
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: TCoTuLofwFG1oW2eoTVRFZ1q5t5cRwd1GfVhQtAoxKo=
Subject key identifier: 5E:99:4C:05:6B:2A:9D:6D:14:0B:47:4B:1E:A8:B8:22:DD:0B:B0:5C
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 01974967B08D3F27411C9BC1C2404D91307D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 050B
Signing time: Sat 07 Jun 2025 08:00:21 +0000
Manifest this update: Sat 07 Jun 2025 08:00:21 +0000
Manifest next update: Sun 08 Jun 2025 08:00:21 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: 0/Izrwk+RMvQEf30Q4PEf0aYk8Lwk63qGWlapbmCkxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b0:8d:3f:27:41:1c:9b:c1:c2:40:4d:91:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Jun 7 08:00:21 2025 GMT
Not After : Jun 8 08:00:21 2025 GMT
Subject: CN=5e994c056b2a9d6d140b474b1ea8b822dd0bb05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:e6:d1:0a:f7:8b:03:cb:eb:49:94:3b:b4:
42:f4:78:b3:69:5c:81:36:6c:95:68:18:ff:ca:df:
8c:9f:91:74:96:a4:da:ff:29:cc:bf:fd:84:6f:f4:
67:50:01:9e:03:a3:06:0d:90:81:65:f5:11:73:63:
e2:b9:cd:a9:37:33:66:b7:c4:fc:ab:05:97:12:48:
38:5b:b5:40:93:32:bf:87:94:9e:ef:75:3f:cc:d3:
ea:b2:56:bb:70:c9:46:e8:d7:e6:40:2e:16:6c:e1:
fc:66:0d:50:cd:50:e1:fa:c9:99:fa:18:55:7e:f4:
c0:75:51:3f:93:cd:75:b6:23:81:dc:27:ba:bd:c1:
0b:3b:cd:4d:20:48:97:63:a9:08:9e:73:80:fe:2b:
e6:ef:af:38:65:4b:54:cb:1a:09:5a:d4:04:6e:0f:
14:0d:3c:ae:7a:ff:ba:9a:5d:a2:2b:1e:3f:45:23:
b4:24:ea:2c:25:e4:99:82:ea:75:0d:ef:99:00:f0:
46:0a:5b:ae:45:23:43:8e:4c:93:49:56:4e:54:60:
99:02:ca:c3:ce:3d:40:a6:60:cc:9c:90:0f:d4:e1:
93:b5:4b:3d:de:59:9d:3a:7f:02:a5:79:4f:3c:8a:
ca:90:86:3e:2d:04:f5:57:a5:10:a3:b6:ff:e0:02:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:4C:05:6B:2A:9D:6D:14:0B:47:4B:1E:A8:B8:22:DD:0B:B0:5C
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:06:02:f8:95:c4:47:c9:20:56:ae:c2:1e:1a:fd:d2:d0:41:
58:03:c1:27:0e:1f:cb:c8:03:7e:24:5d:1b:f9:b7:72:8f:d7:
d7:ac:25:46:32:af:8a:aa:00:81:e2:bd:51:12:39:15:68:7c:
16:47:bc:3a:42:e2:e3:03:bf:c2:b7:52:d5:e6:f5:43:30:66:
56:65:2a:79:75:46:fc:7d:fb:77:41:16:62:f8:4a:a4:be:19:
39:a7:c7:03:58:f6:35:c0:4a:5d:e7:e1:25:14:7d:49:20:1e:
49:49:17:5e:58:ce:3a:31:8e:f1:18:7b:29:98:08:ea:d4:a5:
8c:54:6d:bb:b9:22:27:a0:3f:86:d7:3c:c0:19:d7:ae:9d:5e:
92:8e:b9:71:af:bd:20:35:4a:b9:9e:d3:33:cc:e9:07:80:54:
a9:d3:13:5e:8b:5f:42:26:cb:aa:3e:be:a5:90:75:9a:d3:8c:
95:92:9a:5f:2d:07:9d:ce:62:47:a3:30:46:a8:50:16:bc:af:
8c:37:e9:1f:88:4c:39:54:f7:9e:aa:21:0c:ef:dc:58:5d:0e:
bb:0d:a4:6f:77:f1:97:04:9b:05:8e:5e:8c:b6:d1:5b:90:65:
40:1b:2f:43:69:b5:9c:50:76:55:7c:f6:c7:fb:58:da:d3:e0:
c9:a1:07:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ7CNPydBHJvBwkBNkTB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjdhNTI0N2Q5ZjRlOTRmN2JkNTcxY2YxM2QzNWFiNDhi
MDFkMjQwHhcNMjUwNjA3MDgwMDIxWhcNMjUwNjA4MDgwMDIxWjAzMTEwLwYDVQQD
Eyg1ZTk5NGMwNTZiMmE5ZDZkMTQwYjQ3NGIxZWE4YjgyMmRkMGJiMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIzm0Qr3iwPL60mUO7RC9HizaVyB
NmyVaBj/yt+Mn5F0lqTa/ynMv/2Eb/RnUAGeA6MGDZCBZfURc2Piuc2pNzNmt8T8
qwWXEkg4W7VAkzK/h5Se73U/zNPqsla7cMlG6NfmQC4WbOH8Zg1QzVDh+smZ+hhV
fvTAdVE/k811tiOB3Ce6vcELO81NIEiXY6kInnOA/ivm7684ZUtUyxoJWtQEbg8U
DTyuev+6ml2iKx4/RSO0JOosJeSZgup1De+ZAPBGCluuRSNDjkyTSVZOVGCZAsrD
zj1ApmDMnJAP1OGTtUs93lmdOn8CpXlPPIrKkIY+LQT1V6UQo7b/4ALedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6ZTAVrKp1tFAtHSx6ouCLdC7BcMB8GA1UdIwQY
MBaAFINnpSR9n06U971XHPE9NatIsB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2Yt
NjM1NGVmMDc3MWM5LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2YtNjM1NGVmMDc3MWM5
LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAYC+JXE
R8kgVq7CHhr90tBBWAPBJw4fy8gDfiRdG/m3co/X16wlRjKviqoAgeK9URI5FWh8
Fke8OkLi4wO/wrdS1eb1QzBmVmUqeXVG/H37d0EWYvhKpL4ZOafHA1j2NcBKXefh
JRR9SSAeSUkXXljOOjGO8Rh7KZgI6tSljFRtu7kiJ6A/htc8wBnXrp1eko65ca+9
IDVKuZ7TM8zpB4BUqdMTXotfQibLqj6+pZB1mtOMlZKaXy0Hnc5iR6MwRqhQFryv
jDfpH4hMOVT3nqohDO/cWF0Ouw2kb3fxlwSbBY5ejLbRW5BlQBsvQ2m1nFB2VXz2
x/tY2tPgyaEH6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:39 2025 by rpki-client