Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: lENhghmCb5K9fjW9i8h4tlFVqpvtQtYMyPaBBngFlbo=
Subject key identifier: 4F:D6:0B:CE:28:DD:44:7C:D0:A5:AE:36:91:31:27:1C:7B:23:86:43
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0197632782E10A3790BA7BAD13B86FEC0F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1390
Signing time: Thu 12 Jun 2025 08:00:23 +0000
Manifest this update: Thu 12 Jun 2025 08:00:23 +0000
Manifest next update: Fri 13 Jun 2025 08:00:23 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: MWlOaz89YHAfAe2UJdxmceElSGdANEkufDlxE2LD7/s=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:82:e1:0a:37:90:ba:7b:ad:13:b8:6f:ec:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 12 08:00:23 2025 GMT
Not After : Jun 13 08:00:23 2025 GMT
Subject: CN=4fd60bce28dd447cd0a5ae369131271c7b238643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:63:c5:39:09:bf:f4:07:27:7c:61:e3:6b:
94:62:8a:68:a3:21:9a:2e:df:1c:d3:fa:ab:a5:05:
b3:a8:fc:02:c1:16:40:6a:66:b0:ef:17:39:46:bd:
24:03:cf:19:74:74:80:b5:37:8a:36:5e:e3:6e:25:
7f:02:cb:a8:fc:e0:1a:23:e4:bd:6f:73:9d:cb:23:
2c:f1:1b:c0:f2:c8:df:60:4d:e8:2d:33:31:3d:4e:
19:14:c4:ec:3f:d2:28:41:63:75:35:22:74:26:48:
24:4c:31:40:da:e8:84:63:65:f1:07:ef:6e:65:a4:
6b:1c:06:ed:ee:48:09:85:c5:d9:2f:90:28:e9:b8:
00:e9:d2:2c:bb:77:12:a4:40:cb:68:3d:16:6b:ff:
60:67:ac:c1:ca:e0:c0:fb:11:d5:51:a3:db:c1:5c:
51:8f:db:f2:0d:81:85:df:69:98:4f:c6:6e:e2:16:
a4:8f:3f:50:ee:c0:ef:ef:67:7d:2d:23:87:3b:14:
b2:12:1c:c6:69:09:11:15:80:98:0d:76:7f:31:17:
9d:22:c8:ee:f1:b6:60:d6:68:b2:b3:f5:10:d6:78:
d3:33:63:c8:ab:3b:4e:27:f7:50:71:8f:32:42:09:
af:09:27:fb:7e:45:f2:e6:ed:1c:e4:e2:98:cb:6b:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:0B:CE:28:DD:44:7C:D0:A5:AE:36:91:31:27:1C:7B:23:86:43
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:a1:2c:94:30:92:aa:59:06:50:93:e7:73:ab:1a:19:63:2e:
25:c7:14:9e:da:e9:55:92:04:ae:82:b0:5b:4b:83:93:d3:87:
59:16:3b:24:c9:d5:dc:a4:04:96:15:7c:c2:32:9f:f7:24:27:
d1:d6:25:40:a4:58:f4:73:ad:31:43:00:85:24:db:e3:37:a0:
67:f7:ac:b6:56:be:3f:2b:c2:48:9c:58:0a:7d:44:cb:62:18:
67:61:7f:6a:ce:d7:d1:ea:88:57:cc:f5:83:73:b0:ae:dc:55:
36:12:6f:b5:db:20:0a:23:89:48:f2:30:b7:66:ec:7a:08:ca:
fe:09:54:05:0f:b7:1b:7c:d1:ea:7c:92:5d:61:d1:d6:e3:c8:
23:52:7c:5b:85:f3:f0:4c:58:9f:bd:f7:7b:e7:26:bc:aa:0f:
47:e2:c6:2e:f3:90:fa:04:cc:00:3d:ba:cd:af:35:84:7c:6d:
f9:53:b0:9f:8c:43:f2:4f:6c:1e:fd:15:ec:99:1e:0a:16:68:
77:8e:a4:43:69:36:0d:f5:f4:c7:d2:b4:60:c0:d7:ff:ae:30:
72:8d:5e:3e:28:e1:53:fa:ec:02:dc:4b:26:ce:33:80:fb:e8:
4e:f9:f5:b5:93:48:f8:49:ab:18:a0:13:e2:31:8a:d1:fe:57:
49:6a:da:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjJ4LhCjeQunutE7hv7A8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNmE3M2JlZDc1YWE0ZWZhNTc3ZWQ5MGFkMzU2MmUyMTk1
MWQxYjIwHhcNMjUwNjEyMDgwMDIzWhcNMjUwNjEzMDgwMDIzWjAzMTEwLwYDVQQD
Eyg0ZmQ2MGJjZTI4ZGQ0NDdjZDBhNWFlMzY5MTMxMjcxYzdiMjM4NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApghjxTkJv/QHJ3xh42uUYopooyGa
Lt8c0/qrpQWzqPwCwRZAamaw7xc5Rr0kA88ZdHSAtTeKNl7jbiV/Asuo/OAaI+S9
b3OdyyMs8RvA8sjfYE3oLTMxPU4ZFMTsP9IoQWN1NSJ0JkgkTDFA2uiEY2XxB+9u
ZaRrHAbt7kgJhcXZL5Ao6bgA6dIsu3cSpEDLaD0Wa/9gZ6zByuDA+xHVUaPbwVxR
j9vyDYGF32mYT8Zu4hakjz9Q7sDv72d9LSOHOxSyEhzGaQkRFYCYDXZ/MRedIsju
8bZg1miys/UQ1njTM2PIqztOJ/dQcY8yQgmvCSf7fkXy5u0c5OKYy2uvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/WC84o3UR80KWuNpExJxx7I4ZDMB8GA1UdIwQY
MBaAFINqc77XWqTvpXftkK01YuIZUdGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3Mjct
YjFhY2Q3NTAxOGMzLzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3MjctYjFhY2Q3NTAxOGMz
LzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA26EslDCS
qlkGUJPnc6saGWMuJccUntrpVZIEroKwW0uDk9OHWRY7JMnV3KQElhV8wjKf9yQn
0dYlQKRY9HOtMUMAhSTb4zegZ/estla+PyvCSJxYCn1Ey2IYZ2F/as7X0eqIV8z1
g3OwrtxVNhJvtdsgCiOJSPIwt2bsegjK/glUBQ+3G3zR6nySXWHR1uPII1J8W4Xz
8ExYn733e+cmvKoPR+LGLvOQ+gTMAD26za81hHxt+VOwn4xD8k9sHv0V7JkeChZo
d46kQ2k2DfX0x9K0YMDX/64wco1ePijhU/rsAtxLJs4zgPvoTvn1tZNI+EmrGKAT
4jGK0f5XSWranw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:06:47 2025 by rpki-client