Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: JHoPyCi9a5DQO/4STmLTsKXORY9BAUzrZw2JXXP8YgA=
Subject key identifier: F2:23:10:5A:85:7D:AC:97:EA:F8:DD:DF:76:25:33:43:56:00:76:7E
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 019748C3732F5D09C30E72C9BEFA210BDF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 052B
Signing time: Sat 07 Jun 2025 05:00:57 +0000
Manifest this update: Sat 07 Jun 2025 05:00:57 +0000
Manifest next update: Sun 08 Jun 2025 05:00:57 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: 5epSlMTSDqwOqK7ATRd9+NjTYR2TnDeL4r5mkv2N/BE=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:73:2f:5d:09:c3:0e:72:c9:be:fa:21:0b:df:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jun 7 05:00:57 2025 GMT
Not After : Jun 8 05:00:57 2025 GMT
Subject: CN=f223105a857dac97eaf8dddf762533435600767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:17:dd:af:3c:3d:c0:14:8a:01:13:5a:4a:
09:ed:39:83:4d:80:d7:30:a7:ca:3d:73:aa:e9:09:
6b:88:4f:8f:4d:69:6a:4b:f3:db:89:02:4e:e9:33:
2f:d1:19:ff:f7:0b:9f:02:1b:56:59:09:02:4d:77:
4f:3d:91:c9:27:36:7e:a3:16:ed:a1:de:3a:40:d0:
3c:8e:92:42:8a:be:80:00:71:6b:20:e5:8a:50:d8:
39:8a:ea:96:84:14:e7:60:d0:1b:db:81:03:ad:59:
cb:13:25:b6:b0:3d:2b:2f:26:73:e4:56:39:a0:2b:
fb:01:c5:1f:a5:3f:c2:da:d8:93:f4:4e:b2:99:01:
c9:b1:d6:87:64:66:2e:47:23:e5:60:39:54:c7:89:
a4:ec:f1:8d:68:5b:e8:fd:c1:76:58:31:62:9b:4a:
b6:dc:19:92:30:6c:b8:8e:aa:24:f0:38:ba:ab:a4:
c0:85:b5:82:1c:77:bd:43:49:72:51:15:d1:0a:c9:
bc:1c:2c:2b:8c:9c:94:e2:83:b4:bb:21:5f:d4:9f:
24:31:3f:cd:d8:0b:44:3f:b6:b0:da:a9:3b:cb:44:
ef:93:f7:3f:38:38:47:d1:5e:41:79:46:cd:76:67:
a6:db:40:a9:f3:90:1c:a9:05:f3:4a:6d:55:4d:9e:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:10:5A:85:7D:AC:97:EA:F8:DD:DF:76:25:33:43:56:00:76:7E
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:66:18:e0:f8:7c:52:8f:b6:23:b8:15:62:90:27:d1:51:2c:
30:30:16:2d:c6:82:71:1d:5c:7c:d6:88:44:19:7b:09:fd:eb:
ca:51:4d:77:92:f2:39:d1:75:7a:2e:7b:ec:e6:25:5c:f3:17:
0c:84:43:20:bc:3d:67:4b:c4:58:52:21:b1:37:9c:00:d0:b9:
00:25:e2:d1:67:ed:da:fb:a5:46:15:b4:6b:b7:9e:08:e3:4f:
59:9f:e4:0e:01:85:89:f3:27:47:76:52:20:f6:6e:a0:df:03:
95:94:3f:87:69:d6:58:ff:f7:a9:d1:19:d2:8a:76:b6:33:b0:
12:c3:1f:b3:dd:f9:5f:41:17:ca:e5:f7:4b:b7:e8:96:3d:3a:
91:9b:46:2f:07:1f:ae:10:d9:6d:71:ba:0c:a1:eb:49:f8:e5:
10:e6:13:53:90:00:82:2b:d1:fc:cc:95:db:09:24:d0:7c:e3:
fc:e0:0a:8b:24:1f:1f:9b:38:67:51:6d:55:d1:38:37:2b:c0:
99:38:56:2a:41:b8:32:9b:55:4b:96:df:2b:fd:a6:4f:33:e7:
08:57:23:eb:31:73:25:1b:43:ac:75:f7:93:cd:b8:4e:c4:e9:
06:83:ed:72:a2:63:4a:62:ce:6d:66:47:3a:cd:ba:38:75:95:
d9:c7:2e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw3MvXQnDDnLJvvohC98QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjUwNjA3MDUwMDU3WhcNMjUwNjA4MDUwMDU3WjAzMTEwLwYDVQQD
EyhmMjIzMTA1YTg1N2RhYzk3ZWFmOGRkZGY3NjI1MzM0MzU2MDA3NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunIX3a88PcAUigETWkoJ7TmDTYDX
MKfKPXOq6QlriE+PTWlqS/PbiQJO6TMv0Rn/9wufAhtWWQkCTXdPPZHJJzZ+oxbt
od46QNA8jpJCir6AAHFrIOWKUNg5iuqWhBTnYNAb24EDrVnLEyW2sD0rLyZz5FY5
oCv7AcUfpT/C2tiT9E6ymQHJsdaHZGYuRyPlYDlUx4mk7PGNaFvo/cF2WDFim0q2
3BmSMGy4jqok8Di6q6TAhbWCHHe9Q0lyURXRCsm8HCwrjJyU4oO0uyFf1J8kMT/N
2AtEP7aw2qk7y0Tvk/c/ODhH0V5BeUbNdmem20Cp85AcqQXzSm1VTZ7tCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIjEFqFfayX6vjd33YlM0NWAHZ+MB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmYY4Ph8
Uo+2I7gVYpAn0VEsMDAWLcaCcR1cfNaIRBl7Cf3rylFNd5LyOdF1ei577OYlXPMX
DIRDILw9Z0vEWFIhsTecANC5ACXi0Wft2vulRhW0a7eeCONPWZ/kDgGFifMnR3ZS
IPZuoN8DlZQ/h2nWWP/3qdEZ0op2tjOwEsMfs935X0EXyuX3S7folj06kZtGLwcf
rhDZbXG6DKHrSfjlEOYTU5AAgivR/MyV2wkk0Hzj/OAKiyQfH5s4Z1FtVdE4NyvA
mThWKkG4MptVS5bfK/2mTzPnCFcj6zFzJRtDrHX3k824TsTpBoPtcqJjSmLObWZH
Os26OHWV2ccu0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:07 2025 by rpki-client