG1g/XsIB3wrvNt01SajPiVQvV+FWOPQFEIiwW5wIVqvIJ
IJxuqFvxEO1VSPSifO1KUitg6M5hPO/xeO6N6s9NDs8+Jzui/AFiyvd5yWNnA8ib
EqTlIVk7DNawk+qhhRae2mAR+3jJ+NKGmX6pWkWMnYSR1PoTY3PBb1xETuv5FK0O
x3PuTj4QWZUTO5bftLQAfRMwdoNsKUljTn05kNEupNKBEu7CUwvJUrERjCOoJ4IH
OK/bmiMgC1CzPzFLgJlRqsyqE3O1dt0yVwMdRqNHBJO4hMlQu02AfsHJ1m8CvO+Z
mRGXadXfzGQZQw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:36 2025 by rpki-client