Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: VLlpt8ZRyl6zDKZhLt6dmFJslQVoNOeH00KZRVkimjo=
Subject key identifier: 42:2F:34:54:1E:24:AD:E4:E6:68:F6:8B:EC:36:B8:AA:5E:84:34:82
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01973BACA5D634B3A73546E5C9D0E9DDCCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 12E0
Signing time: Wed 04 Jun 2025 16:00:59 +0000
Manifest this update: Wed 04 Jun 2025 16:00:59 +0000
Manifest next update: Thu 05 Jun 2025 16:00:59 +0000
Files and hashes: 1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: TWrh5XEcfqpO2+k6ijhOdBQ/yCfDE6lhjuieVrGe0s4=)
3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:ac:a5:d6:34:b3:a7:35:46:e5:c9:d0:e9:dd:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jun 4 16:00:59 2025 GMT
Not After : Jun 5 16:00:59 2025 GMT
Subject: CN=422f34541e24ade4e668f68bec36b8aa5e843482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:25:98:6b:5c:b3:bb:9d:fe:e9:3c:72:e5:
64:1e:05:d5:a3:64:3f:26:59:c4:08:71:aa:60:b7:
b8:63:14:6c:e7:ef:15:b8:a5:fe:3e:a7:1a:01:e2:
3e:19:1f:4b:48:09:27:11:42:3d:f0:e8:a5:1f:e0:
bc:d5:f5:ae:87:b7:c9:7a:23:b9:31:df:5b:fe:e4:
2a:b4:02:2e:9d:ed:f4:f8:5f:e6:6c:17:d9:f5:93:
57:1a:a4:a1:5f:a1:6a:2e:f6:2c:d7:47:0c:b5:6e:
46:73:c2:7b:8e:1f:9c:93:39:32:6d:c8:7f:bf:e2:
8d:a4:af:f7:2d:e1:52:10:89:85:52:6a:f3:1b:26:
d5:47:ae:e8:8b:73:32:6e:7e:54:91:23:49:0b:f9:
ec:78:b5:a6:be:aa:b7:e5:5a:ae:d6:86:99:71:5c:
10:66:43:c5:77:0f:f1:da:de:7f:bd:2c:e2:56:30:
cf:a1:1c:e2:59:35:94:77:ad:41:b6:cf:22:43:20:
67:24:9c:ad:0b:ac:58:4e:94:0f:91:27:9f:e8:d1:
da:90:c0:60:43:aa:4a:e9:25:35:95:fc:93:5a:3d:
93:75:99:e6:05:65:bb:de:37:e4:06:d5:3d:90:42:
73:84:69:67:19:59:c5:a3:c1:97:49:f1:6a:82:e4:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:34:54:1E:24:AD:E4:E6:68:F6:8B:EC:36:B8:AA:5E:84:34:82
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:0a:2b:1b:bd:77:55:18:cd:ad:f6:3a:25:b0:9d:6f:8a:
74:6a:e0:c6:a3:85:86:b2:4a:25:d8:d7:38:88:80:6a:e6:84:
f0:37:45:5e:fa:16:e6:4c:37:dc:d7:87:35:fe:ed:53:42:99:
3b:fd:c6:c5:bf:d3:a9:49:89:9e:09:0f:e6:74:c1:fc:22:88:
5e:47:66:c8:8e:ea:a2:ae:74:0f:83:08:9d:30:24:c5:df:99:
3a:72:0c:7b:e4:f4:bc:16:50:58:8d:80:26:ba:07:b4:83:82:
6e:ee:06:de:78:1b:76:bd:07:98:17:e9:7c:d7:67:a8:84:6b:
e2:07:26:e8:57:e5:59:8e:7f:5f:2f:78:96:1e:10:33:fe:f2:
8e:16:70:e3:7d:93:f1:fb:d3:66:89:4b:f9:7e:b8:6b:92:42:
76:44:a2:9f:72:91:54:eb:ec:db:77:03:2d:56:a2:79:da:28:
c1:42:55:65:e8:96:db:50:8c:04:aa:9a:bd:7d:6c:da:80:9f:
e3:5d:33:a7:c0:52:96:44:25:f2:c7:fe:bb:71:a0:6e:84:22:
20:e4:11:40:53:96:e4:42:79:b1:df:c7:56:87:3f:89:a4:75:
71:6c:44:4d:fb:1b:17:c6:07:0d:6c:bf:f8:9f:30:c5:c2:68:
ec:d5:4d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc7rKXWNLOnNUblydDp3cz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjUwNjA0MTYwMDU5WhcNMjUwNjA1MTYwMDU5WjAzMTEwLwYDVQQD
Eyg0MjJmMzQ1NDFlMjRhZGU0ZTY2OGY2OGJlYzM2YjhhYTVlODQzNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wIlmGtcs7ud/uk8cuVkHgXVo2Q/
JlnECHGqYLe4YxRs5+8VuKX+PqcaAeI+GR9LSAknEUI98OilH+C81fWuh7fJeiO5
Md9b/uQqtAIune30+F/mbBfZ9ZNXGqShX6FqLvYs10cMtW5Gc8J7jh+ckzkybch/
v+KNpK/3LeFSEImFUmrzGybVR67oi3Mybn5UkSNJC/nseLWmvqq35Vqu1oaZcVwQ
ZkPFdw/x2t5/vSziVjDPoRziWTWUd61Bts8iQyBnJJytC6xYTpQPkSef6NHakMBg
Q6pK6SU1lfyTWj2TdZnmBWW73jfkBtU9kEJzhGlnGVnFo8GXSfFqguQ8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIvNFQeJK3k5mj2i+w2uKpehDSCMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv0KKxu9
d1UYza32OiWwnW+KdGrgxqOFhrJKJdjXOIiAauaE8DdFXvoW5kw33NeHNf7tU0KZ
O/3Gxb/TqUmJngkP5nTB/CKIXkdmyI7qoq50D4MInTAkxd+ZOnIMe+T0vBZQWI2A
JroHtIOCbu4G3ngbdr0HmBfpfNdnqIRr4gcm6FflWY5/Xy94lh4QM/7yjhZw432T
8fvTZolL+X64a5JCdkSin3KRVOvs23cDLVaiedoowUJVZeiW21CMBKqavX1s2oCf
410zp8BSlkQl8sf+u3GgboQiIOQRQFOW5EJ5sd/HVoc/iaR1cWxETfsbF8YHDWy/
+J8wxcJo7NVNNw==
-----END CERTIFICATE-----
Generated at Thu Jun 5 02:05:44 2025 by rpki-client