Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier: gfHpdzF8aPmfboyEMBjZVT/X5RqfJDB1+O0C2O4bYaQ=
Subject key identifier: DF:13:F5:24:30:4E:83:1A:D5:77:B4:21:A1:03:0E:A1:5E:AB:06:C5
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 0198D4E04A712AADE76BE8E9C5D3F2508C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: feytuBDkczChqG0LPy+8RUMYqnV3F/5Dc4ZhyV73Np8=)
2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4a:71:2a:ad:e7:6b:e8:e9:c5:d3:f2:50:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=df13f524304e831ad577b421a1030ea15eab06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:f8:c0:3d:32:7d:e6:03:43:74:85:09:e8:
72:5f:e5:b0:d6:07:14:ad:f7:d0:08:00:22:d1:8b:
db:31:d9:79:58:e6:33:2a:4d:6d:9b:69:1f:e1:84:
17:19:f9:2a:ea:20:39:47:6b:7c:65:b4:8b:4e:57:
a5:d3:64:2d:50:37:a9:89:f6:94:d2:c8:cc:1c:e4:
a7:90:cc:16:cf:64:62:1b:4c:81:76:24:dd:4e:9f:
5a:ca:f3:8c:9b:48:d6:4d:1b:8e:40:3d:f2:ab:33:
3e:ae:d5:95:eb:fd:21:7c:1d:5f:6b:0d:12:07:b1:
61:c9:16:c4:64:8b:48:1d:e3:93:a1:8b:cf:53:69:
89:81:f1:ec:6d:6b:25:98:77:17:d8:c2:f4:1d:32:
6b:4b:6f:52:08:1f:f7:96:26:5d:d1:13:a7:05:0d:
44:5c:bd:fb:b5:24:f1:d1:da:25:86:44:bd:0f:f8:
53:f8:65:a2:59:01:23:3e:5f:c1:2e:45:ff:b7:5e:
5e:2b:04:c0:1d:fe:96:83:64:f5:c1:1e:4d:ec:79:
b2:9a:3b:fa:a2:53:7e:be:d8:2f:22:f0:fd:15:d2:
c7:fd:fd:78:b1:26:88:78:ec:f3:b0:5d:0c:38:5f:
a8:ad:39:1f:46:2e:c5:a8:5f:d9:ac:d0:ef:a3:34:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:F5:24:30:4E:83:1A:D5:77:B4:21:A1:03:0E:A1:5E:AB:06:C5
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:36:31:88:74:43:a8:5f:05:f2:fd:91:95:73:41:34:6c:
fa:11:dd:e5:9b:04:16:59:08:24:74:45:b9:5e:3d:d6:5b:27:
4e:11:f1:94:7f:04:84:b3:26:0e:97:d0:4b:e8:40:10:97:9a:
e6:17:ae:2d:ee:7c:9c:b1:c6:9c:16:79:03:97:46:69:98:ea:
4c:c3:8f:e4:c6:61:21:21:90:8e:9d:c2:5b:f4:3b:35:90:38:
39:41:57:01:b9:14:9d:80:cb:c0:10:c7:d0:cf:8d:ac:01:83:
d5:60:16:ed:dd:eb:6c:b4:28:6b:b8:81:49:75:35:bf:d0:54:
2c:55:91:a9:f5:31:d8:69:61:99:ca:da:a9:ea:6c:01:44:3a:
fc:35:a3:4b:5e:7c:29:ee:bc:4e:96:c7:13:8a:f2:3a:51:88:
ff:53:17:f9:46:c8:ae:97:12:75:0b:c7:31:3d:f5:65:a5:6f:
6a:d3:ea:4d:46:32:26:a4:e7:09:d9:f9:8d:dd:d2:c6:47:10:
ab:8f:86:58:21:e7:a6:6f:65:c0:21:61:3d:6d:51:e0:69:32:
80:3e:4b:97:01:ec:7e:84:27:9d:de:8e:91:50:d4:bc:b2:6a:
45:1e:5e:e2:45:b4:58:53:12:ba:5f:eb:c9:40:1a:32:c9:e2:
7a:5a:84:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4EpxKq3na+jpxdPyUIwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz
NTk3MzgwHhcNMjUwODIzMDMwMjA1WhcNMjUwODI0MDMwMjA1WjAzMTEwLwYDVQQD
EyhkZjEzZjUyNDMwNGU4MzFhZDU3N2I0MjFhMTAzMGVhMTVlYWIwNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmX4wD0yfeYDQ3SFCehyX+Ww1gcU
rffQCAAi0YvbMdl5WOYzKk1tm2kf4YQXGfkq6iA5R2t8ZbSLTlel02QtUDepifaU
0sjMHOSnkMwWz2RiG0yBdiTdTp9ayvOMm0jWTRuOQD3yqzM+rtWV6/0hfB1faw0S
B7FhyRbEZItIHeOToYvPU2mJgfHsbWslmHcX2ML0HTJrS29SCB/3liZd0ROnBQ1E
XL37tSTx0dolhkS9D/hT+GWiWQEjPl/BLkX/t15eKwTAHf6Wg2T1wR5N7Hmymjv6
olN+vtgvIvD9FdLH/f14sSaIeOzzsF0MOF+orTkfRi7FqF/ZrNDvozSp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8T9SQwToMa1Xe0IaEDDqFeqwbFMB8GA1UdIwQY
MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt
OTZkZGQ1YTAyMzlkLzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk
LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1k2MYh0
Q6hfBfL9kZVzQTRs+hHd5ZsEFlkIJHRFuV491lsnThHxlH8EhLMmDpfQS+hAEJea
5heuLe58nLHGnBZ5A5dGaZjqTMOP5MZhISGQjp3CW/Q7NZA4OUFXAbkUnYDLwBDH
0M+NrAGD1WAW7d3rbLQoa7iBSXU1v9BULFWRqfUx2GlhmcraqepsAUQ6/DWjS158
Ke68TpbHE4ryOlGI/1MX+UbIrpcSdQvHMT31ZaVvatPqTUYyJqTnCdn5jd3SxkcQ
q4+GWCHnpm9lwCFhPW1R4GkygD5LlwHsfoQnnd6OkVDUvLJqRR5e4kW0WFMSul/r
yUAaMsnielqE2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:41 2025 by rpki-client