Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: jV8el2mtI5deqDprFabFXBDD942QCWaip7QwKJHOaiw=
Subject key identifier: B3:9D:CF:C0:B2:E2:ED:94:07:F8:36:D4:14:D3:96:FA:AB:30:D2:25
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 019749D5FAD73A0ECF42401446A7BE34E1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:49 +0000
Manifest this update: Sat 07 Jun 2025 10:00:49 +0000
Manifest next update: Sun 08 Jun 2025 10:00:49 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: NMuHx+3onluERImCPSvTpXp/s5a99ZoXISWpfkImGiA=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fa:d7:3a:0e:cf:42:40:14:46:a7:be:34:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jun 7 10:00:49 2025 GMT
Not After : Jun 8 10:00:49 2025 GMT
Subject: CN=b39dcfc0b2e2ed9407f836d414d396faab30d225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c7:14:84:8c:de:ae:84:5e:93:9d:ce:80:78:
28:ee:b3:60:87:e3:fd:b9:dd:23:61:e0:f9:71:7d:
66:db:b3:b0:ce:d4:28:59:97:93:98:d9:04:14:7d:
79:94:89:d7:03:62:2f:4e:c0:68:11:af:e9:8a:7b:
ee:6c:56:62:23:45:a1:98:d7:07:fb:27:05:2f:57:
d7:86:58:00:4d:83:ff:63:16:f3:f4:24:d6:8b:cf:
dd:52:14:d8:f5:63:4b:98:56:0b:b4:ac:a3:28:ba:
7a:49:93:cf:73:fc:84:e8:2b:a7:53:1e:76:4f:d6:
d9:38:f8:99:fe:36:a4:a3:8e:e0:bb:31:10:3a:1a:
ff:5e:30:d0:1c:87:20:5c:45:1d:2f:42:54:5f:36:
69:d0:05:d3:3e:86:42:fe:c8:45:92:d4:27:97:d0:
f5:03:fb:82:03:42:cf:2e:0d:c9:df:22:49:d8:a9:
af:43:b8:fd:92:78:c5:74:ec:dd:6d:85:95:dc:01:
31:e1:c4:d3:0e:3e:6e:d5:97:7a:2c:0e:0a:09:41:
70:f9:de:f2:07:e1:cd:01:fe:d9:4a:81:06:59:48:
ae:cb:34:e2:e7:fb:a3:90:91:d8:bf:2c:31:ff:34:
61:b2:66:41:9c:86:07:9d:b0:31:9a:ed:4c:1f:83:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9D:CF:C0:B2:E2:ED:94:07:F8:36:D4:14:D3:96:FA:AB:30:D2:25
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:ff:be:48:d5:1f:d6:32:e8:01:b9:07:78:46:1c:ff:34:
0a:fa:8e:83:17:51:87:ce:8e:1a:7c:b4:96:99:4f:6f:6d:9a:
29:88:75:44:07:29:e4:82:fe:f9:e3:79:a5:c8:1f:2c:02:20:
6b:86:3e:78:23:f1:35:c2:74:4d:4f:cd:45:a8:64:67:a8:6e:
98:d3:89:13:12:79:c8:e7:b6:51:b8:aa:9c:88:c7:5b:3a:c7:
a5:a0:61:d5:fe:8f:64:aa:4c:69:dc:0b:99:66:09:a2:39:7b:
47:24:0a:c7:96:e1:6f:fc:ea:9d:fb:f5:95:13:43:d7:d7:b2:
1b:23:bc:12:98:7c:03:de:b2:c6:74:b2:3e:82:ec:00:46:f3:
24:23:34:3e:81:89:bd:ff:db:7b:7b:7e:4f:aa:6c:0e:ec:10:
8e:50:ba:27:8d:bc:95:29:e2:11:5b:21:a8:43:fc:13:1e:e2:
60:7f:56:73:fe:15:7c:25:b6:ab:53:04:e5:ed:80:39:45:ef:
f0:ef:c4:f3:51:f4:ee:52:ae:dd:c9:19:84:dd:9e:da:08:85:
01:f3:b1:f6:98:7d:cc:45:2d:df:a7:fc:e7:6a:f2:35:32:b7:
9b:b8:80:b2:86:4a:e6:c2:e0:62:3c:b4:39:14:f3:86:18:7f:
e6:17:53:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1frXOg7PQkAURqe+NOGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjUwNjA3MTAwMDQ5WhcNMjUwNjA4MTAwMDQ5WjAzMTEwLwYDVQQD
EyhiMzlkY2ZjMGIyZTJlZDk0MDdmODM2ZDQxNGQzOTZmYWFiMzBkMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68cUhIzeroRek53OgHgo7rNgh+P9
ud0jYeD5cX1m27OwztQoWZeTmNkEFH15lInXA2IvTsBoEa/pinvubFZiI0WhmNcH
+ycFL1fXhlgATYP/Yxbz9CTWi8/dUhTY9WNLmFYLtKyjKLp6SZPPc/yE6CunUx52
T9bZOPiZ/jako47guzEQOhr/XjDQHIcgXEUdL0JUXzZp0AXTPoZC/shFktQnl9D1
A/uCA0LPLg3J3yJJ2KmvQ7j9knjFdOzdbYWV3AEx4cTTDj5u1Zd6LA4KCUFw+d7y
B+HNAf7ZSoEGWUiuyzTi5/ujkJHYvywx/zRhsmZBnIYHnbAxmu1MH4NCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOdz8Cy4u2UB/g21BTTlvqrMNIlMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCb/vkjV
H9Yy6AG5B3hGHP80CvqOgxdRh86OGny0lplPb22aKYh1RAcp5IL++eN5pcgfLAIg
a4Y+eCPxNcJ0TU/NRahkZ6humNOJExJ5yOe2UbiqnIjHWzrHpaBh1f6PZKpMadwL
mWYJojl7RyQKx5bhb/zqnfv1lRND19eyGyO8Eph8A96yxnSyPoLsAEbzJCM0PoGJ
vf/be3t+T6psDuwQjlC6J428lSniEVshqEP8Ex7iYH9Wc/4VfCW2q1ME5e2AOUXv
8O/E81H07lKu3ckZhN2e2giFAfOx9ph9zEUt36f852ryNTK3m7iAsoZK5sLgYjy0
ORTzhhh/5hdTew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:00 2025 by rpki-client