Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: mgCSx7+5j/lx7PawVZgE7MF9Vo9Y3KXs3R4b7AzREBM=
Subject key identifier: 89:08:17:72:98:BA:B9:A7:D3:EC:0C:B2:E6:90:70:91:59:8E:EE:14
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 01974BC3F145FF403677739A57CEF8EAA124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 19:00:21 +0000
Manifest this update: Sat 07 Jun 2025 19:00:21 +0000
Manifest next update: Sun 08 Jun 2025 19:00:21 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: jtSsJibVOOYveJJOx5NwSNS9QbaZhI/BSgyc4Hjn0hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f1:45:ff:40:36:77:73:9a:57:ce:f8:ea:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Jun 7 19:00:21 2025 GMT
Not After : Jun 8 19:00:21 2025 GMT
Subject: CN=8908177298bab9a7d3ec0cb2e6907091598eee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:ec:50:ba:ed:85:75:c0:02:4c:79:67:17:
ea:b6:d8:d8:6d:6e:7a:da:67:6c:8c:2b:79:8a:02:
33:ab:b0:b8:9c:95:bf:a1:e5:0e:18:a9:9e:a9:4e:
3a:2a:a1:ed:b2:51:00:ee:6a:10:03:a3:92:17:8e:
ee:6e:f9:b1:5b:d5:db:c5:92:98:d7:9a:00:c2:0a:
fe:7f:6e:27:1a:32:f5:1c:32:8e:c3:37:79:c8:cd:
9f:8c:64:79:4b:5a:15:d7:f7:67:40:b3:8b:96:25:
68:ba:b9:ff:e9:3a:b9:bf:5b:fc:c6:99:28:4a:79:
16:64:53:82:bb:9e:25:25:db:91:e6:61:66:00:3a:
5f:1d:6d:38:7d:d9:31:c2:70:9c:cd:ac:ba:a5:e4:
cc:47:5d:0b:34:31:92:55:bb:f2:3a:48:2f:41:52:
01:a3:2d:9d:2e:20:26:d7:7c:87:19:a3:e9:cd:f2:
20:68:07:73:e2:be:8a:21:2a:5f:6e:a7:8b:e3:a4:
9d:4e:67:4f:81:b4:8c:bd:0f:6a:eb:07:53:5f:8d:
e8:b2:ed:76:da:05:82:c0:7c:2d:ef:07:e4:f9:60:
77:25:38:89:c3:5d:05:72:ab:c9:77:1a:0b:24:88:
4b:e1:0e:bf:fe:3e:61:5f:e2:34:f5:a9:4d:99:5d:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:17:72:98:BA:B9:A7:D3:EC:0C:B2:E6:90:70:91:59:8E:EE:14
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ac:89:60:fc:45:86:31:6b:f0:ce:d3:16:e7:1b:45:a7:f1:
67:fe:4b:13:6f:b9:4e:60:55:64:81:f9:15:1e:77:ba:74:22:
aa:36:8a:4a:14:0a:37:d4:e8:68:dc:32:f6:d1:da:f6:f3:ed:
21:67:69:18:9c:e9:52:fe:91:e4:74:2b:9b:90:9a:a0:9d:ab:
a3:d4:21:f7:e4:68:cd:02:f0:f4:f2:eb:d6:88:af:1c:e9:43:
e7:07:b9:09:84:88:31:5c:8b:66:2f:b0:f7:39:ce:fc:fa:3c:
fa:9c:7c:62:8b:ec:22:07:be:89:f5:cc:37:54:21:84:ad:00:
4c:05:84:bc:a9:3f:e9:ad:ac:37:04:be:cb:2a:ac:4f:94:21:
3d:bb:a2:67:8a:e3:98:6f:45:89:1a:83:8a:d6:fa:04:c6:d2:
e4:47:31:48:8d:e0:d2:1c:0b:41:f7:8e:f9:f4:bb:87:49:65:
6e:37:67:a5:8e:88:15:52:d6:85:56:75:28:01:f9:37:ec:34:
48:38:14:5e:dc:72:3a:60:ef:93:8a:29:e5:8d:48:69:56:9c:
55:7e:eb:48:1b:40:4d:30:d1:58:62:5e:67:6c:51:23:ff:eb:
0c:9f:fc:24:e5:1c:e7:bb:e9:4d:40:1c:74:99:e0:e7:3a:ba:
b9:ba:4d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLw/FF/0A2d3OaV8746qEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTkxOWZiNTFhNzA1MTExZDY5OTZlZWMzMGZmYzQ0MmRl
OTdhMmYwHhcNMjUwNjA3MTkwMDIxWhcNMjUwNjA4MTkwMDIxWjAzMTEwLwYDVQQD
Eyg4OTA4MTc3Mjk4YmFiOWE3ZDNlYzBjYjJlNjkwNzA5MTU5OGVlZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jrsULrthXXAAkx5ZxfqttjYbW56
2mdsjCt5igIzq7C4nJW/oeUOGKmeqU46KqHtslEA7moQA6OSF47ubvmxW9XbxZKY
15oAwgr+f24nGjL1HDKOwzd5yM2fjGR5S1oV1/dnQLOLliVourn/6Tq5v1v8xpko
SnkWZFOCu54lJduR5mFmADpfHW04fdkxwnCczay6peTMR10LNDGSVbvyOkgvQVIB
oy2dLiAm13yHGaPpzfIgaAdz4r6KISpfbqeL46SdTmdPgbSMvQ9q6wdTX43osu12
2gWCwHwt7wfk+WB3JTiJw10FcqvJdxoLJIhL4Q6//j5hX+I09alNmV1oZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkIF3KYurmn0+wMsuaQcJFZju4UMB8GA1UdIwQY
MBaAFNiZGftRpwURHWmW7sMP/EQt6XovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgt
N2Q4YjFjOTFlYzdiLzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgtN2Q4YjFjOTFlYzdi
LzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzayJYPxF
hjFr8M7TFucbRafxZ/5LE2+5TmBVZIH5FR53unQiqjaKShQKN9ToaNwy9tHa9vPt
IWdpGJzpUv6R5HQrm5CaoJ2ro9Qh9+RozQLw9PLr1oivHOlD5we5CYSIMVyLZi+w
9znO/Po8+px8YovsIge+ifXMN1QhhK0ATAWEvKk/6a2sNwS+yyqsT5QhPbuiZ4rj
mG9FiRqDitb6BMbS5EcxSI3g0hwLQfeO+fS7h0llbjdnpY6IFVLWhVZ1KAH5N+w0
SDgUXtxyOmDvk4op5Y1IaVacVX7rSBtATTDRWGJeZ2xRI//rDJ/8JOUc57vpTUAc
dJng5zq6ubpNNA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:18 2025 by rpki-client