Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: HTVFHcsrjR1KJGWbF8cpn74Jy91n3ihB1rU8/2R77Do=
Subject key identifier: 71:B5:55:59:6F:15:D5:C1:B7:30:BE:B1:12:2C:ED:1B:4F:4C:06:11
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 0198D51585EE90DA760BCEE3CDB5A7507871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1362
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: dZ1o/stBkxLHTRON+Mt0T3uSvrY5sH5CUfKLLPLmNWc=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:85:ee:90:da:76:0b:ce:e3:cd:b5:a7:50:78:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=71b555596f15d5c1b730beb1122ced1b4f4c0611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:4a:af:a8:0b:49:d2:1f:bf:97:2f:53:12:
98:ef:34:94:60:d8:76:be:90:74:c4:c5:72:c4:6a:
63:71:0f:de:12:0b:3f:bf:01:9f:66:b0:67:0a:aa:
19:51:80:4c:e5:76:ca:f5:df:4c:1a:d7:06:61:db:
34:5f:62:6a:da:e7:e5:7a:93:5a:74:f6:25:b6:8e:
91:15:a1:db:0d:8f:00:0d:11:72:03:a3:7b:49:90:
4d:6d:dd:d4:e5:d4:40:16:3a:0f:fa:2e:8a:87:0b:
5c:50:0d:ab:71:78:5f:b2:db:06:13:94:5e:e0:d3:
bb:ff:7d:09:07:aa:24:0a:88:87:db:44:7b:67:f6:
6c:34:6b:9c:80:28:7f:7c:f7:0a:49:bf:a1:61:44:
18:a1:60:e3:54:d9:b2:a8:82:c4:ae:e3:c2:ce:bd:
80:5c:61:a2:bf:51:13:39:f1:96:0c:19:15:8b:39:
06:9a:de:95:ae:c5:51:a9:18:c3:72:76:eb:d4:4c:
f1:6a:65:ea:d1:47:66:73:51:18:a1:56:2c:5b:2e:
ad:38:1d:61:5a:28:8c:76:4f:89:bc:46:0d:fc:d3:
3b:3a:7a:61:e1:8c:24:c5:5f:b4:6f:6e:ea:bd:3e:
9d:21:72:ac:50:df:db:ac:c5:8b:e9:20:9d:31:1f:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:55:59:6F:15:D5:C1:B7:30:BE:B1:12:2C:ED:1B:4F:4C:06:11
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:22:a2:78:57:29:72:9b:91:09:a4:ba:db:bc:0b:10:93:
9c:e7:8e:65:07:4b:7b:a6:5d:4e:e7:eb:a3:52:c8:0f:9e:5f:
cf:28:ef:b3:4a:0b:3d:44:bf:dd:90:5c:39:45:cd:e7:60:8c:
db:3e:79:a6:e1:b1:e2:69:aa:03:a4:6f:36:4a:94:8b:02:14:
b7:0c:f2:d4:58:b5:31:65:1a:43:b8:8d:30:89:33:7d:ee:d5:
d7:3a:a2:ae:d5:40:5f:b8:46:37:0a:d0:d3:de:23:72:a6:32:
8a:60:4f:f0:bc:74:c8:98:2d:8a:37:bd:dc:6f:7a:52:34:1f:
3f:d1:24:4f:9d:47:8a:a4:e3:ac:ad:3b:2a:a6:45:91:17:27:
02:83:52:70:d5:28:71:4c:6c:28:9d:cf:53:07:ae:a2:b6:17:
e2:4e:a9:f7:96:13:7e:ea:62:26:93:f4:d0:9c:63:43:e4:b8:
c8:02:09:f0:35:a1:57:84:d9:66:4e:39:c6:20:2f:22:2c:74:
be:ca:ca:b8:43:a3:d1:b5:ce:ae:b8:a9:eb:a8:3c:4f:3d:d0:
1a:62:aa:4c:3f:1e:16:6b:c2:43:ad:06:51:07:63:1b:aa:75:
02:eb:b7:c3:3f:43:c5:14:35:f5:62:0b:ab:2f:43:7c:fb:e8:
e3:08:cb:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFYXukNp2C87jzbWnUHhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz
Mzc5NDMwHhcNMjUwODIzMDQwMDEzWhcNMjUwODI0MDQwMDEzWjAzMTEwLwYDVQQD
Eyg3MWI1NTU1OTZmMTVkNWMxYjczMGJlYjExMjJjZWQxYjRmNGMwNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I5Kr6gLSdIfv5cvUxKY7zSUYNh2
vpB0xMVyxGpjcQ/eEgs/vwGfZrBnCqoZUYBM5XbK9d9MGtcGYds0X2Jq2uflepNa
dPYlto6RFaHbDY8ADRFyA6N7SZBNbd3U5dRAFjoP+i6KhwtcUA2rcXhfstsGE5Re
4NO7/30JB6okCoiH20R7Z/ZsNGucgCh/fPcKSb+hYUQYoWDjVNmyqILEruPCzr2A
XGGiv1ETOfGWDBkVizkGmt6VrsVRqRjDcnbr1EzxamXq0Udmc1EYoVYsWy6tOB1h
WiiMdk+JvEYN/NM7Onph4YwkxV+0b27qvT6dIXKsUN/brMWL6SCdMR84AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG1VVlvFdXBtzC+sRIs7RtPTAYRMB8GA1UdIwQY
MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt
NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5
LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0QionhX
KXKbkQmkutu8CxCTnOeOZQdLe6ZdTufro1LID55fzyjvs0oLPUS/3ZBcOUXN52CM
2z55puGx4mmqA6RvNkqUiwIUtwzy1Fi1MWUaQ7iNMIkzfe7V1zqirtVAX7hGNwrQ
094jcqYyimBP8Lx0yJgtije93G96UjQfP9EkT51HiqTjrK07KqZFkRcnAoNScNUo
cUxsKJ3PUweuorYX4k6p95YTfupiJpP00JxjQ+S4yAIJ8DWhV4TZZk45xiAvIix0
vsrKuEOj0bXOrrip66g8Tz3QGmKqTD8eFmvCQ60GUQdjG6p1Auu3wz9DxRQ19WIL
qy9DfPvo4wjL5w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:50 2025 by rpki-client