Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: 3125wfAtE5+/dSbrZomduB+DpwMLGi3rMMhSuBI9F5o=
Subject key identifier: CE:05:31:3F:CB:49:5D:B7:D9:CA:9E:45:E6:6B:BB:44:FD:75:90:93
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 0198D6CCF36554145CCCD0111F5C6A2E02FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: iLQlb0YQ48Z5GbeJ3IRM4QWjj2RYrDSEU8kETO/f130=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f3:65:54:14:5c:cc:d0:11:1f:5c:6a:2e:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=ce05313fcb495db7d9ca9e45e66bbb44fd759093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:24:a4:3e:41:17:66:26:1c:3c:fe:a4:3c:
db:e2:88:2b:5c:96:59:52:89:66:61:f6:5f:67:62:
eb:e7:2e:08:b7:d1:11:7f:2a:e6:2d:f1:e4:a8:6d:
0f:b4:e7:2c:35:65:41:bf:9a:ef:0a:e0:de:d8:34:
ff:ff:c4:ba:c0:20:ad:1b:62:cc:ce:7a:f3:9c:00:
87:ca:14:e6:34:a1:47:fe:72:30:49:a5:2c:9f:4f:
20:d8:fb:2f:8c:ea:e9:41:03:3f:eb:70:ab:94:ed:
65:be:a7:4a:0a:53:51:15:c8:28:09:a0:81:1e:6a:
df:19:28:45:3b:84:3d:c4:b7:a1:6c:28:31:e7:cc:
d5:25:3a:08:f9:e6:a5:eb:43:b9:4b:be:ac:7f:ef:
07:97:de:83:13:df:e0:00:1e:ad:59:d9:1f:c5:00:
83:1f:ec:97:de:ab:9d:27:a9:9d:a8:9f:b5:74:40:
2b:d1:94:c8:c7:ee:3a:c8:11:4a:ee:c6:0e:d2:08:
bb:76:6b:5e:48:ea:9d:94:e6:22:1c:1a:8d:3b:00:
50:f1:b5:20:28:39:9e:02:ab:bd:6f:16:ea:ac:0e:
bd:68:e2:ba:b7:ea:b5:43:e7:c3:f6:e2:a5:13:7f:
0d:31:a4:02:5e:86:22:f5:6a:fb:ec:d6:82:84:28:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:31:3F:CB:49:5D:B7:D9:CA:9E:45:E6:6B:BB:44:FD:75:90:93
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0e:27:0e:36:cb:4b:1f:49:2a:1f:39:cf:4f:cb:9f:d2:f6:
1f:02:ca:ad:c2:e8:fe:5f:8c:f9:2f:ac:28:7a:3f:d4:81:c6:
b0:0d:b2:f0:e7:e4:16:35:7c:71:b0:5b:f2:19:46:14:ff:08:
97:30:b1:e1:04:39:78:93:9d:97:76:c6:9b:5e:ea:63:03:d9:
97:80:9f:57:77:12:4f:89:c8:ee:2f:0a:f7:13:8e:28:d9:51:
3f:95:1c:ce:b6:9c:41:ff:fd:ca:2e:48:2c:b5:7e:11:75:f0:
cc:5b:85:16:bf:3e:2a:00:1d:c2:39:90:9e:cc:2e:c9:94:9e:
eb:b3:90:94:d9:46:59:02:69:37:a6:69:72:d9:47:9a:2f:69:
ef:94:0a:74:8d:c7:fa:e0:99:5c:c9:e6:06:44:c9:ae:86:d2:
60:77:0d:82:f0:20:3d:2a:ce:d3:ea:81:58:15:0c:94:c0:fd:
6f:e4:fe:6c:38:bb:04:50:4a:5b:92:18:5f:00:7f:57:54:f3:
45:d1:94:f3:ba:77:b8:8b:9b:fc:36:c4:e7:fa:97:02:e3:0c:
20:a1:f8:d1:98:2d:ba:4a:1d:2f:91:7a:f7:55:b1:f9:ef:56:
c1:14:ed:ef:5e:c6:b9:0e:7a:c9:67:59:86:00:f3:e3:db:d4:
f5:9c:26:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzPNlVBRczNARH1xqLgL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1
YzU0MWEwHhcNMjUwODIzMTIwMDEyWhcNMjUwODI0MTIwMDEyWjAzMTEwLwYDVQQD
EyhjZTA1MzEzZmNiNDk1ZGI3ZDljYTllNDVlNjZiYmI0NGZkNzU5MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0skpD5BF2YmHDz+pDzb4ogrXJZZ
UolmYfZfZ2Lr5y4It9ERfyrmLfHkqG0PtOcsNWVBv5rvCuDe2DT//8S6wCCtG2LM
znrznACHyhTmNKFH/nIwSaUsn08g2PsvjOrpQQM/63CrlO1lvqdKClNRFcgoCaCB
HmrfGShFO4Q9xLehbCgx58zVJToI+eal60O5S76sf+8Hl96DE9/gAB6tWdkfxQCD
H+yX3qudJ6mdqJ+1dEAr0ZTIx+46yBFK7sYO0gi7dmteSOqdlOYiHBqNOwBQ8bUg
KDmeAqu9bxbqrA69aOK6t+q1Q+fD9uKlE38NMaQCXoYi9Wr77NaChCiQtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4FMT/LSV232cqeReZru0T9dZCTMB8GA1UdIwQY
MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt
MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli
LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ4nDjbL
Sx9JKh85z0/Ln9L2HwLKrcLo/l+M+S+sKHo/1IHGsA2y8OfkFjV8cbBb8hlGFP8I
lzCx4QQ5eJOdl3bGm17qYwPZl4CfV3cST4nI7i8K9xOOKNlRP5UczracQf/9yi5I
LLV+EXXwzFuFFr8+KgAdwjmQnswuyZSe67OQlNlGWQJpN6ZpctlHmi9p75QKdI3H
+uCZXMnmBkTJrobSYHcNgvAgPSrO0+qBWBUMlMD9b+T+bDi7BFBKW5IYXwB/V1Tz
RdGU87p3uIub/DbE5/qXAuMMIKH40ZgtukodL5F691Wx+e9WwRTt717GuQ56yWdZ
hgDz49vU9ZwmMg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:59 2025 by rpki-client