Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: otMFXsMAlYxxc83oOlBxUzfVX9V3VOCB1zumDeG/4RI=
Subject key identifier: EE:CF:D5:03:DD:13:0A:E4:DE:CE:F6:F2:E9:66:98:E0:1E:FB:88:33
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0198D583FCD4154B40A2F20DAB216BF5C9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0565
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: aDMwbcrqxOioqzas+DvuC4c6kBqPwB1jJmfQkqQppr8=)
2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fc:d4:15:4b:40:a2:f2:0d:ab:21:6b:f5:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=eecfd503dd130ae4decef6f2e96698e01efb8833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:60:eb:e1:cf:eb:b6:4c:61:ed:56:ab:d7:
9a:71:58:46:d3:8a:4d:8a:c7:75:4d:72:f8:58:8a:
20:b3:f3:e7:56:96:6b:8a:2d:f7:a2:9c:f0:a2:e9:
80:80:0d:46:77:ea:fd:48:de:ef:7b:35:d8:38:01:
70:56:a2:21:6b:9e:3f:4d:c8:4b:f2:a0:33:fc:16:
d4:01:04:1e:1a:28:8e:9d:6a:b6:8b:7c:c5:a0:ae:
01:89:ba:3a:3d:03:f4:0d:6c:48:52:ca:9b:d8:f5:
a6:b6:dc:ca:4c:3f:4b:e6:27:ec:03:f0:9a:08:c9:
64:af:a6:e8:32:5d:b5:dc:e3:ff:de:ee:a1:81:09:
fa:a7:27:65:3c:a6:d6:b7:17:c0:67:23:ef:91:97:
88:0c:43:f3:bc:55:2b:f6:50:74:22:b1:f9:b0:f6:
a4:3b:65:ad:e8:06:56:2d:9b:97:af:b3:02:c9:12:
54:dd:64:c6:c0:2a:1a:71:14:e4:29:73:70:e6:41:
8e:6b:8d:54:5b:8c:36:09:29:56:14:e1:ae:95:36:
b1:13:ac:a6:19:f5:32:0a:03:20:11:be:69:db:a2:
fa:86:03:a2:4c:6b:3e:03:a8:50:a4:dc:73:8e:9f:
40:ed:0d:80:ed:41:ba:2d:52:af:a0:43:d9:c3:82:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:D5:03:DD:13:0A:E4:DE:CE:F6:F2:E9:66:98:E0:1E:FB:88:33
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e3:80:a7:89:93:64:95:81:d8:94:f8:79:b0:b6:41:49:0d:
d8:67:83:ac:82:67:dd:a9:0c:f8:78:0e:49:0d:74:1e:4f:ee:
3f:6f:ef:81:00:13:34:3c:17:1c:04:38:ca:85:b5:7c:70:c3:
64:63:40:af:e5:b0:59:b6:4d:8a:f2:a5:2c:7b:1d:46:d3:d9:
e0:76:2b:b6:85:2f:ac:3a:f4:a1:c6:de:81:54:ce:e7:ec:e5:
8c:f6:e8:81:78:4f:a4:94:4c:41:70:78:4b:6a:f7:d9:27:22:
7d:37:e1:b8:a7:42:23:06:cb:c3:36:18:4b:f4:40:bf:db:85:
9f:71:4a:e9:84:9d:21:2f:67:3a:4e:9f:39:59:bb:ad:84:db:
4c:0d:a8:c8:b3:12:5d:cb:4e:02:78:c6:c3:db:af:e7:57:89:
d3:99:c6:dc:2a:f2:4c:4f:28:94:21:09:85:ed:ff:c4:d0:39:
a3:12:70:50:36:91:ae:65:2a:75:41:7d:7a:23:21:97:06:02:
66:83:df:4f:91:b9:e4:e0:3e:85:fe:4b:22:2e:d0:8b:52:87:
8f:06:75:5b:d8:5f:13:1f:e1:56:f4:53:a7:de:55:b6:90:d4:
93:54:4c:fa:8f:bf:be:21:5d:19:b1:df:37:e7:c1:5e:a2:e3:
7c:f7:73:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/zUFUtAovINqyFr9cnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUwODIzMDYwMDUzWhcNMjUwODI0MDYwMDUzWjAzMTEwLwYDVQQD
EyhlZWNmZDUwM2RkMTMwYWU0ZGVjZWY2ZjJlOTY2OThlMDFlZmI4ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Vg6+HP67ZMYe1Wq9eacVhG04pN
isd1TXL4WIogs/PnVpZrii33opzwoumAgA1Gd+r9SN7vezXYOAFwVqIha54/TchL
8qAz/BbUAQQeGiiOnWq2i3zFoK4Bibo6PQP0DWxIUsqb2PWmttzKTD9L5ifsA/Ca
CMlkr6boMl213OP/3u6hgQn6pydlPKbWtxfAZyPvkZeIDEPzvFUr9lB0IrH5sPak
O2Wt6AZWLZuXr7MCyRJU3WTGwCoacRTkKXNw5kGOa41UW4w2CSlWFOGulTaxE6ym
GfUyCgMgEb5p26L6hgOiTGs+A6hQpNxzjp9A7Q2A7UG6LVKvoEPZw4KOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7P1QPdEwrk3s728ulmmOAe+4gzMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuOAp4mT
ZJWB2JT4ebC2QUkN2GeDrIJn3akM+HgOSQ10Hk/uP2/vgQATNDwXHAQ4yoW1fHDD
ZGNAr+WwWbZNivKlLHsdRtPZ4HYrtoUvrDr0ocbegVTO5+zljPbogXhPpJRMQXB4
S2r32ScifTfhuKdCIwbLwzYYS/RAv9uFn3FK6YSdIS9nOk6fOVm7rYTbTA2oyLMS
XctOAnjGw9uv51eJ05nG3CryTE8olCEJhe3/xNA5oxJwUDaRrmUqdUF9eiMhlwYC
ZoPfT5G55OA+hf5LIi7Qi1KHjwZ1W9hfEx/hVvRTp95VtpDUk1RM+o+/viFdGbHf
N+fBXqLjfPdz5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:08 2025 by rpki-client