Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier: ZlM2y52oZzzSB0E47mXoe6XOw3oSWW2k9AOITAEl/c8=
Subject key identifier: 3B:3F:C5:A8:D2:CB:C3:7E:35:5D:3E:C0:B4:BA:93:2C:AB:43:E5:6D
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial: 0198D54E7C5F858D97204AD01F8B45EEC63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number: 1F
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: oTYRKLw8vkWSwoC5d/g1gx8oORbj+YJbL4HCxjJ42F4=)
2: l2jBV0bVg0CQFfEWYmZGcUnNWs8.roa (hash: I43WzSD4plBzSNiTRFYHSTVDaLrtL+SCq1cjo57LmDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7c:5f:85:8d:97:20:4a:d0:1f:8b:45:ee:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=3b3fc5a8d2cbc37e355d3ec0b4ba932cab43e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:59:b4:de:1f:d8:5f:32:e0:e2:13:90:7e:
85:b0:d2:83:71:6c:64:2d:b4:bf:9d:9a:da:47:7b:
21:86:5c:ac:5d:5c:e4:25:ad:6a:75:aa:ad:a7:1f:
46:ba:77:7b:11:9a:ae:49:91:1b:d4:2c:30:db:e8:
c1:e3:5f:47:7d:ac:db:5f:49:92:40:92:f8:78:50:
69:09:a2:55:38:b8:ff:4b:00:40:59:51:b1:59:6e:
33:33:04:c3:5d:a9:8d:68:e6:65:c1:fe:5c:05:5d:
fa:be:58:5b:e2:95:08:2c:fe:78:93:88:ca:6c:29:
dc:b2:89:ad:e4:da:ab:77:11:30:5a:8f:5e:a4:8d:
b7:19:be:bd:5f:d0:c9:dc:d6:55:bd:08:d9:af:be:
5e:0b:b7:b8:f8:a9:c5:1a:50:a5:84:ea:1b:18:40:
0a:f7:31:5d:0c:ef:4a:bd:3c:25:d8:9f:3e:76:06:
49:e4:cd:8a:b8:2b:be:e6:0d:bd:40:58:3f:6f:3c:
69:fa:90:44:96:f5:a2:38:20:7a:84:69:b8:ca:8f:
d8:eb:bd:a1:9a:1a:d8:91:21:92:c0:11:3f:06:fb:
9d:b0:93:ef:e4:09:0d:4c:de:eb:0d:71:b2:9e:b4:
69:37:3e:94:c3:81:41:8a:c7:7d:10:44:29:f8:ad:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:C5:A8:D2:CB:C3:7E:35:5D:3E:C0:B4:BA:93:2C:AB:43:E5:6D
X509v3 Authority Key Identifier:
keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:0d:10:73:6f:71:e1:c8:5c:9e:e3:7b:00:4b:c3:45:a0:
68:53:77:a5:74:a2:c5:50:90:8b:86:8b:a1:55:1f:90:11:fe:
32:ff:e2:d5:c8:be:98:fb:5f:60:bd:17:97:9c:30:73:f4:39:
d9:b0:11:4b:2c:bc:6c:23:a9:2c:63:de:f5:49:3b:20:79:b8:
30:ff:5d:f5:c8:c6:a6:70:c3:70:4f:28:dc:55:6d:08:f2:dd:
a8:d6:3a:3e:a3:bd:9b:3c:5c:1a:81:b7:4e:a3:48:50:ca:39:
1e:11:0f:17:87:2e:fc:34:f4:16:65:8e:82:5f:36:b9:db:17:
8b:1a:a7:17:9b:6c:99:ba:db:65:4e:f0:4d:d9:8c:d0:6f:8e:
1f:09:8d:b1:5f:61:44:8b:db:58:d2:68:9b:8e:2a:b6:fc:c3:
2e:9b:72:b5:99:5a:49:bb:4e:6f:ec:f4:e6:70:cd:bf:b5:39:
8b:3e:53:bf:3c:c1:91:c2:1c:dd:9a:b7:64:b2:28:f0:7b:d0:
29:f0:33:4d:2f:9b:d8:0b:a9:06:2b:6a:1b:c7:00:43:5d:6c:
71:a5:79:94:93:96:aa:4c:a6:d8:39:3b:2d:cc:b3:35:63:e9:
a8:d2:1f:3e:95:79:24:ec:68:55:56:37:9c:1d:94:92:d1:c7:
17:80:c2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnxfhY2XIErQH4tF7sY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NDQyZjJjMmY4OGQ5ZjZlYjJkOWM1ZGYzNjgwYmUyMWVl
N2M5YjMwHhcNMjUwODIzMDUwMjI3WhcNMjUwODI0MDUwMjI3WjAzMTEwLwYDVQQD
EygzYjNmYzVhOGQyY2JjMzdlMzU1ZDNlYzBiNGJhOTMyY2FiNDNlNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTRZtN4f2F8y4OITkH6FsNKDcWxk
LbS/nZraR3shhlysXVzkJa1qdaqtpx9Gund7EZquSZEb1Cww2+jB419HfazbX0mS
QJL4eFBpCaJVOLj/SwBAWVGxWW4zMwTDXamNaOZlwf5cBV36vlhb4pUILP54k4jK
bCncsomt5NqrdxEwWo9epI23Gb69X9DJ3NZVvQjZr75eC7e4+KnFGlClhOobGEAK
9zFdDO9KvTwl2J8+dgZJ5M2KuCu+5g29QFg/bzxp+pBElvWiOCB6hGm4yo/Y672h
mhrYkSGSwBE/BvudsJPv5AkNTN7rDXGynrRpNz6Uw4FBisd9EEQp+K1Q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs/xajSy8N+NV0+wLS6kyyrQ+VtMB8GA1UdIwQY
MBaAFNhELywviNn26y2cXfNoC+Ie58mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMt
MGY1NDZlMTRlYjFkLzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMtMGY1NDZlMTRlYjFk
LzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBgNEHNv
ceHIXJ7jewBLw0WgaFN3pXSixVCQi4aLoVUfkBH+Mv/i1ci+mPtfYL0Xl5wwc/Q5
2bARSyy8bCOpLGPe9Uk7IHm4MP9d9cjGpnDDcE8o3FVtCPLdqNY6PqO9mzxcGoG3
TqNIUMo5HhEPF4cu/DT0FmWOgl82udsXixqnF5tsmbrbZU7wTdmM0G+OHwmNsV9h
RIvbWNJom44qtvzDLptytZlaSbtOb+z05nDNv7U5iz5TvzzBkcIc3Zq3ZLIo8HvQ
KfAzTS+b2AupBitqG8cAQ11scaV5lJOWqkym2Dk7LcyzNWPpqNIfPpV5JOxoVVY3
nB2UktHHF4DC6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:59 2025 by rpki-client