Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: sNBGZnpFSltCkFYU5eHts0hpJvSt5DBiedZIio8zvx8=
Subject key identifier: E0:8D:27:30:AF:5D:A9:F5:1A:E1:2B:C5:99:05:D3:85:D1:F9:84:AA
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0198D7A8CC6EADB7F92C185F359B21685089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:00:20 +0000
Manifest this update: Sat 23 Aug 2025 16:00:20 +0000
Manifest next update: Sun 24 Aug 2025 16:00:20 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: kdd46LIopwVPQsECNeH00ipK5th23eZ/Qk2TBDNe8uo=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:cc:6e:ad:b7:f9:2c:18:5f:35:9b:21:68:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Aug 23 16:00:20 2025 GMT
Not After : Aug 24 16:00:20 2025 GMT
Subject: CN=e08d2730af5da9f51ae12bc59905d385d1f984aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:65:1f:74:50:b9:ad:5a:93:c2:61:a0:44:
ba:96:29:60:ea:68:a4:d3:8c:fe:f7:86:c5:bc:0d:
35:58:a7:43:6c:46:ae:9e:38:39:1e:7b:f0:ce:fa:
cc:c2:c2:46:d7:90:3e:e4:59:7c:fa:58:eb:63:87:
45:3d:50:1f:6b:54:3a:5a:8f:9e:71:d7:77:96:ea:
84:3e:27:a3:7b:c9:c0:54:72:fb:66:4f:83:a5:1c:
a5:c6:9b:a0:ab:9d:28:4c:3e:68:cf:f3:ab:57:d7:
84:82:9d:ca:60:0b:cf:80:bd:df:0d:df:95:96:a0:
4e:11:15:60:ce:d6:ca:ec:79:27:61:83:ac:4c:bf:
c0:3f:ce:1b:a8:cd:0a:1a:92:4e:29:46:1e:70:80:
e6:0c:16:3d:82:7a:d8:0e:b3:ae:63:c9:e2:10:a7:
f6:bd:07:8f:e3:3b:a9:ce:dc:7b:af:3b:32:5c:30:
43:d8:0d:42:a8:66:5e:0d:2f:88:11:19:bf:4e:46:
da:fc:6a:0f:cc:cc:d1:89:fe:c9:ae:f2:55:0b:2c:
2f:1c:ec:76:d4:e2:c6:1e:2e:9c:21:cf:8d:ff:63:
3a:44:98:04:32:44:48:5f:38:88:2d:1b:50:7c:95:
d8:b7:e8:55:f8:94:7f:11:c2:d2:af:48:0f:e9:a2:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:27:30:AF:5D:A9:F5:1A:E1:2B:C5:99:05:D3:85:D1:F9:84:AA
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:80:46:9d:83:ce:48:fd:4f:ed:f0:fa:7e:2b:19:00:37:3f:
96:d0:7b:d0:f1:57:69:ed:3b:23:99:a4:e2:ca:f9:30:45:69:
50:91:18:d7:85:8c:0c:07:a3:95:6d:e9:35:51:67:3e:c5:34:
58:96:8f:b8:2e:b3:77:50:82:4c:48:2a:85:3f:d4:d5:e2:66:
fb:e0:49:75:3d:bd:34:ca:6d:06:f0:d8:6d:17:54:c3:1e:46:
87:e2:8f:3c:fc:77:71:d0:9b:d2:c6:79:5b:95:f7:58:f1:6a:
fc:19:69:c0:3f:99:8f:11:fb:81:f0:c0:01:ea:71:a8:fa:69:
fd:34:7e:ae:68:79:f7:53:dd:e6:d1:f2:02:60:20:bf:15:73:
92:74:0d:cc:e8:fb:cd:66:01:54:7b:af:6a:3a:8f:36:aa:26:
5b:42:18:3a:80:b9:bc:f8:ec:e6:2b:fd:11:61:1b:1b:b4:7a:
b1:c5:95:3a:a7:4e:d9:16:1b:dd:86:36:8e:87:b0:bc:f4:8e:
43:ad:d2:c5:cd:40:cf:c4:92:3c:57:3b:a9:1b:08:b0:38:8d:
8d:ad:d0:a5:a6:23:38:f6:f1:29:f0:b3:67:f9:f4:ce:f1:e3:
b1:67:15:39:a5:fb:6b:00:cc:f0:70:f5:ca:d8:c8:d5:b9:08:
30:34:41:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqMxurbf5LBhfNZshaFCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi
OTUwODcwHhcNMjUwODIzMTYwMDIwWhcNMjUwODI0MTYwMDIwWjAzMTEwLwYDVQQD
EyhlMDhkMjczMGFmNWRhOWY1MWFlMTJiYzU5OTA1ZDM4NWQxZjk4NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55JlH3RQua1ak8JhoES6lilg6mik
04z+94bFvA01WKdDbEaunjg5HnvwzvrMwsJG15A+5Fl8+ljrY4dFPVAfa1Q6Wo+e
cdd3luqEPieje8nAVHL7Zk+DpRylxpugq50oTD5oz/OrV9eEgp3KYAvPgL3fDd+V
lqBOERVgztbK7HknYYOsTL/AP84bqM0KGpJOKUYecIDmDBY9gnrYDrOuY8niEKf2
vQeP4zupztx7rzsyXDBD2A1CqGZeDS+IERm/Tkba/GoPzMzRif7JrvJVCywvHOx2
1OLGHi6cIc+N/2M6RJgEMkRIXziILRtQfJXYt+hV+JR/EcLSr0gP6aKCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCNJzCvXan1GuErxZkF04XR+YSqMB8GA1UdIwQY
MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt
NzEyYjFhNzk2OGU2LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2
LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIBGnYPO
SP1P7fD6fisZADc/ltB70PFXae07I5mk4sr5MEVpUJEY14WMDAejlW3pNVFnPsU0
WJaPuC6zd1CCTEgqhT/U1eJm++BJdT29NMptBvDYbRdUwx5Gh+KPPPx3cdCb0sZ5
W5X3WPFq/BlpwD+ZjxH7gfDAAepxqPpp/TR+rmh591Pd5tHyAmAgvxVzknQNzOj7
zWYBVHuvajqPNqomW0IYOoC5vPjs5iv9EWEbG7R6scWVOqdO2RYb3YY2joewvPSO
Q63Sxc1Az8SSPFc7qRsIsDiNja3QpaYjOPbxKfCzZ/n0zvHjsWcVOaX7awDM8HD1
ytjI1bkIMDRBHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:58 2025 by rpki-client