Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: qC3Fnm1d9f/Vl6fR5mQH9C1Ws9dZkzBYl95NTST0acc=
Subject key identifier: EB:8A:AE:98:0A:EF:AB:E1:25:51:01:1A:BB:71:25:7A:B5:3F:DF:5F
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019739F4C0B3B8ECEAA5D086AA6FF71F5CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1578
Signing time: Wed 04 Jun 2025 08:00:30 +0000
Manifest this update: Wed 04 Jun 2025 08:00:30 +0000
Manifest next update: Thu 05 Jun 2025 08:00:30 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: cJOpglKib1STGp1HqbyOVxAorgfVhRqXC0CitymhTtw=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f4:c0:b3:b8:ec:ea:a5:d0:86:aa:6f:f7:1f:5c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jun 4 08:00:30 2025 GMT
Not After : Jun 5 08:00:30 2025 GMT
Subject: CN=eb8aae980aefabe12551011abb71257ab53fdf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:a2:e8:2a:47:21:e6:19:ad:d3:18:e2:2b:
83:a9:af:32:e4:d7:66:d9:f6:8a:1a:0f:ea:f6:8c:
2f:76:0a:fe:6e:21:ed:81:52:d4:33:fe:89:68:42:
d5:f9:2e:77:80:b0:a0:67:5f:3e:44:a2:ba:ba:92:
b2:b1:47:8c:9c:05:50:67:43:28:9c:80:70:ab:d4:
25:63:a2:a2:2e:72:e9:1a:3a:a9:3b:87:c0:bd:1f:
b6:67:3a:00:ca:86:3c:eb:43:ca:1d:23:6b:39:dd:
3c:74:e7:02:e2:30:82:74:93:cd:d7:b7:bb:33:32:
d0:a6:f3:70:93:0c:73:b6:cc:5c:d0:1f:12:32:b3:
56:67:d4:d9:fd:d4:f4:88:54:6d:c1:02:2c:35:d3:
42:08:d3:b5:53:53:99:99:a7:7e:6b:f2:5b:a3:41:
9a:76:07:52:8f:37:6b:34:99:14:a7:9f:b7:1e:16:
3c:79:da:c7:fd:13:d1:01:55:da:4f:b9:52:11:79:
6a:a1:0a:6e:7c:96:43:ae:a3:a2:b6:f5:43:ec:91:
af:9e:d6:7d:51:b3:8f:82:8c:d9:b8:a8:e1:60:a9:
fa:bf:25:60:b9:4b:d1:5b:7e:89:0c:28:5b:c7:29:
c5:d7:7f:a1:ab:05:7b:a4:0a:87:0d:4e:e5:f4:9d:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:AE:98:0A:EF:AB:E1:25:51:01:1A:BB:71:25:7A:B5:3F:DF:5F
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0e:30:45:73:18:cc:b3:fc:2c:6a:b2:3b:4f:88:68:4b:aa:
b3:76:dd:13:a9:df:dd:6e:53:85:01:ea:87:ca:bf:dc:89:5e:
1d:5f:21:f8:cc:65:36:6d:60:01:62:a2:a6:0f:6b:59:fb:02:
bd:63:22:30:09:f5:14:f6:48:fa:55:7c:62:63:f6:fb:6a:33:
24:41:a7:78:6a:43:20:eb:ed:a4:16:7e:d9:44:14:b5:79:8a:
5f:3e:e4:5a:25:6e:da:0c:81:c0:38:54:33:fc:3b:88:01:94:
68:dd:14:33:92:52:a9:ae:c7:2b:f6:e4:8a:e0:92:6d:c1:9c:
2c:a0:55:93:86:96:81:41:39:92:11:04:af:ee:fb:04:5a:ee:
3f:98:b8:c0:93:ad:d6:26:66:23:db:06:61:f3:fd:36:0e:8b:
b1:da:07:40:ed:cc:29:3d:e3:3a:cc:16:0b:9d:e8:9a:bd:02:
b3:1d:69:de:98:59:7f:37:29:c1:28:13:af:c6:9f:83:d3:f3:
3e:c2:9d:e0:51:c7:5f:8a:8a:53:35:e0:8b:0c:7a:13:19:6b:
39:06:97:c8:9e:50:fe:f6:94:36:9b:76:fc:4c:06:5a:a6:92:
e2:b1:5a:47:6b:29:db:8e:59:03:c4:5d:af:61:32:b9:4b:c2:
27:40:cb:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc59MCzuOzqpdCGqm/3H1y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjUwNjA0MDgwMDMwWhcNMjUwNjA1MDgwMDMwWjAzMTEwLwYDVQQD
EyhlYjhhYWU5ODBhZWZhYmUxMjU1MTAxMWFiYjcxMjU3YWI1M2ZkZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2i6CpHIeYZrdMY4iuDqa8y5Ndm
2faKGg/q9owvdgr+biHtgVLUM/6JaELV+S53gLCgZ18+RKK6upKysUeMnAVQZ0Mo
nIBwq9QlY6KiLnLpGjqpO4fAvR+2ZzoAyoY860PKHSNrOd08dOcC4jCCdJPN17e7
MzLQpvNwkwxztsxc0B8SMrNWZ9TZ/dT0iFRtwQIsNdNCCNO1U1OZmad+a/Jbo0Ga
dgdSjzdrNJkUp5+3HhY8edrH/RPRAVXaT7lSEXlqoQpufJZDrqOitvVD7JGvntZ9
UbOPgozZuKjhYKn6vyVguUvRW36JDChbxynF13+hqwV7pAqHDU7l9J1FaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuKrpgK76vhJVEBGrtxJXq1P99fMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ4wRXMY
zLP8LGqyO0+IaEuqs3bdE6nf3W5ThQHqh8q/3IleHV8h+MxlNm1gAWKipg9rWfsC
vWMiMAn1FPZI+lV8YmP2+2ozJEGneGpDIOvtpBZ+2UQUtXmKXz7kWiVu2gyBwDhU
M/w7iAGUaN0UM5JSqa7HK/bkiuCSbcGcLKBVk4aWgUE5khEEr+77BFruP5i4wJOt
1iZmI9sGYfP9Ng6LsdoHQO3MKT3jOswWC53omr0Csx1p3phZfzcpwSgTr8afg9Pz
PsKd4FHHX4qKUzXgiwx6ExlrOQaXyJ5Q/vaUNpt2/EwGWqaS4rFaR2sp245ZA8Rd
r2EyuUvCJ0DLUw==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:29:08 2025 by rpki-client