Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: zt3poau41OlYomYrgzfW2lsWsnZO8fKSXOEj7S9GIIo=
Subject key identifier: B4:BB:2A:FA:BE:5D:1E:B4:B2:28:19:38:1F:59:87:F8:81:AC:65:7A
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 0198D6606F2B852C2CADBAC85E5B916B5D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 0670
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: 5RUO5YOmSOOslIYKeS131pvjGFEvS2E1NqPYjr7sjiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6f:2b:85:2c:2c:ad:ba:c8:5e:5b:91:6b:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=b4bb2afabe5d1eb4b22819381f5987f881ac657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:09:8c:40:b9:02:46:a9:bc:bf:d8:25:76:
f0:31:b2:42:7e:f6:9f:f6:72:fd:21:fa:3b:fb:f3:
30:a4:97:cf:f9:da:a9:e7:20:ce:85:ae:e0:09:98:
79:e4:eb:f2:18:e8:1e:bb:c2:88:d9:e3:da:97:c4:
f6:c0:c1:cf:7a:2c:86:b8:38:d5:e0:34:c0:26:2f:
37:01:ba:c8:62:ef:31:b5:4a:74:3e:ff:bb:c1:fc:
71:51:34:e5:8f:98:be:6d:20:8e:d3:36:5f:4b:8a:
f1:fc:eb:61:c2:db:ef:89:92:db:47:6b:f3:63:f9:
d8:b1:3a:68:29:d4:d2:5a:27:76:84:fb:8f:e6:24:
3b:ae:e8:72:a5:d7:c9:e9:18:73:56:69:79:58:de:
ee:79:db:85:6c:bb:ce:d7:7f:65:34:45:71:7d:f6:
9a:0d:bb:ad:d2:ae:1d:aa:ef:b3:21:eb:99:10:ce:
f5:ac:33:93:c9:91:9e:bb:d7:68:f5:e1:71:0d:f3:
ff:92:ba:23:79:d5:d6:11:4b:0f:d8:52:34:15:9d:
52:b8:75:78:39:34:b7:d6:f4:ff:24:9a:49:05:50:
c1:2d:a8:23:b5:bb:8a:1e:f8:25:23:d4:e3:ca:30:
54:92:f1:f0:98:41:bd:a7:8c:f4:70:79:fa:7b:2d:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:2A:FA:BE:5D:1E:B4:B2:28:19:38:1F:59:87:F8:81:AC:65:7A
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:5d:da:a2:ee:1c:1d:52:25:db:78:79:64:a6:a1:11:ef:
9a:09:fb:37:ac:24:34:65:53:b8:b6:f8:5f:f7:85:39:82:e8:
dc:0d:ba:6e:bb:5a:ab:7d:66:bb:7b:39:65:df:24:9e:94:6b:
33:54:8d:60:c6:5b:3e:1b:0d:f3:2c:d8:b5:cb:9b:39:13:90:
28:6c:5a:03:c1:6d:d6:f2:3d:cb:14:f1:dc:3c:19:63:6a:34:
24:99:44:5a:af:4f:ca:dd:79:98:e1:90:7d:01:38:d5:17:1f:
17:8e:29:e4:6e:b5:21:cc:dd:2f:c3:e5:01:ef:74:e3:6a:ee:
d2:6f:a2:f9:ba:1e:13:54:7e:21:7f:22:f7:c8:31:40:61:81:
c7:0c:15:3e:3a:89:a9:3c:15:2a:0a:76:44:d9:31:99:74:6b:
02:90:01:69:93:d4:2f:67:a4:3b:2e:d0:84:16:90:e4:20:6e:
e4:62:42:8c:cc:5b:82:98:80:01:95:4d:d1:e6:31:6e:bc:17:
fa:42:ee:d0:65:60:af:5e:29:d6:09:b9:ed:6e:52:77:5b:8f:
9f:ad:db:67:1a:31:ab:9c:5b:fe:5a:6d:f2:46:94:0b:5d:12:
83:6b:0c:96:3a:29:9a:97:bf:1d:9f:24:16:63:e2:99:de:55:
c8:18:db:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYG8rhSwsrbrIXluRa11BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjUwODIzMTAwMTQwWhcNMjUwODI0MTAwMTQwWjAzMTEwLwYDVQQD
EyhiNGJiMmFmYWJlNWQxZWI0YjIyODE5MzgxZjU5ODdmODgxYWM2NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tAJjEC5AkapvL/YJXbwMbJCfvaf
9nL9Ifo7+/MwpJfP+dqp5yDOha7gCZh55OvyGOgeu8KI2ePal8T2wMHPeiyGuDjV
4DTAJi83AbrIYu8xtUp0Pv+7wfxxUTTlj5i+bSCO0zZfS4rx/OthwtvviZLbR2vz
Y/nYsTpoKdTSWid2hPuP5iQ7ruhypdfJ6RhzVml5WN7ueduFbLvO139lNEVxffaa
Dbut0q4dqu+zIeuZEM71rDOTyZGeu9do9eFxDfP/krojedXWEUsP2FI0FZ1SuHV4
OTS31vT/JJpJBVDBLagjtbuKHvglI9TjyjBUkvHwmEG9p4z0cHn6ey0gEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS7Kvq+XR60sigZOB9Zh/iBrGV6MB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxRd2qLu
HB1SJdt4eWSmoRHvmgn7N6wkNGVTuLb4X/eFOYLo3A26brtaq31mu3s5Zd8knpRr
M1SNYMZbPhsN8yzYtcubOROQKGxaA8Ft1vI9yxTx3DwZY2o0JJlEWq9Pyt15mOGQ
fQE41RcfF44p5G61IczdL8PlAe9042ru0m+i+boeE1R+IX8i98gxQGGBxwwVPjqJ
qTwVKgp2RNkxmXRrApABaZPUL2ekOy7QhBaQ5CBu5GJCjMxbgpiAAZVN0eYxbrwX
+kLu0GVgr14p1gm57W5Sd1uPn63bZxoxq5xb/lpt8kaUC10Sg2sMljopmpe/HZ8k
FmPimd5VyBjbRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:45 2025 by rpki-client