
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: jL+p0vhjeTV0KuOkbJIiqiIqwiuDma8yrM1E/XuvoC8=
Subject key identifier: F7:1D:AC:93:D1:D0:01:AB:48:3D:5E:82:15:67:F9:41:AB:D2:3C:F0
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 0198D5BB8443FC40B10AE3AC9C9627D1B756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 10C0
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: +q0gLLA06a+fp7/JiTpCu37bOBx/5RrzEwIksnDknLM=)
2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:84:43:fc:40:b1:0a:e3:ac:9c:96:27:d1:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=f71dac93d1d001ab483d5e821567f941abd23cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:70:ec:e2:84:80:61:01:fb:7a:b6:cf:05:
5f:d4:3b:60:a1:77:3a:10:2e:39:35:3c:2f:dc:39:
0d:8f:36:00:da:99:a9:80:4c:1f:c2:f3:7d:c5:a8:
74:56:d2:5d:e8:79:18:9c:5e:d6:23:56:f1:58:68:
9d:8b:b2:2e:8c:1a:65:31:27:53:58:4e:76:2a:bc:
0b:27:74:57:58:ba:7e:4f:99:0f:54:8f:9a:5d:4b:
2a:52:68:f0:b8:11:e2:ab:80:d3:52:d7:6d:29:4c:
5a:e8:62:a3:d2:48:21:7b:e1:77:ff:60:db:40:8b:
78:a6:c0:87:c8:c3:0f:25:95:d7:86:21:03:b7:36:
69:55:09:2c:7c:61:c8:7d:dc:98:0c:00:01:1a:18:
d2:ea:67:b0:fd:85:f6:c2:b1:ff:83:72:00:0e:d9:
31:4e:54:af:40:9a:2b:82:e5:6b:9a:c8:b4:a6:1d:
b3:11:ad:91:ce:a2:a2:1d:0f:74:99:4c:4c:b2:25:
01:ec:a2:f8:ee:69:0a:36:62:f1:7b:be:d3:58:b4:
31:1c:37:39:28:01:a8:92:b1:73:ef:86:33:48:ef:
87:c4:01:7d:fb:f6:98:99:14:d9:d6:f9:5a:64:93:
63:47:52:bb:30:84:62:3f:2d:c0:f1:2d:4e:c9:1f:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:AC:93:D1:D0:01:AB:48:3D:5E:82:15:67:F9:41:AB:D2:3C:F0
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6d:a3:bf:4c:70:34:bc:5d:fc:6b:74:09:b6:cf:cc:45:7f:
c3:e0:05:fa:87:8d:43:2a:38:f9:47:a3:cf:02:ce:ab:db:b8:
58:2d:9f:8d:35:f9:ff:12:d9:a4:3b:1c:b4:93:b1:0c:96:e4:
7b:58:8f:99:94:5a:f4:49:b4:99:0b:c8:cf:26:85:e5:d5:06:
20:3f:f9:83:04:7e:5c:2e:94:ef:af:85:2e:60:52:8c:cc:85:
12:63:38:b7:66:1f:df:38:db:51:1b:7d:a0:f5:0f:73:cb:3a:
00:77:b7:73:c1:9a:7d:a5:5f:61:b0:0c:67:b4:5d:71:e0:ad:
6a:7b:bb:a4:e4:b4:03:fb:e1:d7:29:38:12:ca:f6:83:2d:24:
49:f0:37:ba:d4:8c:42:10:f1:5c:2f:ca:a2:e7:8d:c8:80:27:
e4:47:a6:d6:16:cf:36:50:31:5a:1b:12:7b:6d:b9:2a:c4:92:
df:34:35:ed:7c:d8:4d:4b:17:b2:1a:56:84:5f:5d:d7:54:b5:
e1:a7:1f:24:68:f6:fe:d6:20:f0:70:e5:96:38:80:87:06:3c:
05:28:35:4c:92:b8:40:44:1f:c3:4a:b3:a2:71:52:fc:a3:ee:
6d:3d:4d:69:44:35:93:b1:c3:bb:fe:76:de:43:f4:ae:42:03:
b6:d8:8c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4RD/ECxCuOsnJYn0bdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx
MDgwYjQwHhcNMjUwODIzMDcwMTMyWhcNMjUwODI0MDcwMTMyWjAzMTEwLwYDVQQD
EyhmNzFkYWM5M2QxZDAwMWFiNDgzZDVlODIxNTY3Zjk0MWFiZDIzY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Nw7OKEgGEB+3q2zwVf1DtgoXc6
EC45NTwv3DkNjzYA2pmpgEwfwvN9xah0VtJd6HkYnF7WI1bxWGidi7IujBplMSdT
WE52KrwLJ3RXWLp+T5kPVI+aXUsqUmjwuBHiq4DTUtdtKUxa6GKj0kghe+F3/2Db
QIt4psCHyMMPJZXXhiEDtzZpVQksfGHIfdyYDAABGhjS6mew/YX2wrH/g3IADtkx
TlSvQJorguVrmsi0ph2zEa2RzqKiHQ90mUxMsiUB7KL47mkKNmLxe77TWLQxHDc5
KAGokrFz74YzSO+HxAF9+/aYmRTZ1vlaZJNjR1K7MIRiPy3A8S1OyR90RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcdrJPR0AGrSD1eghVn+UGr0jzwMB8GA1UdIwQY
MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct
OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx
LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG2jv0xw
NLxd/Gt0CbbPzEV/w+AF+oeNQyo4+UejzwLOq9u4WC2fjTX5/xLZpDsctJOxDJbk
e1iPmZRa9Em0mQvIzyaF5dUGID/5gwR+XC6U76+FLmBSjMyFEmM4t2Yf3zjbURt9
oPUPc8s6AHe3c8GafaVfYbAMZ7RdceCtanu7pOS0A/vh1yk4Esr2gy0kSfA3utSM
QhDxXC/KoueNyIAn5Eem1hbPNlAxWhsSe225KsSS3zQ17XzYTUsXshpWhF9d11S1
4acfJGj2/tYg8HDlljiAhwY8BSg1TJK4QEQfw0qzonFS/KPubT1NaUQ1k7HDu/52
3kP0rkIDttiMIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:00 2025 by rpki-client