Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: pfjgZpt4oQaX7FtOShe3grofaMZgpHR2Vv6kpZEIRRY=
Subject key identifier: A9:F9:76:D1:01:21:BA:31:C1:35:D2:59:1A:A6:0D:A6:0C:7F:66:2B
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01976C98A560EF88D80AE92678310D15180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: Eh6TPUJGjpvR0Hss/gpnHvwXM4eAiGDS/CO7D377jrI=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a5:60:ef:88:d8:0a:e9:26:78:31:0d:15:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=a9f976d10121ba31c135d2591aa60da60c7f662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:8b:31:d7:4a:95:f7:50:5c:29:2e:74:ae:
3e:ee:d5:58:2a:fc:00:b8:00:02:f9:0e:70:d9:2d:
f3:4a:83:cb:6e:3e:c0:3f:69:14:19:cc:40:9b:67:
87:14:fc:d1:c3:06:d1:37:89:b1:9b:2b:bb:2a:c4:
75:fb:e2:ee:a6:ab:41:53:e8:99:c2:1d:15:21:0a:
94:42:48:1b:30:f5:2c:34:c1:de:2a:f5:84:6c:62:
e2:65:ee:ad:48:09:9c:ca:80:b4:27:97:06:cf:bb:
e1:c2:e0:99:bb:81:69:ef:a7:36:a2:45:3f:20:1c:
1a:23:b2:55:fa:4b:c6:97:3e:d0:99:59:7b:ac:4d:
b2:40:e1:4a:47:eb:bf:b9:d6:21:fa:8b:ab:0d:c7:
ea:bc:88:26:c8:4e:6c:1c:8b:24:e1:74:bf:f0:fe:
08:2c:f6:78:95:a1:d2:53:dd:6b:d9:1d:51:32:73:
84:2a:08:fd:03:2e:17:c0:36:50:c8:0e:ea:cf:ae:
2b:8b:e3:52:9d:18:f8:56:67:73:5c:19:5c:3c:38:
2a:1b:44:5d:49:65:aa:9f:37:3d:88:91:80:af:57:
9a:4d:0b:ad:5c:a9:00:09:8d:8a:61:c1:58:83:8e:
34:54:eb:d7:a1:d2:08:56:ef:da:12:d3:55:c4:17:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:76:D1:01:21:BA:31:C1:35:D2:59:1A:A6:0D:A6:0C:7F:66:2B
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6a:19:cf:04:1f:15:23:9f:ee:06:33:03:8f:ad:97:b9:f5:
b1:8f:78:36:86:ce:8d:cd:3e:a7:a5:b7:97:bb:e2:3a:91:6c:
8d:6d:fd:0b:de:a9:15:30:22:cf:6d:ec:1c:85:13:7a:56:08:
3e:9b:36:24:fa:56:a4:52:e9:ff:fb:12:ab:99:83:64:02:62:
65:58:cc:12:83:71:f1:f1:5f:90:cc:96:67:69:28:92:4c:ad:
c4:2c:43:7d:bf:91:5d:9b:3f:25:8b:1c:3d:41:0f:e0:57:fc:
dc:41:21:5c:f8:14:ed:da:10:6b:7b:c4:6e:99:9f:e3:b9:3a:
89:ac:50:6b:82:97:a8:cc:bf:13:37:2b:a0:a5:1a:fb:80:94:
0d:59:32:d9:19:be:ca:c6:94:a4:7c:9c:c6:9d:49:0f:69:43:
2b:d3:5b:8b:51:14:5d:4d:26:75:85:87:95:93:5a:64:83:c9:
6b:5d:73:e3:c6:13:64:38:e6:3d:3e:f3:c1:ee:f0:9d:b2:1d:
72:f6:5e:97:84:7e:03:fd:20:88:9a:6f:99:cd:30:e4:d7:af:
db:44:9f:eb:73:7a:a0:58:1e:5b:53:20:a0:ac:05:c9:fb:4a:
73:22:10:79:cf:ca:2b:89:e4:e0:88:0b:2f:4b:e8:67:6a:e7:
0a:f2:5b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKVg74jYCukmeDENFRgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh
MmJjNjcwHhcNMjUwNjE0MDQwMDMyWhcNMjUwNjE1MDQwMDMyWjAzMTEwLwYDVQQD
EyhhOWY5NzZkMTAxMjFiYTMxYzEzNWQyNTkxYWE2MGRhNjBjN2Y2NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IuLMddKlfdQXCkudK4+7tVYKvwA
uAAC+Q5w2S3zSoPLbj7AP2kUGcxAm2eHFPzRwwbRN4mxmyu7KsR1++LupqtBU+iZ
wh0VIQqUQkgbMPUsNMHeKvWEbGLiZe6tSAmcyoC0J5cGz7vhwuCZu4Fp76c2okU/
IBwaI7JV+kvGlz7QmVl7rE2yQOFKR+u/udYh+ourDcfqvIgmyE5sHIsk4XS/8P4I
LPZ4laHSU91r2R1RMnOEKgj9Ay4XwDZQyA7qz64ri+NSnRj4VmdzXBlcPDgqG0Rd
SWWqnzc9iJGAr1eaTQutXKkACY2KYcFYg440VOvXodIIVu/aEtNVxBcjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn5dtEBIboxwTXSWRqmDaYMf2YrMB8GA1UdIwQY
MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt
ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2
LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2oZzwQf
FSOf7gYzA4+tl7n1sY94NobOjc0+p6W3l7viOpFsjW39C96pFTAiz23sHIUTelYI
Pps2JPpWpFLp//sSq5mDZAJiZVjMEoNx8fFfkMyWZ2kokkytxCxDfb+RXZs/JYsc
PUEP4Ff83EEhXPgU7doQa3vEbpmf47k6iaxQa4KXqMy/EzcroKUa+4CUDVky2Rm+
ysaUpHycxp1JD2lDK9Nbi1EUXU0mdYWHlZNaZIPJa11z48YTZDjmPT7zwe7wnbId
cvZel4R+A/0giJpvmc0w5Nev20Sf63N6oFgeW1MgoKwFyftKcyIQec/KK4nk4IgL
L0voZ2rnCvJbPw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:23:11 2025 by rpki-client