Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: YL3T7cizektxwjiycEm5vwENs9bdSacVimLeMBAWdCc=
Subject key identifier: 2B:6B:B5:61:3D:70:98:BF:C1:10:DD:6F:70:82:56:DC:00:F8:D2:52
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 01984AE5D1056608E0B12D8BA0BBEC99C984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0B3F
Signing time: Sun 27 Jul 2025 08:00:31 +0000
Manifest this update: Sun 27 Jul 2025 08:00:31 +0000
Manifest next update: Mon 28 Jul 2025 08:00:31 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: IJ/yKEozG72oyF0jUN+D1t7HUJLWvPc2OxvDOEr54vQ=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d1:05:66:08:e0:b1:2d:8b:a0:bb:ec:99:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Jul 27 08:00:31 2025 GMT
Not After : Jul 28 08:00:31 2025 GMT
Subject: CN=2b6bb5613d7098bfc110dd6f708256dc00f8d252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:92:c5:b9:20:84:39:cc:f6:c1:cd:55:c3:
8e:0e:f7:d3:f0:3b:4f:d7:0a:cb:11:d5:4f:20:63:
ea:e4:d2:31:56:6b:0a:1e:8a:08:10:0f:79:d1:ff:
ff:65:b1:20:a9:9e:29:18:50:99:1e:88:3e:8e:92:
f0:51:7e:1b:2e:35:26:cd:cc:8b:ec:fa:ba:14:11:
9e:ec:7a:28:d6:a4:1f:e3:06:d4:54:56:40:ea:fb:
e9:13:7a:47:8c:a9:07:83:8e:ac:c9:25:64:5e:e6:
1d:a1:f5:f6:42:6f:23:6c:91:e5:8c:cb:7d:5f:c1:
fb:f2:7e:32:7a:31:31:de:21:ba:ea:f1:66:4d:0b:
2f:25:40:20:d5:0a:c3:55:d8:2d:7a:3e:5e:33:c5:
c0:6f:4d:f4:b1:05:1a:0b:b9:a6:56:0d:e5:66:f0:
f8:c3:66:9e:02:68:c2:a2:35:27:cd:3e:df:7e:cf:
44:77:47:65:e4:87:f2:bd:21:e5:57:b3:61:60:e0:
68:c0:4d:36:ff:35:d0:7b:75:40:98:77:ad:b4:d6:
45:f0:40:3f:9f:60:b9:63:78:2b:b9:de:1f:84:da:
48:5e:d3:64:03:45:93:30:b9:97:b4:1e:40:28:78:
9a:49:e5:a2:41:78:80:42:ad:d9:3f:3a:3a:35:b7:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:B5:61:3D:70:98:BF:C1:10:DD:6F:70:82:56:DC:00:F8:D2:52
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:ec:7f:f3:62:51:27:14:02:80:8b:5b:09:29:50:92:94:
3a:4b:d6:27:82:ea:08:c6:45:7d:08:5d:86:ee:60:40:34:44:
83:64:e5:23:6b:3c:55:65:fe:88:58:85:74:4f:a3:ac:16:3f:
fe:ec:4e:6c:b0:9d:33:ee:49:11:77:b6:ce:fe:5d:df:02:09:
78:aa:27:2b:ac:08:d2:02:2e:82:42:fb:b7:46:b1:0a:96:7b:
55:0e:61:91:b2:d0:88:27:d6:d7:a2:d2:ee:19:37:11:2d:11:
d3:fa:ad:94:fe:16:4b:a7:26:84:e8:e4:f9:6e:37:36:a0:cd:
ab:f5:df:e6:4f:bc:32:50:0d:a6:4b:e6:32:64:af:16:c7:69:
81:d9:a3:df:7b:d5:ad:fa:a2:ec:62:aa:02:74:fc:c0:38:50:
6f:eb:e6:b4:fc:b2:96:bb:97:b5:a1:08:3d:ac:07:24:7b:28:
fc:d6:f5:0b:b8:20:79:32:43:05:78:22:87:4f:d3:d1:7a:4e:
ae:30:ac:85:a8:d6:93:32:5b:b9:b4:3e:e0:7f:b5:8a:a5:1e:
db:c8:59:f8:1e:f7:d6:2a:49:08:3c:32:66:50:0c:3f:5c:af:
87:12:40:0d:b1:7b:ea:2e:b4:9f:92:9a:5a:5a:52:66:c9:5f:
8b:6d:81:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5dEFZgjgsS2LoLvsmcmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj
YmMzMTkwHhcNMjUwNzI3MDgwMDMxWhcNMjUwNzI4MDgwMDMxWjAzMTEwLwYDVQQD
EygyYjZiYjU2MTNkNzA5OGJmYzExMGRkNmY3MDgyNTZkYzAwZjhkMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DGSxbkghDnM9sHNVcOODvfT8DtP
1wrLEdVPIGPq5NIxVmsKHooIEA950f//ZbEgqZ4pGFCZHog+jpLwUX4bLjUmzcyL
7Pq6FBGe7Hoo1qQf4wbUVFZA6vvpE3pHjKkHg46sySVkXuYdofX2Qm8jbJHljMt9
X8H78n4yejEx3iG66vFmTQsvJUAg1QrDVdgtej5eM8XAb030sQUaC7mmVg3lZvD4
w2aeAmjCojUnzT7ffs9Ed0dl5IfyvSHlV7NhYOBowE02/zXQe3VAmHettNZF8EA/
n2C5Y3grud4fhNpIXtNkA0WTMLmXtB5AKHiaSeWiQXiAQq3ZPzo6Nbek/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtrtWE9cJi/wRDdb3CCVtwA+NJSMB8GA1UdIwQY
MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt
MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx
LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK7sf/Ni
UScUAoCLWwkpUJKUOkvWJ4LqCMZFfQhdhu5gQDREg2TlI2s8VWX+iFiFdE+jrBY/
/uxObLCdM+5JEXe2zv5d3wIJeKonK6wI0gIugkL7t0axCpZ7VQ5hkbLQiCfW16LS
7hk3ES0R0/qtlP4WS6cmhOjk+W43NqDNq/Xf5k+8MlANpkvmMmSvFsdpgdmj33vV
rfqi7GKqAnT8wDhQb+vmtPyylruXtaEIPawHJHso/Nb1C7ggeTJDBXgih0/T0XpO
rjCshajWkzJbubQ+4H+1iqUe28hZ+B731ipJCDwyZlAMP1yvhxJADbF76i60n5Ka
WlpSZslfi22Brw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:28:11 2025 by rpki-client