Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: jd/RT5fdbfmHVuFigXib/NVToNvQbBU09UAeCyoCUxU=
Subject key identifier: 01:F5:7A:10:EB:17:44:B5:D0:91:2E:C6:9C:3B:6D:36:26:A7:36:F2
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 0198D51570143494C0A6A853ACFC271D1192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 14AD
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: xYEzAL28JIC9Ove5iP7UD3OIsMQIFc7TnfTw1vIJrs4=)
2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:70:14:34:94:c0:a6:a8:53:ac:fc:27:1d:11:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=01f57a10eb1744b5d0912ec69c3b6d3626a736f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:17:a9:2b:1d:8c:ac:22:db:30:67:75:9f:
49:e6:7c:0b:2e:f4:4a:6a:cf:24:6f:fb:60:b7:1c:
e9:ac:03:62:38:34:d7:fd:cd:f9:b6:40:62:5b:b9:
24:66:9b:04:f6:6f:de:f1:19:82:0c:2e:1e:54:ce:
a5:92:b3:65:80:94:d7:20:85:09:60:22:5d:a8:64:
ed:0d:80:76:58:a7:86:37:75:f2:51:18:0a:23:c4:
ec:bc:c9:09:74:30:77:ff:75:8c:4b:da:3d:5d:66:
15:2a:af:08:a6:ed:9f:9a:05:e3:cb:f4:dc:01:ef:
0a:ae:43:b3:ea:21:17:62:81:4c:8f:02:8f:00:17:
ba:33:3a:75:27:5b:7e:81:53:b4:1f:d6:50:30:f2:
e9:a5:fc:a9:12:7c:08:33:39:89:bc:2e:aa:b4:88:
c1:d2:88:35:27:4b:4b:5a:43:93:fc:33:b5:3f:e6:
a1:23:e0:39:8d:3f:41:80:b0:bc:39:79:f3:87:78:
b7:18:49:f9:37:11:56:73:2f:3d:c6:6d:86:01:8f:
ab:bb:38:af:3d:db:c8:b2:1b:a5:ad:0c:75:5f:a9:
72:7f:02:18:ff:07:bb:4a:bb:95:48:12:d7:de:7a:
fb:b3:03:87:26:fd:b1:2f:a4:ef:78:e5:0b:24:65:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:7A:10:EB:17:44:B5:D0:91:2E:C6:9C:3B:6D:36:26:A7:36:F2
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:91:f2:fc:f9:10:3a:33:c3:12:20:ba:30:4b:15:40:5b:
bc:31:76:cf:ef:1f:94:ae:6c:f8:5e:31:22:08:11:42:1d:ff:
da:3b:d1:62:cc:a1:75:f6:87:c6:8e:c4:25:8a:5a:76:8e:50:
36:dc:13:ab:20:2f:3c:ba:dd:84:c5:c1:3b:33:87:ca:44:89:
44:12:18:91:b5:6c:a9:89:a5:70:fb:51:2f:6d:92:08:5f:d6:
c9:c5:85:7f:bf:86:50:78:a5:72:07:8b:75:03:dd:4d:02:54:
8b:f5:6d:10:44:3a:61:75:ee:7f:76:c4:71:10:ff:ee:fb:38:
ed:b9:d4:70:c1:3d:99:e9:6a:b2:c2:6e:1a:b2:af:5b:9d:fc:
e1:79:85:2c:d8:95:72:04:5e:39:9c:80:e8:53:3f:89:b6:0d:
84:c6:05:aa:0b:29:09:7c:46:0e:72:b4:ec:d6:80:2b:8b:2d:
71:c9:8e:46:49:bf:60:5d:c9:10:71:99:a3:33:9f:44:f7:85:
2b:88:56:ca:c9:95:36:86:d8:c1:dd:e9:36:93:58:03:5b:48:
87:95:98:0c:5d:f1:7e:cc:4a:c2:54:05:a8:e0:76:85:f6:68:
f0:0f:b6:72:c6:09:87:a5:43:a7:72:cd:2c:94:79:6c:b4:99:
52:ae:d4:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXAUNJTApqhTrPwnHRGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4
ZDM0ZDYwHhcNMjUwODIzMDQwMDA4WhcNMjUwODI0MDQwMDA4WjAzMTEwLwYDVQQD
EygwMWY1N2ExMGViMTc0NGI1ZDA5MTJlYzY5YzNiNmQzNjI2YTczNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXIXqSsdjKwi2zBndZ9J5nwLLvRK
as8kb/tgtxzprANiODTX/c35tkBiW7kkZpsE9m/e8RmCDC4eVM6lkrNlgJTXIIUJ
YCJdqGTtDYB2WKeGN3XyURgKI8TsvMkJdDB3/3WMS9o9XWYVKq8Ipu2fmgXjy/Tc
Ae8KrkOz6iEXYoFMjwKPABe6Mzp1J1t+gVO0H9ZQMPLppfypEnwIMzmJvC6qtIjB
0og1J0tLWkOT/DO1P+ahI+A5jT9BgLC8OXnzh3i3GEn5NxFWcy89xm2GAY+ruziv
PdvIshulrQx1X6lyfwIY/we7SruVSBLX3nr7swOHJv2xL6TveOULJGXzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH1ehDrF0S10JEuxpw7bTYmpzbyMB8GA1UdIwQY
MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt
MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw
LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ2R8vz5
EDozwxIgujBLFUBbvDF2z+8flK5s+F4xIggRQh3/2jvRYsyhdfaHxo7EJYpado5Q
NtwTqyAvPLrdhMXBOzOHykSJRBIYkbVsqYmlcPtRL22SCF/WycWFf7+GUHilcgeL
dQPdTQJUi/VtEEQ6YXXuf3bEcRD/7vs47bnUcME9melqssJuGrKvW5384XmFLNiV
cgReOZyA6FM/ibYNhMYFqgspCXxGDnK07NaAK4stccmORkm/YF3JEHGZozOfRPeF
K4hWysmVNobYwd3pNpNYA1tIh5WYDF3xfsxKwlQFqOB2hfZo8A+2csYJh6VDp3LN
LJR5bLSZUq7U6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:09 2025 by rpki-client