Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: /bnoQUepOcjfcCdttR2O78q11NTh96/U4plavF4Nsao=
Subject key identifier: CB:05:B8:88:20:81:16:92:7A:3D:E6:16:70:7A:30:D3:D4:39:8C:6F
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 0198D66048175BF36F8840EF832351E60440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: 7LQTH0MtA3T5rETWX5X43hLuNh6V9mIK9UTxbWMZlI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:48:17:5b:f3:6f:88:40:ef:83:23:51:e6:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=cb05b888208116927a3de616707a30d3d4398c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:e0:e8:45:8b:00:15:69:1d:98:43:bc:83:
42:d4:fb:a9:48:df:a6:91:5c:08:91:26:6f:73:af:
4a:ff:32:79:11:d9:39:e1:28:d6:28:69:df:6f:b3:
6e:1a:13:df:8d:a3:a1:3e:90:78:7b:25:c7:6f:cc:
2a:b4:9b:70:f6:33:21:47:a7:f1:1d:a0:2b:92:89:
10:d7:20:74:ea:8d:8a:ca:55:dc:ea:c0:3c:73:db:
4c:f1:d4:58:ff:db:2f:e7:81:b6:bb:a2:c4:05:4b:
be:e2:a4:3d:17:c3:49:c7:8d:44:31:d4:e5:92:16:
25:b1:8f:5f:43:1d:a8:b8:62:41:b9:c9:a2:29:e6:
40:eb:d1:7f:81:36:52:73:97:9c:f1:bc:e4:a7:de:
c0:86:77:60:f8:c4:4f:96:ed:d0:16:cd:a1:e9:dc:
19:4c:d3:f6:75:b3:3e:5b:e1:59:93:37:49:e2:2f:
55:08:90:4c:4a:5f:23:40:72:c4:c5:33:a8:a4:8f:
4e:53:12:e5:1d:6c:7b:ff:6d:68:de:d5:47:2b:96:
72:75:ef:c3:3c:19:f3:16:f8:e3:f4:e7:ea:31:33:
bc:4c:0b:fd:a9:09:e2:20:3a:15:4f:08:48:6c:f0:
83:e0:7d:30:2a:de:12:20:5a:e3:d2:1b:c1:99:c0:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:B8:88:20:81:16:92:7A:3D:E6:16:70:7A:30:D3:D4:39:8C:6F
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c5:4b:bd:8c:79:de:d6:7b:e2:2d:9d:ac:a6:aa:ca:9a:b3:
39:aa:90:2e:28:09:14:ee:47:58:03:6e:c2:65:da:fa:9a:e8:
8b:90:db:e1:60:24:f6:a6:b1:85:b9:9f:5d:2e:67:98:8f:af:
28:8b:3d:d4:04:73:f3:dc:c4:d1:ea:24:74:36:07:3e:f2:3d:
9e:da:01:8d:d4:c2:97:0a:bc:0a:e5:90:7b:68:38:ea:d9:af:
06:8c:9f:94:25:93:3a:1d:f7:47:58:5a:c4:61:d0:d4:17:a5:
a2:3e:96:52:fa:51:e5:8a:58:41:8d:ad:ac:b0:94:54:17:42:
51:61:e0:8f:3e:37:0a:86:2b:33:4e:71:76:d1:35:c9:7b:a4:
a0:c7:35:b3:e3:48:b5:06:34:2d:0b:be:8e:50:c2:70:37:1d:
be:29:6f:52:3a:bd:ec:2d:f7:34:f4:41:60:44:94:00:92:a9:
0b:5f:4e:e2:7f:a8:c2:af:7a:82:7f:95:df:a9:e1:24:3d:ff:
67:f3:27:40:ef:a5:b2:e3:c5:04:d0:68:22:61:0e:39:25:5a:
45:91:d1:df:f2:2c:37:e9:bc:06:fa:c2:0c:0d:b9:60:e7:f8:
04:96:de:24:52:58:9a:58:8e:a9:66:6b:0b:73:88:7d:47:40:
c9:6f:b8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYEgXW/NviEDvgyNR5gRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDcyYjAzM2ZmNmZhMzhiZjIzNjEzOWFjZGI3N2E3YTBh
MDQ3YTMwHhcNMjUwODIzMTAwMTMwWhcNMjUwODI0MTAwMTMwWjAzMTEwLwYDVQQD
EyhjYjA1Yjg4ODIwODExNjkyN2EzZGU2MTY3MDdhMzBkM2Q0Mzk4YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y/g6EWLABVpHZhDvINC1PupSN+m
kVwIkSZvc69K/zJ5Edk54SjWKGnfb7NuGhPfjaOhPpB4eyXHb8wqtJtw9jMhR6fx
HaArkokQ1yB06o2KylXc6sA8c9tM8dRY/9sv54G2u6LEBUu+4qQ9F8NJx41EMdTl
khYlsY9fQx2ouGJBucmiKeZA69F/gTZSc5ec8bzkp97Ahndg+MRPlu3QFs2h6dwZ
TNP2dbM+W+FZkzdJ4i9VCJBMSl8jQHLExTOopI9OUxLlHWx7/21o3tVHK5Zyde/D
PBnzFvjj9OfqMTO8TAv9qQniIDoVTwhIbPCD4H0wKt4SIFrj0hvBmcB36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsFuIgggRaSej3mFnB6MNPUOYxvMB8GA1UdIwQY
MBaAFNnXKwM/9vo4vyNhOazbd6egoEejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYt
ZjgyMWE1YTVjZjZhLzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYtZjgyMWE1YTVjZjZh
LzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMVLvYx5
3tZ74i2drKaqypqzOaqQLigJFO5HWANuwmXa+proi5Db4WAk9qaxhbmfXS5nmI+v
KIs91ARz89zE0eokdDYHPvI9ntoBjdTClwq8CuWQe2g46tmvBoyflCWTOh33R1ha
xGHQ1Beloj6WUvpR5YpYQY2trLCUVBdCUWHgjz43CoYrM05xdtE1yXukoMc1s+NI
tQY0LQu+jlDCcDcdvilvUjq97C33NPRBYESUAJKpC19O4n+owq96gn+V36nhJD3/
Z/MnQO+lsuPFBNBoImEOOSVaRZHR3/IsN+m8BvrCDA25YOf4BJbeJFJYmliOqWZr
C3OIfUdAyW+4Tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:43 2025 by rpki-client