Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: nBLRJxeqNYT6x/+JiXWMLVUs0lYhxS5GvSmnx+hJQAY=
Subject key identifier: B1:36:71:27:57:5D:F8:6D:6A:E5:71:37:F7:BF:A4:B7:64:A6:1E:EE
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0198D5839D1D044A05074085F5A1B0AA8236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 10A7
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: qWtIEMNTZS9MBSAANdf/JviT0RrS4tudSiuxzzXC1pU=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9d:1d:04:4a:05:07:40:85:f5:a1:b0:aa:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=b1367127575df86d6ae57137f7bfa4b764a61eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:6d:25:28:ac:9e:f8:79:52:9f:1a:24:da:
bc:6a:91:35:0f:ea:b7:9c:94:aa:02:d7:fb:5a:ab:
bb:75:dc:7b:0a:5a:c2:e4:38:14:4d:3a:8f:d4:1e:
ae:d7:a4:e0:5e:55:d3:93:0c:83:99:4d:79:8d:e5:
24:c6:bd:e2:b0:3f:de:ab:c1:14:2e:07:9a:e8:95:
4d:b5:56:cf:c7:aa:54:74:8a:df:ed:f2:ba:5d:20:
91:e0:b7:b0:71:7d:8f:9c:77:39:a7:8a:9c:09:4d:
23:b9:52:ce:d8:db:9a:f1:2c:1d:d1:22:30:08:6b:
db:40:7f:06:2f:ce:72:66:ad:ec:fe:a0:9f:05:c1:
95:bc:1e:93:4e:f0:12:9b:81:9b:72:d3:3a:d3:8a:
bd:54:68:d0:d7:82:dc:30:75:2e:77:56:73:fa:69:
51:59:56:27:4e:f8:18:07:d7:c2:f4:4d:ef:cb:e3:
76:95:6b:2a:69:e4:30:0e:8f:31:39:1a:89:dc:54:
4d:f4:53:79:01:8c:5e:19:96:37:70:47:a4:11:56:
36:3e:a3:aa:c5:5c:84:1a:d0:0b:ee:6e:51:ee:dd:
f4:ea:a7:12:d3:00:7b:20:96:7b:c6:31:5c:76:05:
ad:7c:6e:e1:c9:d9:a1:3e:9e:2e:ee:d6:10:52:ad:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:71:27:57:5D:F8:6D:6A:E5:71:37:F7:BF:A4:B7:64:A6:1E:EE
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:f1:87:52:d2:d6:c1:d8:de:57:f1:88:b7:17:5d:36:c2:
e6:33:c9:dd:d8:53:59:89:ac:14:7c:76:3f:73:9f:b2:dd:d9:
7e:39:9d:41:0b:f1:5e:13:92:a4:9e:fb:e7:6d:b4:54:5c:93:
7c:30:50:62:3e:31:de:ea:ce:01:46:c5:da:43:ab:a9:87:f3:
96:99:25:30:eb:d7:ec:ee:e2:33:4f:69:22:07:ae:18:dd:d6:
2f:a6:b4:ba:e8:79:8e:98:f8:e3:23:cd:78:da:33:d3:88:c4:
e6:ac:09:47:47:65:da:fe:7b:70:51:5c:82:2e:ea:3a:9a:ab:
49:26:bf:3a:b3:fc:85:a5:a8:6b:2e:53:89:99:c9:2b:6b:17:
7f:36:ae:e1:2a:a3:11:e8:77:32:4c:f7:f3:6f:0d:1a:47:4f:
eb:b7:d6:76:45:ad:fd:5a:41:9b:2c:37:31:5f:e4:f7:c8:68:
82:00:0a:e2:4b:ed:d0:eb:73:6c:b6:a1:17:af:7d:79:57:ca:
26:5b:d7:42:3a:a9:b7:c9:ef:74:b6:6c:5a:70:11:a7:1d:d6:
37:35:84:c1:2c:e7:e1:f9:f1:ee:f5:be:c8:c0:1e:77:a0:ec:
c3:76:cb:a4:6e:39:5d:fd:e5:9f:3b:d9:a8:53:68:05:1d:50:
98:75:06:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg50dBEoFB0CF9aGwqoI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh
MTFmYjEwHhcNMjUwODIzMDYwMDI5WhcNMjUwODI0MDYwMDI5WjAzMTEwLwYDVQQD
EyhiMTM2NzEyNzU3NWRmODZkNmFlNTcxMzdmN2JmYTRiNzY0YTYxZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytttJSisnvh5Up8aJNq8apE1D+q3
nJSqAtf7Wqu7ddx7ClrC5DgUTTqP1B6u16TgXlXTkwyDmU15jeUkxr3isD/eq8EU
Lgea6JVNtVbPx6pUdIrf7fK6XSCR4LewcX2PnHc5p4qcCU0juVLO2Nua8Swd0SIw
CGvbQH8GL85yZq3s/qCfBcGVvB6TTvASm4GbctM604q9VGjQ14LcMHUud1Zz+mlR
WVYnTvgYB9fC9E3vy+N2lWsqaeQwDo8xORqJ3FRN9FN5AYxeGZY3cEekEVY2PqOq
xVyEGtAL7m5R7t306qcS0wB7IJZ7xjFcdgWtfG7hydmhPp4u7tYQUq27YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE2cSdXXfhtauVxN/e/pLdkph7uMB8GA1UdIwQY
MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt
Nzg4YzViNzU3NTRiLzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi
LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF7xh1LS
1sHY3lfxiLcXXTbC5jPJ3dhTWYmsFHx2P3Ofst3ZfjmdQQvxXhOSpJ775220VFyT
fDBQYj4x3urOAUbF2kOrqYfzlpklMOvX7O7iM09pIgeuGN3WL6a0uuh5jpj44yPN
eNoz04jE5qwJR0dl2v57cFFcgi7qOpqrSSa/OrP8haWoay5TiZnJK2sXfzau4Sqj
Eeh3Mkz3828NGkdP67fWdkWt/VpBmyw3MV/k98hoggAK4kvt0OtzbLahF699eVfK
JlvXQjqpt8nvdLZsWnARpx3WNzWEwSzn4fnx7vW+yMAed6Dsw3bLpG45Xf3lnzvZ
qFNoBR1QmHUGGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:25 2025 by rpki-client