Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: +iNgH7nME8Qdvvj76mk6NRPmRmUdPdIbRemZ/2G3Sfg=
Subject key identifier: B8:A2:F4:48:24:6F:C3:E6:C2:2A:2B:4F:25:D4:31:3C:92:C7:1F:7B
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 0197488C198EE700BE3991CD14277D05F9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 108F
Signing time: Sat 07 Jun 2025 04:00:30 +0000
Manifest this update: Sat 07 Jun 2025 04:00:30 +0000
Manifest next update: Sun 08 Jun 2025 04:00:30 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: KbjSz67PDnHPn47ht1nZXh7pED16dn/KBugV5agOyik=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:19:8e:e7:00:be:39:91:cd:14:27:7d:05:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Jun 7 04:00:30 2025 GMT
Not After : Jun 8 04:00:30 2025 GMT
Subject: CN=b8a2f448246fc3e6c22a2b4f25d4313c92c71f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:86:09:90:b6:1d:05:27:68:7a:38:f1:54:
2f:fe:c0:9b:5b:6a:a8:d7:bf:cb:ed:89:55:d1:98:
7a:af:9c:cd:ed:0a:a5:bc:8a:9e:50:c5:72:d2:2e:
17:91:4d:41:04:4d:39:ea:a8:c4:bd:4f:59:84:73:
b2:78:26:74:6b:35:94:82:52:94:5a:24:b9:16:c1:
82:f8:4b:22:f1:a3:d9:c3:03:66:83:4a:3d:3b:25:
8d:33:52:36:2d:85:6e:35:2f:89:5a:0a:a7:4d:00:
a8:82:6d:b1:c7:81:f7:b9:bd:02:92:d0:eb:07:90:
78:3c:0e:5b:a0:1c:d4:f9:64:b1:0a:81:ee:a4:c9:
b5:ac:1f:d8:4e:dd:42:24:9e:ac:7e:f3:f6:4b:27:
65:55:e6:2f:06:a8:a9:08:07:21:c0:60:a6:5f:7b:
65:f6:57:9b:a4:c3:c4:35:16:7f:ad:83:6b:1b:23:
f2:6d:1f:ba:4b:3e:0b:2c:53:dc:76:4d:74:b7:8a:
16:30:6c:ad:ee:c3:86:42:1b:db:11:d9:0a:64:71:
32:9e:81:b9:65:8c:32:b0:a7:bf:dd:93:10:b7:29:
57:93:bd:0d:94:31:47:83:6b:78:b3:cb:6b:b9:c5:
19:1f:4e:da:fc:c7:40:e5:48:39:ba:77:fe:a0:c9:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:F4:48:24:6F:C3:E6:C2:2A:2B:4F:25:D4:31:3C:92:C7:1F:7B
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:40:cb:ea:7d:65:48:7b:b6:fc:a2:54:6f:47:3f:eb:b3:18:
1d:f6:27:df:19:bf:8b:ac:a0:b3:0d:6d:75:4f:65:37:ac:19:
40:bf:26:f5:7d:31:01:b7:6d:ec:ab:51:3a:a0:45:0b:0a:3d:
77:1e:72:cb:b6:b3:6b:6c:c7:fd:54:02:9a:25:11:58:6c:6f:
ee:34:5b:03:2c:72:5e:79:71:b0:7a:61:2e:d6:cb:9b:12:20:
50:72:26:0e:88:32:48:83:ab:88:a2:7f:09:27:a5:5b:c5:4b:
52:bf:46:5b:cb:7a:cd:29:1b:8a:23:47:15:c4:fa:06:31:9a:
57:60:18:a5:c2:79:cb:09:6a:57:37:8b:3b:4e:df:e0:ca:2a:
70:c4:aa:2b:bb:e9:b8:93:7f:d2:19:c7:ba:65:b2:75:77:88:
c5:cd:d5:8b:9e:3d:d2:1f:45:2d:73:ba:e9:a9:bc:4d:ea:e4:
b3:06:b5:40:02:5f:e8:ef:24:c4:a9:9d:91:96:49:72:d1:a8:
ef:d7:28:5f:8c:43:b8:65:92:46:a4:16:93:c7:ec:3c:73:6f:
b7:f6:3a:83:e2:ab:0a:87:e9:4e:d3:7f:72:37:96:ca:87:43:
6e:c9:77:3e:71:4b:85:d2:72:df:79:5f:fa:45:13:96:92:10:
b1:ed:92:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjBmO5wC+OZHNFCd9BfmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2
NzVlZDUwHhcNMjUwNjA3MDQwMDMwWhcNMjUwNjA4MDQwMDMwWjAzMTEwLwYDVQQD
EyhiOGEyZjQ0ODI0NmZjM2U2YzIyYTJiNGYyNWQ0MzEzYzkyYzcxZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfuGCZC2HQUnaHo48VQv/sCbW2qo
17/L7YlV0Zh6r5zN7QqlvIqeUMVy0i4XkU1BBE056qjEvU9ZhHOyeCZ0azWUglKU
WiS5FsGC+Esi8aPZwwNmg0o9OyWNM1I2LYVuNS+JWgqnTQCogm2xx4H3ub0CktDr
B5B4PA5boBzU+WSxCoHupMm1rB/YTt1CJJ6sfvP2SydlVeYvBqipCAchwGCmX3tl
9lebpMPENRZ/rYNrGyPybR+6Sz4LLFPcdk10t4oWMGyt7sOGQhvbEdkKZHEynoG5
ZYwysKe/3ZMQtylXk70NlDFHg2t4s8trucUZH07a/MdA5Ug5unf+oMkZHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLii9Egkb8PmwiorTyXUMTySxx97MB8GA1UdIwQY
MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt
NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1
LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEDL6n1l
SHu2/KJUb0c/67MYHfYn3xm/i6ygsw1tdU9lN6wZQL8m9X0xAbdt7KtROqBFCwo9
dx5yy7aza2zH/VQCmiURWGxv7jRbAyxyXnlxsHphLtbLmxIgUHImDogySIOriKJ/
CSelW8VLUr9GW8t6zSkbiiNHFcT6BjGaV2AYpcJ5ywlqVzeLO07f4MoqcMSqK7vp
uJN/0hnHumWydXeIxc3Vi5490h9FLXO66am8Terkswa1QAJf6O8kxKmdkZZJctGo
79coX4xDuGWSRqQWk8fsPHNvt/Y6g+KrCofpTtN/cjeWyodDbsl3PnFLhdJy33lf
+kUTlpIQse2SEw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:42 2025 by rpki-client