Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: K7GutQaad3XJmMqv537sxWfU0BWnM4d9VLJA4kQNXY8=
Subject key identifier: F4:25:E4:45:D4:56:F9:21:3B:CF:2D:31:F1:F3:56:D5:DB:5B:95:9F
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0197542333EE9A5D4C894B4611FC738C15A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0457
Signing time: Mon 09 Jun 2025 10:01:22 +0000
Manifest this update: Mon 09 Jun 2025 10:01:22 +0000
Manifest next update: Tue 10 Jun 2025 10:01:22 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: q66gqMx+yFb1T8J/UPlbvIwMJmz7bqiWwpXeYlKSPiM=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:33:ee:9a:5d:4c:89:4b:46:11:fc:73:8c:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Jun 9 10:01:22 2025 GMT
Not After : Jun 10 10:01:22 2025 GMT
Subject: CN=f425e445d456f9213bcf2d31f1f356d5db5b959f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:7e:47:72:5d:d3:36:a9:d3:fe:cb:cc:8c:
5e:fb:e1:bb:39:da:3c:21:a2:2f:f8:8b:76:a6:02:
64:18:9e:b5:34:f0:74:a1:0f:b7:0f:b8:a5:43:58:
26:73:01:13:4f:89:80:96:4d:10:73:20:f0:1d:c4:
2b:60:e8:1f:2b:d8:7d:9f:31:ec:d7:4c:97:1b:bc:
94:cc:43:8b:53:52:b2:6c:1c:9a:6c:c6:d5:18:0a:
7f:0d:3a:7b:32:d0:0d:39:a5:64:90:7e:3c:8e:c3:
eb:dd:0a:57:c6:9a:d6:d2:64:6f:68:1d:c2:0d:26:
0d:76:93:c4:93:70:63:f4:ba:80:9c:8d:f4:35:12:
1c:c1:09:63:9a:52:41:2e:be:6e:55:2b:9d:41:fc:
81:ff:33:64:18:7c:3c:f8:74:98:a4:36:7d:8f:41:
df:41:b7:90:bb:b8:22:aa:2d:9e:e0:81:b6:24:79:
42:48:8f:20:34:0e:20:f3:13:2d:16:b2:33:56:c2:
1f:be:76:02:2c:e2:5c:4d:93:ca:01:68:f0:25:5d:
28:9b:87:3c:ab:d0:dd:18:0d:d8:e6:1f:a9:28:5c:
b1:61:e3:85:b0:93:48:50:44:ee:ce:d3:ed:18:d5:
aa:2e:8e:62:aa:36:27:b9:c9:7d:df:c3:01:44:45:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:E4:45:D4:56:F9:21:3B:CF:2D:31:F1:F3:56:D5:DB:5B:95:9F
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:72:37:84:20:b6:a0:1b:5a:4b:6d:ec:2d:16:ce:68:9f:8e:
e0:e5:cf:ec:f6:08:c3:9e:f5:92:f3:c9:e9:19:37:7c:84:30:
01:e5:ff:66:9a:e9:83:11:54:50:8c:85:f5:cf:4b:bd:5e:d6:
84:fb:30:11:4b:33:df:e3:49:c8:28:09:89:50:f6:c5:6b:a0:
d5:b2:1d:48:11:88:4e:b6:c5:4f:8a:c7:e0:1e:dc:95:b2:63:
0e:0d:22:82:b8:e5:80:36:69:f6:21:f9:3a:65:57:35:be:1f:
89:b3:34:c3:c3:b2:2e:3c:ed:04:64:0b:20:fb:eb:9b:ec:77:
30:7d:cc:3a:6d:dc:ce:09:79:3a:85:cc:67:39:85:32:84:35:
27:48:a9:be:51:a7:b5:67:87:c7:59:aa:49:20:02:7e:5f:e2:
71:0c:8b:90:0e:e1:5f:ea:09:9b:e2:8c:90:28:74:97:11:0a:
92:71:62:a5:a9:be:bf:35:1a:b3:24:77:20:cb:32:d8:50:c9:
14:44:16:96:1d:63:db:ea:9a:6c:44:c1:d1:22:7f:54:c8:be:
15:03:e9:62:fc:ed:b2:64:df:ee:ce:8b:d0:75:e4:c4:3b:24:
65:1c:47:04:9c:79:bf:ed:a3:ac:97:e2:c6:92:7d:0d:74:ed:
62:b3:71:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIzPuml1MiUtGEfxzjBWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjUwNjA5MTAwMTIyWhcNMjUwNjEwMTAwMTIyWjAzMTEwLwYDVQQD
EyhmNDI1ZTQ0NWQ0NTZmOTIxM2JjZjJkMzFmMWYzNTZkNWRiNWI5NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6h+R3Jd0zap0/7LzIxe++G7Odo8
IaIv+It2pgJkGJ61NPB0oQ+3D7ilQ1gmcwETT4mAlk0QcyDwHcQrYOgfK9h9nzHs
10yXG7yUzEOLU1KybByabMbVGAp/DTp7MtANOaVkkH48jsPr3QpXxprW0mRvaB3C
DSYNdpPEk3Bj9LqAnI30NRIcwQljmlJBLr5uVSudQfyB/zNkGHw8+HSYpDZ9j0Hf
QbeQu7giqi2e4IG2JHlCSI8gNA4g8xMtFrIzVsIfvnYCLOJcTZPKAWjwJV0om4c8
q9DdGA3Y5h+pKFyxYeOFsJNIUETuztPtGNWqLo5iqjYnucl938MBREUicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQl5EXUVvkhO88tMfHzVtXbW5WfMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3I3hCC2
oBtaS23sLRbOaJ+O4OXP7PYIw571kvPJ6Rk3fIQwAeX/ZprpgxFUUIyF9c9LvV7W
hPswEUsz3+NJyCgJiVD2xWug1bIdSBGITrbFT4rH4B7clbJjDg0igrjlgDZp9iH5
OmVXNb4fibM0w8OyLjztBGQLIPvrm+x3MH3MOm3czgl5OoXMZzmFMoQ1J0ipvlGn
tWeHx1mqSSACfl/icQyLkA7hX+oJm+KMkCh0lxEKknFipam+vzUasyR3IMsy2FDJ
FEQWlh1j2+qabETB0SJ/VMi+FQPpYvztsmTf7s6L0HXkxDskZRxHBJx5v+2jrJfi
xpJ9DXTtYrNxyw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:47 2025 by rpki-client