Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: MlWIyvLOGEFM4oy2T1UBrBe1pXs5ecMjVE2li9lSBdI=
Subject key identifier: 1A:ED:76:96:AD:95:75:77:69:4B:26:4C:CA:53:9C:11:B4:7C:A2:70
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 01974A0CFAFA0048E95BA476AD737A3E028D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 068C
Signing time: Sat 07 Jun 2025 11:00:53 +0000
Manifest this update: Sat 07 Jun 2025 11:00:53 +0000
Manifest next update: Sun 08 Jun 2025 11:00:53 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: CVQB7bzk4VOJgzI74qWxghkt2lF8SS1QA52YrV9xZJs=)
2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:fa:fa:00:48:e9:5b:a4:76:ad:73:7a:3e:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jun 7 11:00:53 2025 GMT
Not After : Jun 8 11:00:53 2025 GMT
Subject: CN=1aed7696ad957577694b264cca539c11b47ca270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:02:62:20:3d:df:1e:37:6b:f2:80:b1:ee:
c1:2e:1e:8d:5d:44:b9:e4:9d:53:e6:44:7d:b5:b8:
ce:e0:89:81:6b:8a:5d:f0:50:61:6c:b7:23:0a:cc:
1a:02:b0:46:be:20:51:42:5e:51:02:aa:74:30:69:
34:af:c0:42:7b:88:83:ce:2f:9d:8b:f0:db:5a:14:
b3:fe:00:0c:bc:f5:59:62:32:b4:c3:37:83:ff:49:
24:eb:87:12:38:bb:c6:b3:74:7e:5a:52:84:2d:06:
68:34:06:1e:cf:51:51:95:05:c5:fa:ef:5f:b7:dd:
c4:9c:ec:3a:97:b5:84:14:5c:87:31:ae:df:88:65:
61:2f:45:35:24:a4:1e:fe:4f:3e:04:82:be:34:07:
a1:e7:12:26:b3:95:13:35:42:65:2a:9d:de:62:b9:
f8:ba:6c:9d:91:d8:3d:fe:19:99:72:94:6c:95:4b:
fd:91:32:9e:91:d4:9d:21:c8:73:e8:11:1c:4a:f6:
9c:41:1d:df:cc:7a:60:82:72:1e:56:86:a1:d0:ae:
7f:29:1c:14:94:88:97:85:31:84:8d:e3:6d:82:41:
97:05:7a:7f:f6:78:83:f3:df:2f:14:34:1d:b8:a7:
86:0b:d4:eb:d1:f4:6d:4d:1e:db:23:dc:25:8d:8d:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:76:96:AD:95:75:77:69:4B:26:4C:CA:53:9C:11:B4:7C:A2:70
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:c8:0f:b9:31:9a:fd:5c:88:cb:14:ff:85:c8:d7:68:cd:
a0:20:3b:c7:38:49:46:60:42:51:38:15:5c:6c:6a:56:41:c2:
10:3e:46:5e:3b:59:f0:d8:77:ec:45:6a:0c:2a:3f:77:d3:09:
fe:29:77:2b:d7:3c:7a:78:11:83:38:33:91:18:6d:27:4a:99:
4d:a8:e3:27:45:1e:3f:de:84:40:12:71:df:e5:e1:9a:c8:9d:
ab:a2:0a:b7:60:23:dd:08:6d:77:ca:9b:33:41:59:13:5d:87:
e4:49:b6:54:28:b1:b9:d6:ea:59:68:31:06:bf:10:e5:2b:ad:
88:e0:c1:d6:65:1f:39:df:ac:5b:07:67:fe:9d:f1:1f:64:cf:
38:99:f0:25:88:ed:6e:78:94:51:3a:cc:9f:af:8e:a6:d1:95:
16:51:10:d2:72:da:be:e0:e0:8b:0d:07:46:b9:0f:ae:8c:b2:
f1:08:5e:2e:63:d4:41:a3:d0:12:d1:25:ab:e7:e9:08:c3:73:
3d:96:37:2c:66:84:de:7b:1e:0c:15:6f:5f:5f:0a:2f:98:54:
45:8a:fd:fd:dd:77:30:ce:53:89:04:a6:8f:66:a0:01:65:05:
f1:a3:b2:64:63:98:3e:4a:6d:a7:c9:fe:6f:6d:64:54:ff:16:
8f:3c:45:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDPr6AEjpW6R2rXN6PgKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj
ZmZiNzUwHhcNMjUwNjA3MTEwMDUzWhcNMjUwNjA4MTEwMDUzWjAzMTEwLwYDVQQD
EygxYWVkNzY5NmFkOTU3NTc3Njk0YjI2NGNjYTUzOWMxMWI0N2NhMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWcCYiA93x43a/KAse7BLh6NXUS5
5J1T5kR9tbjO4ImBa4pd8FBhbLcjCswaArBGviBRQl5RAqp0MGk0r8BCe4iDzi+d
i/DbWhSz/gAMvPVZYjK0wzeD/0kk64cSOLvGs3R+WlKELQZoNAYez1FRlQXF+u9f
t93EnOw6l7WEFFyHMa7fiGVhL0U1JKQe/k8+BIK+NAeh5xIms5UTNUJlKp3eYrn4
umydkdg9/hmZcpRslUv9kTKekdSdIchz6BEcSvacQR3fzHpggnIeVoah0K5/KRwU
lIiXhTGEjeNtgkGXBXp/9niD898vFDQduKeGC9Tr0fRtTR7bI9wljY0SDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrtdpatlXV3aUsmTMpTnBG0fKJwMB8GA1UdIwQY
MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt
NGM4NTQ0NWEwMzZhLzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh
LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqPID7kx
mv1ciMsU/4XI12jNoCA7xzhJRmBCUTgVXGxqVkHCED5GXjtZ8Nh37EVqDCo/d9MJ
/il3K9c8engRgzgzkRhtJ0qZTajjJ0UeP96EQBJx3+Xhmsidq6IKt2Aj3Qhtd8qb
M0FZE12H5Em2VCixudbqWWgxBr8Q5SutiODB1mUfOd+sWwdn/p3xH2TPOJnwJYjt
bniUUTrMn6+OptGVFlEQ0nLavuDgiw0HRrkProyy8QheLmPUQaPQEtElq+fpCMNz
PZY3LGaE3nseDBVvX18KL5hURYr9/d13MM5TiQSmj2agAWUF8aOyZGOYPkptp8n+
b21kVP8WjzxFoA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:21 2025 by rpki-client