Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier: YHgSYYPVGWgTGuIR1oCHgmiNDzfihvngK6PMU74+thw=
Subject key identifier: 9A:E2:FE:43:A9:99:64:82:76:95:0E:D2:EF:13:8F:CB:A8:93:46:E4
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 019748C34D8FAB567C11D786A127DEDC4890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number: 0DFB
Signing time: Sat 07 Jun 2025 05:00:48 +0000
Manifest this update: Sat 07 Jun 2025 05:00:48 +0000
Manifest next update: Sun 08 Jun 2025 05:00:48 +0000
Files and hashes: 1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: Fl7AbiuzCJ0Cl01LRYKsN4Tq3axDa8/H6+v/W0KhrLc=)
2: eiMs1L-2oXZyMFT4lsivxnF_7rI.roa (hash: 0CKxvXKh07lSdtj09xAAc1IiwY6cm22Ml7wMgfzveTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4d:8f:ab:56:7c:11:d7:86:a1:27:de:dc:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Jun 7 05:00:48 2025 GMT
Not After : Jun 8 05:00:48 2025 GMT
Subject: CN=9ae2fe43a999648276950ed2ef138fcba89346e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:e4:38:f2:cf:21:4b:13:c6:34:fc:71:09:
15:15:e1:de:be:26:39:6a:75:e4:74:11:67:71:17:
d1:52:f7:54:82:44:99:ad:81:d8:ac:1c:d9:4e:f4:
75:59:30:a5:66:99:8e:8c:29:4a:a3:66:5d:18:e3:
f0:93:1b:3e:84:b8:af:2a:b8:c1:6f:05:db:c1:f3:
2f:f8:96:fa:67:04:4c:57:0a:cf:e2:48:a9:4a:15:
1e:d8:33:30:d1:94:d3:0d:55:2e:f7:5b:8e:fc:50:
d5:9e:33:fc:dc:74:8a:2c:27:59:e0:0c:be:10:15:
69:1d:33:05:c2:79:67:e5:31:f2:63:53:35:53:52:
c8:7f:2f:6e:08:ff:46:a4:ad:b6:ee:cb:c8:10:a3:
10:42:f9:b2:6a:51:07:a4:79:65:ed:79:2a:cc:49:
90:82:a8:b7:64:16:ab:45:f9:16:a8:18:61:5e:7d:
e5:14:d4:c6:4e:2b:d0:e7:24:a9:e0:05:be:80:fa:
82:65:70:84:ac:9f:1f:c3:09:e1:6b:bf:78:54:fe:
6c:14:d8:43:fc:d8:e0:a6:81:ce:70:22:a1:c5:e1:
4a:fa:38:03:36:4e:57:df:40:a6:0b:e6:ff:c0:0a:
01:8c:91:87:14:a7:cb:6a:43:9c:e9:9c:c7:84:9d:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:FE:43:A9:99:64:82:76:95:0E:D2:EF:13:8F:CB:A8:93:46:E4
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fc:24:19:35:23:c3:62:8d:58:60:79:f0:38:b2:eb:90:d9:
cf:52:0a:75:dd:4e:e8:00:27:f9:f1:28:8b:81:cb:a7:c2:2e:
bd:84:19:63:0e:00:14:02:0b:f4:bf:74:33:cc:01:3d:0b:55:
d2:e0:ba:eb:f8:46:03:38:96:1c:ae:78:6d:7e:64:1e:18:39:
db:68:be:67:5a:20:d6:00:75:c9:73:b0:5e:2f:19:3d:00:c4:
5c:99:af:b5:47:0b:df:aa:41:e2:21:45:35:0b:1a:8e:b0:58:
46:a7:75:35:f4:51:79:69:d8:23:4d:e6:77:53:91:79:fe:a8:
62:f5:6e:05:6d:d6:b4:f3:3f:70:9f:3e:d9:a4:7f:7f:86:12:
7b:3e:31:e3:b2:c7:d2:f6:07:f5:9d:4a:ff:0a:ae:09:7f:ec:
29:68:b4:c2:68:74:ff:61:09:25:06:36:29:37:63:01:3c:cb:
f6:64:c2:1b:93:f5:b0:2a:8a:f9:a2:25:b2:a1:3f:8b:76:a6:
09:f4:24:02:bc:ea:7c:c8:48:7a:9e:63:26:a5:5e:92:17:df:
13:42:44:4c:29:0b:62:7e:0a:88:9e:8b:8b:78:f6:e4:23:0a:
54:0e:17:ee:78:93:27:1e:20:d7:62:44:64:1d:93:37:91:b5:
b1:63:10:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw02Pq1Z8EdeGoSfe3EiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDY0OTE4OGFhYTQzOWQ4NTExZjcwZWJlODJiYTVlNzY2
Yzg1ZDIwHhcNMjUwNjA3MDUwMDQ4WhcNMjUwNjA4MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg5YWUyZmU0M2E5OTk2NDgyNzY5NTBlZDJlZjEzOGZjYmE4OTM0NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDbkOPLPIUsTxjT8cQkVFeHeviY5
anXkdBFncRfRUvdUgkSZrYHYrBzZTvR1WTClZpmOjClKo2ZdGOPwkxs+hLivKrjB
bwXbwfMv+Jb6ZwRMVwrP4kipShUe2DMw0ZTTDVUu91uO/FDVnjP83HSKLCdZ4Ay+
EBVpHTMFwnln5THyY1M1U1LIfy9uCP9GpK227svIEKMQQvmyalEHpHll7XkqzEmQ
gqi3ZBarRfkWqBhhXn3lFNTGTivQ5ySp4AW+gPqCZXCErJ8fwwnha794VP5sFNhD
/NjgpoHOcCKhxeFK+jgDNk5X30CmC+b/wAoBjJGHFKfLakOc6ZzHhJ34OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJri/kOpmWSCdpUO0u8Tj8uok0bkMB8GA1UdIwQY
MBaAFNnWSRiKqkOdhRH3Dr6Cul52bIXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMt
MWNjNmEzMWIxNGJmLzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMtMWNjNmEzMWIxNGJm
LzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfwkGTUj
w2KNWGB58Diy65DZz1IKdd1O6AAn+fEoi4HLp8IuvYQZYw4AFAIL9L90M8wBPQtV
0uC66/hGAziWHK54bX5kHhg522i+Z1og1gB1yXOwXi8ZPQDEXJmvtUcL36pB4iFF
NQsajrBYRqd1NfRReWnYI03md1ORef6oYvVuBW3WtPM/cJ8+2aR/f4YSez4x47LH
0vYH9Z1K/wquCX/sKWi0wmh0/2EJJQY2KTdjATzL9mTCG5P1sCqK+aIlsqE/i3am
CfQkArzqfMhIep5jJqVekhffE0JETCkLYn4KiJ6Li3j25CMKVA4X7niTJx4g12JE
ZB2TN5G1sWMQbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:09 2025 by rpki-client