Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: 8WWH2G/Ig5mbN41sl6atf5PRCDynR9V7SAYAhUs6piw=
Subject key identifier: 64:B3:1E:DC:30:A3:8C:BD:C1:63:AD:AB:C4:19:77:A4:21:B0:6B:5A
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 0198D6603D5BA1A5ED03B60FC0D3E22438D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0E6A
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: X1TR+hNEJYApSl/+drIlVi1cV/CfyH1dR5Bsu9tjciU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3d:5b:a1:a5:ed:03:b6:0f:c0:d3:e2:24:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=64b31edc30a38cbdc163adabc41977a421b06b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:1a:98:0f:d4:4c:bd:2d:a7:fa:25:ff:93:
94:0b:75:69:e7:e4:42:e3:b7:38:02:a7:bc:92:52:
15:ee:bf:a6:48:02:d1:51:52:f8:bb:73:77:e3:16:
75:66:24:4f:4c:c6:eb:4c:19:c5:69:91:21:f6:de:
94:33:53:07:bb:87:b0:b8:f6:59:6b:77:fc:c0:53:
65:8d:40:cd:7b:a9:ff:93:f7:ec:ed:53:14:f2:c5:
26:2b:05:2b:2d:ec:b7:93:de:73:9d:fa:a8:5b:f9:
b3:f3:6b:7c:1a:02:8c:7c:26:02:f7:56:6b:fa:db:
82:0d:0e:99:db:48:75:75:2c:33:ac:9a:36:1d:62:
1f:e1:34:d3:de:2b:ed:20:77:18:c5:8b:4c:c9:33:
ed:f2:01:1b:e3:ad:8b:b2:10:b2:41:c0:ac:97:56:
0a:04:17:98:96:b3:83:81:24:24:d7:a8:0a:43:cd:
e4:5a:34:73:3d:f0:2b:36:bb:99:89:f6:f5:64:07:
08:5c:2b:68:17:85:be:be:38:94:0a:2d:95:3f:a9:
41:5d:bf:ba:ce:15:ca:9c:cf:ca:38:e7:11:fd:2f:
b0:9e:a8:50:12:24:1d:2c:99:a1:88:92:c6:f9:17:
57:61:1d:a5:f7:41:9e:2a:59:04:9f:90:31:5d:be:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:1E:DC:30:A3:8C:BD:C1:63:AD:AB:C4:19:77:A4:21:B0:6B:5A
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:b7:af:35:32:1e:6b:92:aa:13:32:96:4f:4e:59:59:70:
b9:11:9f:ed:d4:ae:61:f3:49:f8:f3:b7:fc:59:d8:2c:dc:7e:
68:84:47:ea:2b:35:07:59:3c:99:85:b0:2d:86:14:c6:2e:63:
4b:ba:4c:d5:23:79:4e:a4:09:e2:98:4f:35:5d:80:4c:c6:9c:
20:fc:9c:34:92:2b:4c:46:68:c1:1a:ca:24:1c:73:5a:9b:83:
22:c3:09:e5:5c:35:29:c3:f2:f7:fe:a5:d6:d6:40:80:6b:67:
c9:4e:44:1e:55:f3:35:da:12:d1:12:36:30:e3:e8:ae:70:dc:
7a:e6:00:68:b9:17:a3:7b:95:1e:65:5f:4e:c3:90:5a:cf:5a:
87:39:df:1e:4c:9c:b9:76:c3:ec:c2:6e:0d:89:39:d0:1b:52:
9e:47:65:35:4a:43:34:b0:1b:05:f7:10:45:0e:79:b7:77:21:
cc:75:9f:34:9a:8d:9e:7b:62:db:9d:9c:6d:8f:58:c9:b6:78:
fa:63:67:32:fe:a6:ca:54:42:69:25:d2:63:ed:44:06:19:ec:
86:33:e0:66:d6:3c:fa:ab:74:ae:2a:82:9b:00:94:57:5f:b3:
9f:7b:0d:8d:80:b4:94:c6:3c:8f:2d:c7:c5:df:88:f1:18:0c:
6d:a5:6d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYD1boaXtA7YPwNPiJDjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzE4YjVhZDNhMjVmMTE4YTgzYmIyZmZiYmU3OTVkNjY0
MzY2M2MwHhcNMjUwODIzMTAwMTI3WhcNMjUwODI0MTAwMTI3WjAzMTEwLwYDVQQD
Eyg2NGIzMWVkYzMwYTM4Y2JkYzE2M2FkYWJjNDE5NzdhNDIxYjA2YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZgamA/UTL0tp/ol/5OUC3Vp5+RC
47c4Aqe8klIV7r+mSALRUVL4u3N34xZ1ZiRPTMbrTBnFaZEh9t6UM1MHu4ewuPZZ
a3f8wFNljUDNe6n/k/fs7VMU8sUmKwUrLey3k95znfqoW/mz82t8GgKMfCYC91Zr
+tuCDQ6Z20h1dSwzrJo2HWIf4TTT3ivtIHcYxYtMyTPt8gEb462LshCyQcCsl1YK
BBeYlrODgSQk16gKQ83kWjRzPfArNruZifb1ZAcIXCtoF4W+vjiUCi2VP6lBXb+6
zhXKnM/KOOcR/S+wnqhQEiQdLJmhiJLG+RdXYR2l90GeKlkEn5AxXb4dSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSzHtwwo4y9wWOtq8QZd6QhsGtaMB8GA1UdIwQY
MBaAFNjBi1rTol8RioO7L/u+eV1mQ2Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYt
ZDg3ZmI3NjdkOGJkLzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYtZDg3ZmI3NjdkOGJk
LzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoy3rzUy
HmuSqhMylk9OWVlwuRGf7dSuYfNJ+PO3/FnYLNx+aIRH6is1B1k8mYWwLYYUxi5j
S7pM1SN5TqQJ4phPNV2ATMacIPycNJIrTEZowRrKJBxzWpuDIsMJ5Vw1KcPy9/6l
1tZAgGtnyU5EHlXzNdoS0RI2MOPornDceuYAaLkXo3uVHmVfTsOQWs9ahznfHkyc
uXbD7MJuDYk50BtSnkdlNUpDNLAbBfcQRQ55t3chzHWfNJqNnnti252cbY9YybZ4
+mNnMv6mylRCaSXSY+1EBhnshjPgZtY8+qt0riqCmwCUV1+zn3sNjYC0lMY8jy3H
xd+I8RgMbaVtBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:28 2025 by rpki-client