Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: fDWZtgmb5Zi5L7HMQdNMQiyHN+v1I7UQLBsW7PJxcHM=
Subject key identifier: 17:33:F8:CF:89:13:A8:81:B6:53:D3:9B:D2:12:78:DB:6F:B9:07:9C
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 0198D6CCF2D447F40263CA84500607191A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: CjQsUnsHBOzPgK6/rhCs49Nuux3Rbn/l9c/zeDD2LNE=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f2:d4:47:f4:02:63:ca:84:50:06:07:19:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=1733f8cf8913a881b653d39bd21278db6fb9079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:94:07:9a:25:28:bd:d8:3b:d3:0f:f5:07:
5f:b7:b3:e7:c9:0f:46:b7:60:d6:01:10:55:4e:da:
25:05:61:96:2b:e3:b6:a4:79:0a:76:f8:5e:72:1d:
0f:ba:02:5a:61:65:a1:57:0f:d1:99:16:21:90:19:
81:ce:5d:c2:dc:68:77:c5:33:29:ba:78:7b:de:a1:
fd:8f:6b:43:6d:5b:be:c8:56:a6:b2:17:b5:06:65:
bb:65:a9:5d:46:fb:3d:28:c3:52:f7:4b:a1:f9:51:
91:8c:9a:f8:88:41:2b:9d:81:bc:f7:b7:7f:b3:be:
16:3a:ca:69:c9:f6:dc:d8:61:27:cc:18:6b:c2:3d:
6d:24:e1:0f:82:9e:c9:56:f9:08:cc:c6:0b:98:f5:
ee:ea:a6:41:ad:a2:aa:b6:c6:bb:79:8f:95:e7:6b:
6f:7e:ac:54:43:ca:a7:e2:d4:59:60:b8:bb:72:ba:
7c:0a:bd:ca:63:aa:d0:a5:47:1d:be:64:fe:0a:8c:
61:10:5b:43:3f:07:42:07:ef:b6:13:d2:56:0c:61:
a6:bb:78:d8:7d:73:36:08:fd:d3:c2:ea:84:53:cb:
9e:d8:eb:ad:e9:41:f7:00:b6:bc:fd:6a:9b:e2:9a:
41:4f:b8:c4:0b:bc:d9:16:c7:e8:70:79:46:c9:b4:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:F8:CF:89:13:A8:81:B6:53:D3:9B:D2:12:78:DB:6F:B9:07:9C
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:bd:99:83:61:3d:0d:f5:72:62:94:5a:80:bf:8a:e6:62:
d0:b3:c0:8c:84:b1:a6:56:e0:ba:22:7a:52:ac:96:db:36:ff:
8e:18:c4:3e:b1:8e:4e:ec:3c:43:20:27:5b:39:f5:b1:62:c4:
a4:8a:d9:ca:bc:8a:f1:11:5e:b1:11:51:99:1f:42:77:93:f0:
81:0c:1e:90:c2:a7:70:ab:91:80:10:3d:56:68:82:4e:0e:2e:
55:16:12:4a:2a:66:76:42:04:0f:17:e8:48:80:b9:74:5b:e8:
07:44:4f:6b:00:cd:54:6e:f5:1d:b1:14:14:6b:18:1a:d5:85:
7b:49:21:3c:f4:ee:b1:b4:45:e9:ed:a7:75:02:03:dc:60:3c:
a6:af:25:58:ea:78:d4:95:5b:04:33:e9:8f:03:ba:be:8d:84:
e8:dc:71:ce:db:1f:33:55:ae:0a:82:46:7f:a5:73:bc:d0:f4:
63:8f:e7:22:99:25:ed:d1:a5:bf:40:7d:f2:0e:db:56:5f:7e:
c6:dc:b0:5d:80:65:62:88:b4:de:66:d2:89:c8:67:06:b8:98:
e7:ac:f4:e1:7f:36:80:da:ca:8c:ba:07:42:29:31:4f:50:17:
d0:3f:8d:e1:9b:af:7b:0b:c8:df:ef:66:6d:b4:62:05:5c:3f:
d6:34:b6:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzPLUR/QCY8qEUAYHGRohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjUwODIzMTIwMDEyWhcNMjUwODI0MTIwMDEyWjAzMTEwLwYDVQQD
EygxNzMzZjhjZjg5MTNhODgxYjY1M2QzOWJkMjEyNzhkYjZmYjkwNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsiUB5olKL3YO9MP9Qdft7PnyQ9G
t2DWARBVTtolBWGWK+O2pHkKdvhech0PugJaYWWhVw/RmRYhkBmBzl3C3Gh3xTMp
unh73qH9j2tDbVu+yFamshe1BmW7ZaldRvs9KMNS90uh+VGRjJr4iEErnYG897d/
s74WOsppyfbc2GEnzBhrwj1tJOEPgp7JVvkIzMYLmPXu6qZBraKqtsa7eY+V52tv
fqxUQ8qn4tRZYLi7crp8Cr3KY6rQpUcdvmT+CoxhEFtDPwdCB++2E9JWDGGmu3jY
fXM2CP3TwuqEU8ue2Out6UH3ALa8/Wqb4ppBT7jEC7zZFsfocHlGybQNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcz+M+JE6iBtlPTm9ISeNtvuQecMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAia+9mYNh
PQ31cmKUWoC/iuZi0LPAjISxplbguiJ6UqyW2zb/jhjEPrGOTuw8QyAnWzn1sWLE
pIrZyryK8RFesRFRmR9Cd5PwgQwekMKncKuRgBA9VmiCTg4uVRYSSipmdkIEDxfo
SIC5dFvoB0RPawDNVG71HbEUFGsYGtWFe0khPPTusbRF6e2ndQID3GA8pq8lWOp4
1JVbBDPpjwO6vo2E6NxxztsfM1WuCoJGf6VzvND0Y4/nIpkl7dGlv0B98g7bVl9+
xtywXYBlYoi03mbSichnBriY56z04X82gNrKjLoHQikxT1AX0D+N4ZuvewvI3+9m
bbRiBVw/1jS2GA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:21 2025 by rpki-client