Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: Y+3nfGgLXzvN+M2EiqnAeYsSDkSuEr7TKl7jKg2OGUw=
Subject key identifier: DB:E5:0F:45:D8:D1:69:C0:15:12:91:B4:90:5D:03:67:C1:32:0F:A1
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 0198D5BBE3E1522C0BCFA5AACD2232A2446D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0C3B
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: bpHRlN1lLpcKW7ZzhaeRzAlqWnPkeVhaprDSJKEk3b4=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e3:e1:52:2c:0b:cf:a5:aa:cd:22:32:a2:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=dbe50f45d8d169c0151291b4905d0367c1320fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:93:a8:86:db:d6:8c:35:ef:7e:fa:5b:f2:
37:0b:52:ea:b4:96:7f:2a:87:02:a0:b9:3a:24:65:
b8:58:b7:d3:07:6e:2e:32:2f:23:a4:61:b3:95:46:
89:40:90:54:f9:c2:e9:29:dd:45:e4:aa:e3:5f:03:
6e:3c:b8:e6:0c:c3:a1:15:4a:f4:f2:29:79:ba:09:
b3:ac:a9:db:12:37:f6:43:98:c5:8b:1f:e3:40:1e:
c8:80:57:53:a1:fd:53:db:88:8c:03:66:c6:3f:df:
fd:41:35:0d:eb:7d:0b:3d:ce:c8:b6:c8:9f:86:e0:
9c:44:56:10:51:65:f3:35:ab:33:a4:f1:dc:7b:3c:
b9:dc:63:2f:92:f8:25:c4:88:b1:48:a4:05:5e:6e:
b3:cb:dd:64:7f:39:a4:49:cd:d9:d5:fa:c9:26:98:
94:ea:94:16:1e:52:d3:a7:a9:ae:10:ee:34:22:27:
54:d7:72:53:fb:bc:c0:39:d3:1c:38:7c:83:4b:16:
29:57:83:b7:51:bf:f9:ab:61:41:e7:d6:f8:50:16:
1c:17:4e:1c:30:a0:6a:31:be:ca:4b:a3:01:7a:4f:
f1:5f:8d:93:c4:fb:84:71:6d:56:d0:3f:ea:b1:b4:
6d:d9:60:6d:b2:ae:37:c1:f0:5f:f3:8c:7d:3b:45:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:0F:45:D8:D1:69:C0:15:12:91:B4:90:5D:03:67:C1:32:0F:A1
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:08:5a:b9:b2:ff:da:ab:1a:ff:31:b9:93:02:7d:bc:66:
6a:08:c7:4d:56:03:0b:bd:c7:7f:a8:49:9a:71:9e:c1:81:b0:
01:70:95:87:97:67:70:46:f7:a2:6b:cb:45:90:64:6f:67:0c:
e6:26:0b:48:5a:af:b7:98:ee:87:75:99:19:75:45:fd:86:be:
c4:f1:8f:ab:29:8d:5f:d2:e4:51:94:1f:a8:98:6c:c9:69:56:
62:f2:2d:f9:0b:3b:3a:b9:80:d5:d3:bf:0f:58:df:f6:3a:d8:
0d:c3:91:4f:2f:08:87:7c:a3:3c:b4:96:60:04:a8:12:06:a8:
85:5f:f3:f4:1c:7f:7d:4e:a8:53:c5:28:0b:cb:86:91:68:ae:
dc:b9:19:2f:f7:50:25:d7:fb:80:d7:41:33:14:a8:69:d0:1f:
ec:f1:54:e9:d0:11:17:a3:95:8a:10:ce:0b:07:b3:7c:5a:c0:
2d:97:44:15:29:08:85:c6:68:98:c3:ea:8f:8c:cf:01:a4:b5:
eb:cd:aa:7f:56:8d:ab:cd:36:4a:b8:8a:e2:87:54:4a:59:9a:
c4:92:91:5f:8b:d5:e6:2e:44:8c:6e:1d:b6:82:fb:78:4a:2e:
8a:8d:d7:9e:c7:5f:97:4e:9c:d7:ce:a3:3f:c2:61:48:20:27:
b6:b8:01:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+PhUiwLz6WqzSIyokRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi
Y2M0MmMwHhcNMjUwODIzMDcwMTU3WhcNMjUwODI0MDcwMTU3WjAzMTEwLwYDVQQD
EyhkYmU1MGY0NWQ4ZDE2OWMwMTUxMjkxYjQ5MDVkMDM2N2MxMzIwZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2TqIbb1ow17376W/I3C1LqtJZ/
KocCoLk6JGW4WLfTB24uMi8jpGGzlUaJQJBU+cLpKd1F5KrjXwNuPLjmDMOhFUr0
8il5ugmzrKnbEjf2Q5jFix/jQB7IgFdTof1T24iMA2bGP9/9QTUN630LPc7Itsif
huCcRFYQUWXzNaszpPHcezy53GMvkvglxIixSKQFXm6zy91kfzmkSc3Z1frJJpiU
6pQWHlLTp6muEO40IidU13JT+7zAOdMcOHyDSxYpV4O3Ub/5q2FB59b4UBYcF04c
MKBqMb7KS6MBek/xX42TxPuEcW1W0D/qsbRt2WBtsq43wfBf84x9O0VCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvlD0XY0WnAFRKRtJBdA2fBMg+hMB8GA1UdIwQY
MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct
MjNiMjhmMzlhNjAyLzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy
LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0EIWrmy
/9qrGv8xuZMCfbxmagjHTVYDC73Hf6hJmnGewYGwAXCVh5dncEb3omvLRZBkb2cM
5iYLSFqvt5juh3WZGXVF/Ya+xPGPqymNX9LkUZQfqJhsyWlWYvIt+Qs7OrmA1dO/
D1jf9jrYDcORTy8Ih3yjPLSWYASoEgaohV/z9Bx/fU6oU8UoC8uGkWiu3LkZL/dQ
Jdf7gNdBMxSoadAf7PFU6dARF6OVihDOCwezfFrALZdEFSkIhcZomMPqj4zPAaS1
682qf1aNq802SriK4odUSlmaxJKRX4vV5i5EjG4dtoL7eEouio3Xnsdfl06c186j
P8JhSCAntrgBEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:02 2025 by rpki-client