Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: Mr2aXc3EdFR0ncXZ0oAklloHwqIZvfh64eVKkCm5uIU=
Subject key identifier: BE:49:C9:16:10:D0:36:0A:C6:35:26:4B:47:D9:2F:E9:47:38:B7:EB
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 0198D583E207F9A96946335273C2E4A0F9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: BD
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: Iq5jYz0jpIPiCr+vqvg1sIJX/3c9ief84WA9w55CgXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e2:07:f9:a9:69:46:33:52:73:c2:e4:a0:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=be49c91610d0360ac635264b47d92fe94738b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:ee:e6:ec:98:25:96:83:eb:a1:ee:ee:25:
bd:ea:b9:20:20:46:e8:c2:5a:41:ad:77:e5:20:e4:
48:8a:a8:a0:78:e3:5d:3d:d3:33:e1:d1:dd:d9:21:
d6:ba:14:bf:19:ea:92:01:d1:15:5d:f9:4b:2a:4c:
fc:d7:b0:cd:9f:cd:58:41:e4:22:2a:f0:c7:82:21:
f5:05:7d:e9:63:59:99:6e:0b:4c:ce:df:e6:79:e1:
2b:20:0b:f1:ca:d9:07:e9:10:53:0c:bc:24:b2:81:
8c:bc:76:90:40:7d:d8:24:6d:1d:ce:f4:e2:3e:7c:
29:7c:3d:92:53:b4:e3:de:2d:95:13:dd:4b:1e:66:
f1:e6:83:59:d0:8c:51:4a:25:f8:c8:3d:22:47:79:
be:26:6b:69:4c:a2:de:2b:27:1a:9f:ad:57:1a:57:
d8:f4:c1:54:da:26:97:09:53:f2:5d:83:06:97:ba:
98:de:13:45:76:f5:eb:91:73:b7:6f:91:5e:16:c2:
ae:2d:5e:95:a1:7e:ef:db:9a:de:fc:d1:36:ef:78:
13:18:ff:5e:21:1a:52:16:54:64:69:bb:a2:5f:e7:
4b:55:f1:fe:03:e4:e5:fc:bb:75:6f:7f:57:41:55:
1b:9d:85:88:7e:e9:6d:24:3e:29:1f:d7:9d:72:1b:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:C9:16:10:D0:36:0A:C6:35:26:4B:47:D9:2F:E9:47:38:B7:EB
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:60:7f:79:b3:cf:27:87:f9:b2:e5:91:03:40:dc:0a:9b:
8b:3d:11:8e:43:e5:83:48:b2:10:7f:bb:70:81:41:ad:d1:94:
11:a8:9b:d0:45:87:60:d3:20:f7:e3:8f:18:d0:5a:e3:ff:46:
71:af:39:8a:99:65:81:8a:59:f1:42:d4:56:50:d3:cc:37:6d:
eb:d6:1f:dc:6b:0d:f1:a7:9a:6c:7d:86:e6:60:b0:61:9e:78:
57:fe:e0:46:23:e8:ba:3f:15:19:4b:50:18:a5:d5:f4:42:0a:
ca:ed:c7:26:17:b4:5e:ce:7f:69:98:01:e2:7d:f6:aa:14:cd:
a3:df:4a:fb:2d:e4:19:3c:fd:32:a5:bc:be:e9:78:53:b1:19:
e1:35:aa:68:6f:38:89:97:bc:b4:de:87:1a:e8:54:5e:3e:f6:
78:34:db:e5:b6:46:43:30:29:f7:79:94:31:d5:87:28:1d:48:
41:bc:4f:d5:12:7a:1d:40:f4:9e:d4:70:10:75:11:06:42:96:
78:4a:4d:b1:7d:9f:24:71:1e:0c:d7:8f:c3:2f:0e:15:ea:d5:
a8:78:39:4c:b8:cd:d5:13:46:fa:ab:03:09:73:2f:1f:16:38:
bc:4d:a2:ff:7d:fd:d7:73:84:0f:6a:f2:2e:31:fb:41:6d:ff:
c3:70:39:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+IH+alpRjNSc8LkoPm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTlmMzFjNjI2ZDM3NzE3NTc4NmUxNDlkMzI2NmM3NTNk
MDA2NGUwHhcNMjUwODIzMDYwMDQ2WhcNMjUwODI0MDYwMDQ2WjAzMTEwLwYDVQQD
EyhiZTQ5YzkxNjEwZDAzNjBhYzYzNTI2NGI0N2Q5MmZlOTQ3MzhiN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDu5uyYJZaD66Hu7iW96rkgIEbo
wlpBrXflIORIiqigeONdPdMz4dHd2SHWuhS/GeqSAdEVXflLKkz817DNn81YQeQi
KvDHgiH1BX3pY1mZbgtMzt/meeErIAvxytkH6RBTDLwksoGMvHaQQH3YJG0dzvTi
PnwpfD2SU7Tj3i2VE91LHmbx5oNZ0IxRSiX4yD0iR3m+JmtpTKLeKycan61XGlfY
9MFU2iaXCVPyXYMGl7qY3hNFdvXrkXO3b5FeFsKuLV6VoX7v25re/NE273gTGP9e
IRpSFlRkabuiX+dLVfH+A+Tl/Lt1b39XQVUbnYWIfultJD4pH9edchtvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5JyRYQ0DYKxjUmS0fZL+lHOLfrMB8GA1UdIwQY
MBaAFNnp8xxibTdxdXhuFJ0yZsdT0AZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMt
NmRlNWNiZGU2YjRiLzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMtNmRlNWNiZGU2YjRi
LzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4hgf3mz
zyeH+bLlkQNA3Aqbiz0RjkPlg0iyEH+7cIFBrdGUEaib0EWHYNMg9+OPGNBa4/9G
ca85ipllgYpZ8ULUVlDTzDdt69Yf3GsN8aeabH2G5mCwYZ54V/7gRiPouj8VGUtQ
GKXV9EIKyu3HJhe0Xs5/aZgB4n32qhTNo99K+y3kGTz9MqW8vul4U7EZ4TWqaG84
iZe8tN6HGuhUXj72eDTb5bZGQzAp93mUMdWHKB1IQbxP1RJ6HUD0ntRwEHURBkKW
eEpNsX2fJHEeDNePwy8OFerVqHg5TLjN1RNG+qsDCXMvHxY4vE2i/33913OED2ry
LjH7QW3/w3A5sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:15 2025 by rpki-client