Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: tPibizk06Bh2EpfigKIna9Wtw1sp3L8nq8KBppqMt0w=
Subject key identifier: 24:9A:17:0F:BE:46:A4:B1:BC:DC:DD:A9:35:1A:54:74:C5:EC:0E:41
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 0198D4A814D321F8CAFACB60C9583A0A8557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: 4XQpO8PMXr02uRF61rfiZOPp4Y7jA2sCo9zE4Hdenx4=)
2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:14:d3:21:f8:ca:fa:cb:60:c9:58:3a:0a:85:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=249a170fbe46a4b1bcdcdda9351a5474c5ec0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:bf:c4:c3:c7:35:28:9a:91:8e:57:eb:29:
24:ba:e7:fc:41:80:01:a4:be:ae:66:a1:47:ff:02:
69:c7:5d:fd:91:e0:1f:44:a7:ec:c8:67:cf:75:2d:
d4:77:04:51:fe:1e:d0:14:d9:40:4a:07:51:c7:8d:
f0:fd:4e:7e:b8:46:22:4c:32:dd:74:a7:3a:a1:ea:
dd:f9:01:3e:8d:51:96:5d:dc:10:0e:41:7e:aa:d5:
64:6e:9c:9c:68:8d:82:48:0c:8e:7b:83:db:d8:bf:
88:39:65:3a:c3:de:fb:ac:a1:a2:86:54:4b:15:f8:
50:0c:2f:41:38:c1:bb:3c:af:45:39:9c:ba:39:44:
69:18:01:0d:00:41:56:c4:db:44:e6:c4:c0:67:15:
c6:d6:07:6d:4d:2b:25:af:55:5f:08:6d:52:f6:61:
10:ae:ce:c1:c0:bd:6b:01:92:63:ee:45:b0:72:b4:
d1:5d:11:2e:78:29:17:1a:0d:bd:52:8c:83:21:92:
64:d5:cd:9f:64:20:d0:c1:51:59:e5:37:cc:73:ac:
cb:61:36:4f:f8:80:16:67:d9:ea:03:35:56:89:cd:
3d:de:ad:8f:ea:85:47:6c:04:2d:60:af:f3:fa:62:
41:01:0c:fc:fe:23:db:fd:a9:6e:69:ed:d2:9a:c6:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:17:0F:BE:46:A4:B1:BC:DC:DD:A9:35:1A:54:74:C5:EC:0E:41
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:4b:58:76:e4:13:f3:41:9b:40:f5:96:86:cc:ec:00:60:
1f:8e:f0:4f:0e:fa:f0:c6:c3:75:83:fa:d0:d5:d6:87:42:35:
ad:39:cc:b2:6e:c7:fd:29:e8:2b:61:6a:c1:0a:77:ca:a0:73:
13:15:a1:db:ee:6d:bd:07:93:a8:2f:3b:84:98:3b:44:f2:97:
68:3e:be:75:b9:3b:0e:35:f8:bf:2d:d9:6b:86:49:ff:f7:e3:
24:a7:fa:1d:7d:df:9f:43:1f:e7:f4:cf:e9:eb:79:7a:f8:db:
2b:6e:97:ef:1b:b0:8c:c9:b2:f3:59:ab:47:7f:7a:8f:b7:0e:
40:9b:6a:94:55:98:5f:86:88:4f:47:0f:f6:5a:eb:ef:7d:fc:
c5:2a:ca:e3:27:76:5b:71:a4:05:ae:8f:05:22:91:c8:9b:87:
fd:cc:2f:a1:4c:1d:94:b9:88:8c:b5:67:24:40:a5:c7:9b:a2:
5a:ac:77:e2:7d:3f:b3:a8:00:be:99:37:20:c7:d7:51:b5:0d:
29:76:64:de:5a:b9:f8:01:48:b6:0f:41:cb:6f:18:58:82:c4:
ee:6f:f2:eb:c3:e8:3b:fb:47:7f:2c:e9:a5:6a:9b:8b:61:e9:
b2:6a:21:ef:46:a1:92:c6:5e:3b:b6:33:25:92:82:1c:d7:31:
a0:4d:b6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBTTIfjK+stgyVg6CoVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw
YjhlMWQwHhcNMjUwODIzMDIwMDQxWhcNMjUwODI0MDIwMDQxWjAzMTEwLwYDVQQD
EygyNDlhMTcwZmJlNDZhNGIxYmNkY2RkYTkzNTFhNTQ3NGM1ZWMwZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkym/xMPHNSiakY5X6ykkuuf8QYAB
pL6uZqFH/wJpx139keAfRKfsyGfPdS3UdwRR/h7QFNlASgdRx43w/U5+uEYiTDLd
dKc6oerd+QE+jVGWXdwQDkF+qtVkbpycaI2CSAyOe4Pb2L+IOWU6w977rKGihlRL
FfhQDC9BOMG7PK9FOZy6OURpGAENAEFWxNtE5sTAZxXG1gdtTSslr1VfCG1S9mEQ
rs7BwL1rAZJj7kWwcrTRXREueCkXGg29UoyDIZJk1c2fZCDQwVFZ5TfMc6zLYTZP
+IAWZ9nqAzVWic093q2P6oVHbAQtYK/z+mJBAQz8/iPb/aluae3Smsb3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSaFw++RqSxvNzdqTUaVHTF7A5BMB8GA1UdIwQY
MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt
NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx
LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkxLWHbk
E/NBm0D1lobM7ABgH47wTw768MbDdYP60NXWh0I1rTnMsm7H/SnoK2FqwQp3yqBz
ExWh2+5tvQeTqC87hJg7RPKXaD6+dbk7DjX4vy3Za4ZJ//fjJKf6HX3fn0Mf5/TP
6et5evjbK26X7xuwjMmy81mrR396j7cOQJtqlFWYX4aIT0cP9lrr7338xSrK4yd2
W3GkBa6PBSKRyJuH/cwvoUwdlLmIjLVnJEClx5uiWqx34n0/s6gAvpk3IMfXUbUN
KXZk3lq5+AFItg9By28YWILE7m/y68PoO/tHfyzppWqbi2Hpsmoh70ahksZeO7Yz
JZKCHNcxoE22FQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:30 2025 by rpki-client