Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: /aKL1Xty7I69mkehIb9o+qAgF5sWmPU/CAxxRxEqeQQ=
Subject key identifier: 6C:58:68:85:75:D4:D2:61:F5:E1:EF:19:33:AD:1B:42:6E:5F:65:5C
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 0198D4E0B649487DFFDBE206E6A17544E26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: 4/O7+c2nRapBBIkSDWVQFC486pt1C5kGAiTVRO0TZ3w=)
2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b6:49:48:7d:ff:db:e2:06:e6:a1:75:44:e2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=6c58688575d4d261f5e1ef1933ad1b426e5f655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:64:19:6d:f5:c7:cb:f0:61:54:40:53:2a:
cf:1d:a9:99:26:d0:96:4f:8c:2e:ae:5c:a5:47:c4:
55:9e:f4:17:b3:30:20:26:b5:fa:b0:12:69:32:bc:
53:b3:a0:4d:25:15:f5:78:89:04:b5:3d:ca:03:e9:
c8:f8:de:e0:62:cc:c0:e2:af:88:14:4e:5c:8b:b2:
0f:82:1a:56:67:cc:ae:b7:f3:7c:3f:80:ec:b3:eb:
78:45:c4:1b:17:94:08:53:53:f9:7a:b6:b4:e3:34:
a7:94:50:5e:36:ed:6b:05:bd:08:2e:b7:e6:b2:65:
fb:06:eb:26:e5:37:ad:36:e8:cf:93:84:42:de:db:
7a:72:8f:6e:b3:a2:39:30:bd:eb:b4:84:42:8c:1a:
32:f9:df:20:ba:92:3b:ba:62:e9:12:fe:0f:81:ef:
b0:be:aa:99:b6:cb:95:c6:f3:e1:03:fe:99:e3:99:
ed:fe:42:41:68:d4:9c:50:c3:ca:8a:8a:c3:fb:6f:
38:cd:5d:c2:d6:7a:d4:af:a9:3c:db:e6:cb:20:6d:
8e:f0:fd:fc:42:22:67:ad:78:82:d9:87:d1:1e:f2:
e5:dd:2c:c4:c5:c9:2e:56:e6:76:4c:17:a6:19:3f:
85:e0:bc:d5:4d:cf:12:9d:fe:2a:37:0d:97:ca:31:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:68:85:75:D4:D2:61:F5:E1:EF:19:33:AD:1B:42:6E:5F:65:5C
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f3:3b:09:87:5e:a8:b7:c0:82:2a:b5:e8:d2:9e:8a:40:63:
43:37:4a:70:c8:db:d8:b5:43:e8:2a:65:af:ed:cb:90:7d:c6:
d8:76:27:a5:98:a7:c0:94:ba:9c:d4:1f:ad:24:45:f1:3b:d6:
b4:31:49:a2:38:89:ad:cb:9b:72:e1:47:0c:c0:a1:18:bf:75:
b0:ad:94:8d:0a:16:80:75:3c:78:f3:ea:bd:74:2c:19:14:56:
b2:6d:ee:c1:38:d4:15:81:1e:e4:ab:50:ae:21:ca:41:35:4a:
fa:13:42:56:6f:a0:5c:d5:31:03:e2:14:ff:7a:fa:b3:05:60:
98:6d:3e:8a:d5:47:75:ae:5a:10:39:da:cc:c5:07:6d:a2:e6:
fc:3f:c1:75:2d:b6:83:f7:c4:47:92:a3:c3:af:d9:2d:18:a6:
6a:23:93:49:04:e4:87:d9:fb:3a:61:90:1a:c1:93:5e:e9:b4:
96:41:ab:ab:d2:55:3f:e4:04:f2:bf:db:f6:b1:33:74:4d:3e:
3d:96:b0:07:8f:d4:cb:48:8c:d8:1d:d0:06:b2:6c:e3:ea:74:
ea:12:db:d6:66:67:b4:6f:b1:59:ce:95:2c:d9:73:36:40:6b:
b3:26:4e:e5:7b:a2:92:02:43:43:50:d1:39:bb:33:d8:77:e7:
aa:62:d3:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4LZJSH3/2+IG5qF1ROJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj
MTdmMzQwHhcNMjUwODIzMDMwMjMzWhcNMjUwODI0MDMwMjMzWjAzMTEwLwYDVQQD
Eyg2YzU4Njg4NTc1ZDRkMjYxZjVlMWVmMTkzM2FkMWI0MjZlNWY2NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0FkGW31x8vwYVRAUyrPHamZJtCW
T4wurlylR8RVnvQXszAgJrX6sBJpMrxTs6BNJRX1eIkEtT3KA+nI+N7gYszA4q+I
FE5ci7IPghpWZ8yut/N8P4Dss+t4RcQbF5QIU1P5era04zSnlFBeNu1rBb0ILrfm
smX7Busm5TetNujPk4RC3tt6co9us6I5ML3rtIRCjBoy+d8gupI7umLpEv4Pge+w
vqqZtsuVxvPhA/6Z45nt/kJBaNScUMPKiorD+284zV3C1nrUr6k82+bLIG2O8P38
QiJnrXiC2YfRHvLl3SzExckuVuZ2TBemGT+F4LzVTc8Snf4qNw2XyjG51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxYaIV11NJh9eHvGTOtG0JuX2VcMB8GA1UdIwQY
MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt
YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1
LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPM7CYde
qLfAgiq16NKeikBjQzdKcMjb2LVD6Cplr+3LkH3G2HYnpZinwJS6nNQfrSRF8TvW
tDFJojiJrcubcuFHDMChGL91sK2UjQoWgHU8ePPqvXQsGRRWsm3uwTjUFYEe5KtQ
riHKQTVK+hNCVm+gXNUxA+IU/3r6swVgmG0+itVHda5aEDnazMUHbaLm/D/BdS22
g/fER5Kjw6/ZLRimaiOTSQTkh9n7OmGQGsGTXum0lkGrq9JVP+QE8r/b9rEzdE0+
PZawB4/Uy0iM2B3QBrJs4+p06hLb1mZntG+xWc6VLNlzNkBrsyZO5XuikgJDQ1DR
Obsz2HfnqmLT4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:28 2025 by rpki-client