Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 8jhDZaqZs8CESDlEoDb3MnY9pr0FVVyFWd+Z8tmbN6I=
Subject key identifier: 45:A7:05:8F:26:B2:27:85:1C:F0:0B:76:AB:C3:2E:0E:9D:80:02:B6
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019748557A0CB9505613632C867C1D4F2E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 03:00:50 +0000
Manifest this update: Sat 07 Jun 2025 03:00:50 +0000
Manifest next update: Sun 08 Jun 2025 03:00:50 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: XaqGo5w9WgU7GxZN3UoPnu/8uyaY2y9Mg83qnphLsM0=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:7a:0c:b9:50:56:13:63:2c:86:7c:1d:4f:2e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jun 7 03:00:50 2025 GMT
Not After : Jun 8 03:00:50 2025 GMT
Subject: CN=45a7058f26b227851cf00b76abc32e0e9d8002b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:c3:92:f9:1f:09:e2:41:73:12:e7:01:5f:
4b:4c:09:6f:36:81:8d:91:14:c6:55:c6:d0:ac:ed:
88:4d:42:70:4b:75:be:1d:aa:76:61:82:83:c8:19:
dc:12:a9:e1:76:89:83:91:f6:f9:73:d2:77:79:06:
74:a5:16:3a:dc:27:da:cc:51:1d:56:50:63:37:e1:
a9:d7:2b:1d:64:92:8e:44:c2:43:06:dc:1b:a3:c6:
f5:1c:0e:ef:1d:c0:31:5e:78:e5:d8:33:d8:9e:ae:
46:e7:db:19:be:9a:34:25:4d:d3:17:a2:cf:81:2c:
d1:fe:91:64:c0:cd:33:de:59:2a:76:7b:c4:b2:01:
75:94:1b:8b:58:35:14:f9:55:51:11:9c:4b:39:24:
a6:2e:56:5e:83:4d:fc:e8:cd:0d:fe:ff:fa:4a:9a:
9e:82:67:ce:09:06:0f:54:1d:14:ea:7c:17:13:40:
66:5a:5b:fb:ff:f7:0f:64:43:11:36:79:8d:20:3b:
2f:c6:17:b7:d3:04:76:c2:f8:69:12:eb:b1:58:2a:
d7:cf:67:b1:e5:14:fc:90:9d:fb:f9:42:41:45:b5:
c3:3a:ce:1a:9a:4b:24:dc:c6:2d:b3:ac:53:03:60:
5f:75:a8:c0:49:2b:35:87:13:e8:84:8c:13:69:0f:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:05:8F:26:B2:27:85:1C:F0:0B:76:AB:C3:2E:0E:9D:80:02:B6
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:53:c6:28:89:cc:6e:fa:37:88:c7:31:d1:3b:cc:4b:84:
34:81:32:6e:58:9c:99:69:b2:0a:f8:91:81:5f:2f:f9:d1:85:
30:bf:9d:ab:09:92:ec:d5:c0:94:ab:4d:2c:46:2e:f6:61:af:
a5:4c:4a:85:a2:14:d5:33:1a:8c:06:24:b3:94:88:c9:a4:78:
2d:54:ff:d0:d5:ae:ee:4f:b9:de:75:0d:01:a0:f6:6f:65:92:
75:c4:d3:25:be:1d:ac:6f:87:1e:18:b8:12:28:e6:bb:02:ea:
22:cc:59:b4:45:f7:3f:e5:74:57:87:d4:43:ad:71:4f:ba:a8:
87:59:6e:64:df:2c:cf:5b:15:ae:0a:8f:c8:b4:ab:57:6d:c8:
a3:77:8d:ca:66:6f:f6:c1:74:e0:f5:2a:bc:8b:2d:7d:c1:bd:
67:1a:03:87:54:b0:b9:65:7d:9a:31:93:d0:1c:a1:e2:00:fd:
80:da:6b:97:87:a6:47:d3:d3:9c:ad:83:8d:e7:51:fb:79:45:
16:a5:7d:7c:33:8c:5e:36:f7:4f:67:59:11:02:50:e5:a9:dd:
22:d3:42:aa:69:5f:2c:2f:8a:fb:38:47:bb:9a:e8:37:e6:39:
4d:47:e6:e0:b2:5b:43:25:7d:5d:e0:b9:9f:2f:47:a6:91:3c:
95:32:78:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVXoMuVBWE2MshnwdTy6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjUwNjA3MDMwMDUwWhcNMjUwNjA4MDMwMDUwWjAzMTEwLwYDVQQD
Eyg0NWE3MDU4ZjI2YjIyNzg1MWNmMDBiNzZhYmMzMmUwZTlkODAwMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNPDkvkfCeJBcxLnAV9LTAlvNoGN
kRTGVcbQrO2ITUJwS3W+Hap2YYKDyBncEqnhdomDkfb5c9J3eQZ0pRY63CfazFEd
VlBjN+Gp1ysdZJKORMJDBtwbo8b1HA7vHcAxXnjl2DPYnq5G59sZvpo0JU3TF6LP
gSzR/pFkwM0z3lkqdnvEsgF1lBuLWDUU+VVREZxLOSSmLlZeg0386M0N/v/6Spqe
gmfOCQYPVB0U6nwXE0BmWlv7//cPZEMRNnmNIDsvxhe30wR2wvhpEuuxWCrXz2ex
5RT8kJ37+UJBRbXDOs4amksk3MYts6xTA2BfdajASSs1hxPohIwTaQ/DCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWnBY8msieFHPALdqvDLg6dgAK2MB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2VTxiiJ
zG76N4jHMdE7zEuENIEyblicmWmyCviRgV8v+dGFML+dqwmS7NXAlKtNLEYu9mGv
pUxKhaIU1TMajAYks5SIyaR4LVT/0NWu7k+53nUNAaD2b2WSdcTTJb4drG+HHhi4
EijmuwLqIsxZtEX3P+V0V4fUQ61xT7qoh1luZN8sz1sVrgqPyLSrV23Io3eNymZv
9sF04PUqvIstfcG9ZxoDh1SwuWV9mjGT0Byh4gD9gNprl4emR9PTnK2DjedR+3lF
FqV9fDOMXjb3T2dZEQJQ5andItNCqmlfLC+K+zhHu5roN+Y5TUfm4LJbQyV9XeC5
ny9HppE8lTJ4Pg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:40:59 2025 by rpki-client