Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: 1gG24HvBut4eI05wG+0UAC8cb5DOQmqOTe9+hpW8ASE=
Subject key identifier: B4:22:2C:B1:79:A2:43:77:60:C1:C1:C3:79:9E:16:75:4A:2C:C8:07
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 0198D583D92D8FFD86E89EF88B050BAF5C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 0FC3
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: pTA27jeDqpIpBjJkRMWT4es7w+6aNJ62csBwO2/oY40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d9:2d:8f:fd:86:e8:9e:f8:8b:05:0b:af:5c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=b4222cb179a2437760c1c1c3799e16754a2cc807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:a8:70:9a:f7:60:ae:87:95:ee:40:8b:89:
89:f8:09:0c:f7:88:4f:7a:81:fb:a2:5a:50:f9:24:
81:c7:41:ec:37:0e:1e:58:28:22:14:cd:4d:de:04:
7c:51:a1:e0:d8:2b:13:e2:d6:8b:f6:e0:6e:fa:6f:
9c:3f:bf:30:1e:95:42:fa:c2:ef:20:e4:32:56:9d:
4d:a6:a0:86:7e:f6:a5:00:d8:73:a1:2c:0d:1a:36:
a3:01:75:df:09:4b:59:68:74:fe:35:8a:9b:b6:16:
c3:bd:7c:e0:5d:57:42:d0:d2:78:1a:80:a7:f7:fe:
34:be:a3:ee:9b:90:55:1e:ff:6f:bb:97:49:63:7f:
3b:50:e3:02:f2:86:1c:c6:76:0a:b7:d2:c7:45:01:
3e:6a:98:f1:58:f2:03:ea:fc:28:37:22:37:76:45:
7d:dc:6f:ce:76:de:2d:60:08:27:32:6e:57:fa:9b:
f9:63:7c:f8:ce:16:16:57:aa:27:e6:d6:53:55:de:
e1:b4:e4:fd:39:f1:dd:5a:64:66:92:fb:8b:72:b0:
b2:bb:0b:10:1d:06:b0:d9:4f:ae:14:3c:4d:38:e5:
f9:01:89:9d:e7:65:e6:6f:7b:ad:d6:1d:a9:fe:2a:
ea:3c:b9:08:99:f5:f8:9a:b9:cf:06:9d:55:f0:4b:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:2C:B1:79:A2:43:77:60:C1:C1:C3:79:9E:16:75:4A:2C:C8:07
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:0f:97:f1:1f:1b:7c:82:cc:d0:4c:2d:dd:e3:71:3f:1f:
bb:4a:7f:06:1f:fa:ab:b6:77:9e:f2:3f:d4:cb:34:8e:b1:66:
d9:ea:ee:97:df:92:da:6c:5a:8d:0f:9f:13:1e:c7:2f:e0:b9:
9d:53:7c:37:26:19:62:54:89:bd:25:07:c3:fd:ea:3b:ab:73:
39:e9:5c:ea:4c:b2:e7:ef:3f:fb:48:31:f5:af:36:3f:9c:ab:
36:8e:09:7f:6b:38:62:30:4e:a7:3b:db:d7:98:f3:b6:b8:0e:
4c:b2:37:8e:87:7f:5a:86:d7:2d:12:fa:ce:ce:34:48:ca:bb:
16:e3:04:83:78:41:f9:23:19:a6:f0:0f:98:bf:29:ab:72:40:
24:a1:45:f4:2e:3c:fb:48:b9:eb:95:87:e1:2e:d2:36:d0:78:
57:34:3e:58:f4:0a:a9:0a:68:03:df:63:ed:51:9a:9a:1e:1c:
e8:6d:17:f7:69:3a:b5:c3:2c:36:20:82:4b:0c:f4:96:3b:d9:
77:3d:de:31:c3:1f:e4:0d:87:ec:18:46:1c:90:f8:a7:05:f5:
81:41:f7:e3:df:b6:d4:3c:a9:82:3c:bc:97:c7:81:dc:35:73:
89:46:92:bd:56:c9:7b:97:8b:3d:71:41:29:50:1f:3e:75:c1:
21:7e:16:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9ktj/2G6J74iwULr1wvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjUwODIzMDYwMDQ0WhcNMjUwODI0MDYwMDQ0WjAzMTEwLwYDVQQD
EyhiNDIyMmNiMTc5YTI0Mzc3NjBjMWMxYzM3OTllMTY3NTRhMmNjODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueGocJr3YK6Hle5Ai4mJ+AkM94hP
eoH7olpQ+SSBx0HsNw4eWCgiFM1N3gR8UaHg2CsT4taL9uBu+m+cP78wHpVC+sLv
IOQyVp1NpqCGfvalANhzoSwNGjajAXXfCUtZaHT+NYqbthbDvXzgXVdC0NJ4GoCn
9/40vqPum5BVHv9vu5dJY387UOMC8oYcxnYKt9LHRQE+apjxWPID6vwoNyI3dkV9
3G/Odt4tYAgnMm5X+pv5Y3z4zhYWV6on5tZTVd7htOT9OfHdWmRmkvuLcrCyuwsQ
HQaw2U+uFDxNOOX5AYmd52Xmb3ut1h2p/irqPLkImfX4mrnPBp1V8EtoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQiLLF5okN3YMHBw3meFnVKLMgHMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhQPl/Ef
G3yCzNBMLd3jcT8fu0p/Bh/6q7Z3nvI/1Ms0jrFm2erul9+S2mxajQ+fEx7HL+C5
nVN8NyYZYlSJvSUHw/3qO6tzOelc6kyy5+8/+0gx9a82P5yrNo4Jf2s4YjBOpzvb
15jztrgOTLI3jod/WobXLRL6zs40SMq7FuMEg3hB+SMZpvAPmL8pq3JAJKFF9C48
+0i565WH4S7SNtB4VzQ+WPQKqQpoA99j7VGamh4c6G0X92k6tcMsNiCCSwz0ljvZ
dz3eMcMf5A2H7BhGHJD4pwX1gUH349+21Dypgjy8l8eB3DVziUaSvVbJe5eLPXFB
KVAfPnXBIX4WPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:15 2025 by rpki-client