Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: +4a9aUlMErz2sy1k36czcQHMXOBJNapm4G6i4CnXIOk=
Subject key identifier: 35:14:4E:BD:13:DC:3F:CB:37:4A:FB:56:A7:4F:58:5B:44:F9:14:4A
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 0198D6986216CEAB5FB4E5DAC235729069DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: tp6pv8lZ4RpbLKj5PzfZHuHmx+4s5gjdgZ742IMjchY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:62:16:ce:ab:5f:b4:e5:da:c2:35:72:90:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=35144ebd13dc3fcb374afb56a74f585b44f9144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:7d:a5:f7:eb:25:e7:ba:a3:df:fb:49:86:
54:19:20:fc:6f:25:1e:36:61:8f:55:a5:af:d7:cb:
29:8f:0b:5e:fb:de:88:dc:53:ec:e7:20:23:27:35:
3b:44:a2:2b:9a:0f:ca:2f:ea:66:6f:ce:f2:f1:b2:
9d:fd:da:12:bb:bf:cf:83:ee:ea:b4:49:70:b0:32:
03:b4:42:7a:fe:2f:1e:07:9d:d4:50:e1:1d:86:d8:
7c:6a:15:07:c7:de:04:5a:95:5c:d2:33:27:1b:55:
96:9a:57:2a:1f:8e:db:d8:51:75:cf:c6:36:a9:6e:
c1:5a:89:6f:55:93:fc:94:cb:1a:f2:a1:10:5b:0f:
b2:7d:ed:0e:dd:ec:19:fa:3d:1e:6f:af:12:85:d7:
08:d1:cb:eb:d0:68:c1:68:9c:e6:63:35:56:7b:b0:
a0:77:12:0e:8b:f9:fd:5f:c8:88:d9:18:96:16:b2:
c7:e6:7b:11:bd:83:f9:ae:5d:65:1e:db:40:d0:76:
f9:f4:74:9a:d8:c5:56:f3:d5:f7:39:47:67:2c:7c:
1e:fe:46:9c:13:ad:e0:40:80:40:88:f5:37:9a:38:
e1:b7:f9:b8:e9:bd:47:30:00:fb:de:41:2d:96:55:
37:b3:54:07:00:71:82:fd:bd:ec:e0:a4:95:9b:72:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:4E:BD:13:DC:3F:CB:37:4A:FB:56:A7:4F:58:5B:44:F9:14:4A
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:f6:ae:9a:92:d2:bf:3f:2b:86:10:9b:76:88:22:3b:29:
2c:6f:6e:92:bc:63:d1:97:fe:d6:44:c4:12:7e:55:a2:d7:89:
96:19:04:99:4b:ef:86:de:6b:d0:a1:75:94:a7:ae:02:14:45:
e3:e6:91:7d:e2:df:0c:36:19:f7:53:8c:58:80:63:80:bd:e9:
a0:e0:c0:1f:6c:84:1a:fe:fe:27:09:81:63:7f:07:ff:16:0a:
d1:0c:32:86:c4:39:87:0c:8b:f4:ad:c0:ce:f2:c3:78:0c:72:
0b:a7:8c:c6:ea:f3:02:06:25:90:b9:91:da:b9:e7:b3:e8:4d:
42:ae:43:08:e0:97:fc:1f:a2:c7:1f:4a:57:20:bf:08:30:8f:
76:6d:01:ba:24:b7:fc:ee:0b:ff:83:c7:95:9a:51:92:ed:52:
19:a7:d4:2f:43:2a:28:c0:0c:9e:23:1c:fd:67:20:d7:cf:fa:
f5:7c:c2:7e:36:40:3d:a4:ce:12:0b:bb:e9:5a:2b:8f:98:38:
6b:b8:68:4e:dd:a7:f3:05:10:7b:81:59:97:d6:7c:14:46:64:
36:86:62:a3:8b:5b:69:77:9c:d4:8c:20:52:24:6d:e4:76:cc:
2d:a0:b2:bf:34:a9:43:4a:ff:b8:c9:12:0f:7d:c1:e5:0a:aa:
34:4f:22:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGIWzqtftOXawjVykGnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTU3NjMxZjYwYWRiMTNmMGFlMzY4NjcxY2UwZjg3NDJm
NTk3N2YwHhcNMjUwODIzMTEwMjQ3WhcNMjUwODI0MTEwMjQ3WjAzMTEwLwYDVQQD
EygzNTE0NGViZDEzZGMzZmNiMzc0YWZiNTZhNzRmNTg1YjQ0ZjkxNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXV9pffrJee6o9/7SYZUGSD8byUe
NmGPVaWv18spjwte+96I3FPs5yAjJzU7RKIrmg/KL+pmb87y8bKd/doSu7/Pg+7q
tElwsDIDtEJ6/i8eB53UUOEdhth8ahUHx94EWpVc0jMnG1WWmlcqH47b2FF1z8Y2
qW7BWolvVZP8lMsa8qEQWw+yfe0O3ewZ+j0eb68ShdcI0cvr0GjBaJzmYzVWe7Cg
dxIOi/n9X8iI2RiWFrLH5nsRvYP5rl1lHttA0Hb59HSa2MVW89X3OUdnLHwe/kac
E63gQIBAiPU3mjjht/m46b1HMAD73kEtllU3s1QHAHGC/b3s4KSVm3KjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUUTr0T3D/LN0r7VqdPWFtE+RRKMB8GA1UdIwQY
MBaAFNrldjH2CtsT8K42hnHOD4dC9Zd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEt
NDM5ZjM2ZTE2NTNhLzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEtNDM5ZjM2ZTE2NTNh
LzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgj2rpqS
0r8/K4YQm3aIIjspLG9ukrxj0Zf+1kTEEn5VoteJlhkEmUvvht5r0KF1lKeuAhRF
4+aRfeLfDDYZ91OMWIBjgL3poODAH2yEGv7+JwmBY38H/xYK0QwyhsQ5hwyL9K3A
zvLDeAxyC6eMxurzAgYlkLmR2rnns+hNQq5DCOCX/B+ixx9KVyC/CDCPdm0BuiS3
/O4L/4PHlZpRku1SGafUL0MqKMAMniMc/Wcg18/69XzCfjZAPaTOEgu76Vorj5g4
a7hoTt2n8wUQe4FZl9Z8FEZkNoZio4tbaXec1IwgUiRt5HbMLaCyvzSpQ0r/uMkS
D33B5QqqNE8iFQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:22 2025 by rpki-client