Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: j0OMZ3K0d6RGQ+CiNUAKlmd5kkb5Wel1XaxluOqbSJE=
Subject key identifier: C2:D5:57:33:96:E3:09:D0:9C:AD:8D:9E:2C:9A:5F:81:16:56:4C:9E
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 0198D4728C8361A01DCBB6ED7F5FF1EF6FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: nbBWR7R2xtKcQxG//P2NPxcLyKeJDsuBqk/3lKi93BA=)
2: 99kZ91L5k4nve2PYsWtipJThPHU.roa (hash: bVtLb94sDBWJmE1C3lJHiBUqgO9xT7zdCZpTZaX8mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8c:83:61:a0:1d:cb:b6:ed:7f:5f:f1:ef:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=c2d5573396e309d09cad8d9e2c9a5f8116564c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:23:16:f2:2e:dd:dd:f7:62:bf:3b:cb:4e:
67:94:cc:09:de:72:f4:e1:ff:bf:82:f3:32:95:71:
1d:1a:58:b3:c5:8e:8c:03:f9:d3:ce:40:d2:30:e4:
47:a4:42:9b:b8:f0:d4:31:d1:d6:3d:1c:ab:2a:cd:
87:4c:f6:c0:28:72:55:64:21:44:6a:7f:a1:00:b1:
d9:7f:98:d5:32:7e:83:0d:f2:77:d5:40:94:23:91:
f0:1b:df:3c:d8:f4:5b:24:da:ca:7f:33:6e:2e:a5:
00:d0:1b:2a:30:91:db:0b:b7:03:49:4c:4b:85:13:
c0:6c:79:30:cf:48:b0:5c:9b:a1:b1:51:5e:cf:db:
90:33:f2:cc:87:f2:9c:08:47:7e:74:28:cc:44:35:
33:34:e5:66:12:de:f3:57:f3:9b:89:53:02:c4:1f:
d2:bb:c0:ab:bd:b1:e2:4a:e7:20:28:74:65:d7:16:
ac:c3:3f:54:2e:40:37:2b:e2:7a:1e:dd:4e:07:90:
6e:24:30:f0:0c:f2:48:72:af:40:85:54:49:5a:c0:
9e:f7:dc:ec:58:2d:bf:aa:c5:fe:01:d8:8a:5b:df:
3c:57:29:2b:27:5a:9c:48:8e:6c:2b:25:71:59:27:
c8:29:be:1e:41:58:33:4a:b9:2a:46:f9:7a:8a:a2:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:57:33:96:E3:09:D0:9C:AD:8D:9E:2C:9A:5F:81:16:56:4C:9E
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:fb:7e:a5:cd:ee:aa:19:c4:01:ff:96:8e:ed:fd:d8:b8:
03:27:ee:68:14:d2:f2:f7:63:4e:36:b9:d0:1d:d6:94:40:d2:
9c:54:88:2d:55:40:13:e8:5e:71:88:77:94:c5:48:ae:a1:e0:
78:7c:21:20:34:c1:29:6b:7d:92:da:09:22:c8:68:46:7f:4b:
2d:d1:dc:b8:1e:a8:79:46:4e:ef:3d:4f:67:9b:81:3b:56:68:
0d:bc:39:04:69:35:79:d9:87:d0:fc:6c:eb:d1:da:3f:40:c1:
d3:e6:4f:3c:9d:bb:10:c5:6a:eb:0c:08:56:6b:67:b0:4d:d1:
ad:e5:c9:14:5a:f2:18:78:8f:55:10:13:b1:c8:92:3e:e0:37:
be:3a:34:0f:04:53:5a:ab:c9:43:79:80:1f:96:5b:47:26:22:
53:7f:80:63:e9:46:50:3b:1f:20:ef:f6:d2:b9:ca:e3:bc:35:
a3:9b:a1:ad:79:a5:88:74:85:f4:ce:a5:48:95:12:b8:85:42:
1c:24:4a:0c:75:5c:41:6f:e4:62:50:73:58:70:3a:34:9a:14:
7b:48:32:f6:a8:47:6a:4b:91:55:ff:11:3c:7c:a3:e1:5d:ce:
2d:88:79:48:91:bb:6c:06:de:fe:71:75:ac:3e:4d:b6:cf:27:
d5:ad:2d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcoyDYaAdy7btf1/x72/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTZiNWJkYWZiMjgzMzJkYWZlODQ3Y2VkMTRmN2E1ZmFk
NDVlNjkwHhcNMjUwODIzMDEwMjEzWhcNMjUwODI0MDEwMjEzWjAzMTEwLwYDVQQD
EyhjMmQ1NTczMzk2ZTMwOWQwOWNhZDhkOWUyYzlhNWY4MTE2NTY0YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUQjFvIu3d33Yr87y05nlMwJ3nL0
4f+/gvMylXEdGlizxY6MA/nTzkDSMORHpEKbuPDUMdHWPRyrKs2HTPbAKHJVZCFE
an+hALHZf5jVMn6DDfJ31UCUI5HwG9882PRbJNrKfzNuLqUA0BsqMJHbC7cDSUxL
hRPAbHkwz0iwXJuhsVFez9uQM/LMh/KcCEd+dCjMRDUzNOVmEt7zV/ObiVMCxB/S
u8CrvbHiSucgKHRl1xaswz9ULkA3K+J6Ht1OB5BuJDDwDPJIcq9AhVRJWsCe99zs
WC2/qsX+AdiKW988VykrJ1qcSI5sKyVxWSfIKb4eQVgzSrkqRvl6iqJ/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLVVzOW4wnQnK2NniyaX4EWVkyeMB8GA1UdIwQY
MBaAFNqWtb2vsoMy2v6EfO0U96X61F5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBhMXZhLXlnekxhX29SODdSVDNwZnJVWG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84MTkwODktNDczYi00NjNmLWI4N2It
NDI1Mzk1MGYxMTU1LzEvMnBhMXZhLXlnekxhX29SODdSVDNwZnJVWG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84MTkwODktNDczYi00NjNmLWI4N2ItNDI1Mzk1MGYxMTU1
LzEvMnBhMXZhLXlnekxhX29SODdSVDNwZnJVWG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjn7fqXN
7qoZxAH/lo7t/di4AyfuaBTS8vdjTja50B3WlEDSnFSILVVAE+hecYh3lMVIrqHg
eHwhIDTBKWt9ktoJIshoRn9LLdHcuB6oeUZO7z1PZ5uBO1ZoDbw5BGk1edmH0Pxs
69HaP0DB0+ZPPJ27EMVq6wwIVmtnsE3RreXJFFryGHiPVRATsciSPuA3vjo0DwRT
WqvJQ3mAH5ZbRyYiU3+AY+lGUDsfIO/20rnK47w1o5uhrXmliHSF9M6lSJUSuIVC
HCRKDHVcQW/kYlBzWHA6NJoUe0gy9qhHakuRVf8RPHyj4V3OLYh5SJG7bAbe/nF1
rD5Nts8n1a0tTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:54 2025 by rpki-client