Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: RTb9fS3CY01gg+2AKsM7oFIi2Jw+/WP/go3DFblBl7k=
Subject key identifier: F6:31:D7:E1:7B:3C:0E:95:DD:0A:3A:C3:DB:54:81:7E:E2:E1:38:51
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0197537D7F12A0EEE203544FCAE0ECFA48C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 07:00:22 +0000
Manifest this update: Mon 09 Jun 2025 07:00:22 +0000
Manifest next update: Tue 10 Jun 2025 07:00:22 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: /M6SBe8at9guAV81azBK38nSOXMiuKZHkT+USJnhwno=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:7f:12:a0:ee:e2:03:54:4f:ca:e0:ec:fa:48:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jun 9 07:00:22 2025 GMT
Not After : Jun 10 07:00:22 2025 GMT
Subject: CN=f631d7e17b3c0e95dd0a3ac3db54817ee2e13851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:f0:31:9c:8c:ca:fc:79:ea:86:a7:90:72:
fb:cb:d3:b2:43:ce:88:19:76:0b:cf:d5:4a:cc:96:
92:ea:95:ab:dc:73:6e:a6:c1:bf:d6:0a:e9:83:09:
53:1c:f8:5c:2b:23:7b:b1:00:86:57:ab:e8:12:4a:
f8:b1:6a:65:29:9a:ab:5e:78:25:23:f6:31:22:e0:
19:fd:0d:12:1b:1e:9b:2f:8b:f5:17:17:84:22:64:
62:4f:7f:26:3a:24:cd:51:16:9d:e1:5f:45:41:90:
9f:74:be:f0:92:25:b3:3f:ca:d5:be:93:91:09:73:
88:04:22:bd:e4:d8:05:15:32:9c:85:dd:80:6a:53:
a8:ef:bc:2c:c3:02:ef:69:4e:8c:21:bf:04:43:d5:
70:3c:b3:f3:c1:32:a6:8f:0b:fb:0c:76:bb:7c:c5:
dc:d8:6f:9c:dd:32:88:a1:3b:12:73:d0:d2:08:b4:
13:33:2f:d1:71:19:b2:45:a4:51:9d:6b:a0:11:72:
9f:a4:45:a7:e5:17:43:ce:50:db:dd:6a:ab:b3:a3:
7d:98:7a:0e:a7:14:ed:56:14:88:89:3b:3a:f2:d9:
6f:d0:66:45:93:14:db:27:e5:98:41:d8:2d:34:87:
cd:ea:bf:b7:e8:d0:93:dc:13:37:51:b3:ce:e7:ee:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:D7:E1:7B:3C:0E:95:DD:0A:3A:C3:DB:54:81:7E:E2:E1:38:51
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:21:78:a7:6e:64:46:c3:b2:c1:52:60:1e:15:cf:81:6f:
cc:6e:34:a7:88:0f:9d:ec:5b:1f:db:98:ef:38:fa:9a:96:a5:
24:8c:06:de:8b:de:22:98:ee:81:fc:88:ff:1c:e7:fe:a5:94:
a6:5f:2f:c6:1c:f2:a3:d6:f3:a3:80:05:fc:19:ac:9e:c8:5a:
e0:2e:9c:3e:dc:1a:f7:e2:95:89:18:0c:d9:eb:40:ce:e0:74:
ca:48:ad:4a:27:9e:cc:8e:0a:e3:69:b3:44:7b:56:9a:c6:e7:
11:4c:0b:9a:ee:00:02:63:52:7e:e6:ab:1a:ab:aa:8e:a8:9a:
a7:9e:c8:97:c7:b3:a6:9b:c2:9b:73:1b:e6:b0:8e:73:17:83:
5d:f4:0b:96:7a:9f:07:19:e1:e5:77:b5:4a:7d:45:bd:15:9b:
21:db:5e:6a:01:78:79:4a:d4:03:aa:f9:4d:ac:36:bc:14:fe:
57:d7:72:94:99:87:c7:d4:72:32:e1:b1:25:22:69:70:28:5e:
73:2c:5b:74:f1:4f:1d:cb:36:69:e9:25:02:ea:5a:44:a1:45:
37:15:05:6c:79:03:2f:80:09:3a:73:78:a0:c6:20:6c:4a:36:
03:37:4f:98:c6:4b:57:93:a3:a2:76:f7:54:a6:bd:e7:62:50:
2c:91:17:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTfX8SoO7iA1RPyuDs+kjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh
MmJjNjcwHhcNMjUwNjA5MDcwMDIyWhcNMjUwNjEwMDcwMDIyWjAzMTEwLwYDVQQD
EyhmNjMxZDdlMTdiM2MwZTk1ZGQwYTNhYzNkYjU0ODE3ZWUyZTEzODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY3wMZyMyvx56oankHL7y9OyQ86I
GXYLz9VKzJaS6pWr3HNupsG/1grpgwlTHPhcKyN7sQCGV6voEkr4sWplKZqrXngl
I/YxIuAZ/Q0SGx6bL4v1FxeEImRiT38mOiTNURad4V9FQZCfdL7wkiWzP8rVvpOR
CXOIBCK95NgFFTKchd2AalOo77wswwLvaU6MIb8EQ9VwPLPzwTKmjwv7DHa7fMXc
2G+c3TKIoTsSc9DSCLQTMy/RcRmyRaRRnWugEXKfpEWn5RdDzlDb3Wqrs6N9mHoO
pxTtVhSIiTs68tlv0GZFkxTbJ+WYQdgtNIfN6r+36NCT3BM3UbPO5+5/gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYx1+F7PA6V3Qo6w9tUgX7i4ThRMB8GA1UdIwQY
MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt
ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2
LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFcheKdu
ZEbDssFSYB4Vz4FvzG40p4gPnexbH9uY7zj6mpalJIwG3oveIpjugfyI/xzn/qWU
pl8vxhzyo9bzo4AF/Bmsnsha4C6cPtwa9+KViRgM2etAzuB0ykitSieezI4K42mz
RHtWmsbnEUwLmu4AAmNSfuarGquqjqiap57Il8ezppvCm3Mb5rCOcxeDXfQLlnqf
Bxnh5Xe1Sn1FvRWbIdteagF4eUrUA6r5Taw2vBT+V9dylJmHx9RyMuGxJSJpcChe
cyxbdPFPHcs2aeklAupaRKFFNxUFbHkDL4AJOnN4oMYgbEo2AzdPmMZLV5Ojonb3
VKa952JQLJEXUg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:10:24 2025 by rpki-client