Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: JGWPxlOf7E3ut0VEzgcQRLvntbSedJDK4T8XS3x9JSo=
Subject key identifier: 00:BB:98:6C:1F:09:8B:4C:89:C1:9E:5F:A4:23:A5:70:E6:38:1F:CC
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 01974E57CB149D0FAC18FD058151D7861673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:01:05 +0000
Manifest this update: Sun 08 Jun 2025 07:01:05 +0000
Manifest next update: Mon 09 Jun 2025 07:01:05 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: 3Ia4VO/u+pe/J0V3pnI9N3dWj4sJnPhgNsYsbhohIwQ=)
2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:cb:14:9d:0f:ac:18:fd:05:81:51:d7:86:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Jun 8 07:01:05 2025 GMT
Not After : Jun 9 07:01:05 2025 GMT
Subject: CN=00bb986c1f098b4c89c19e5fa423a570e6381fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:95:2b:d9:bd:b8:9a:b6:7f:cb:fc:56:2b:
9c:67:7e:93:47:04:15:52:d2:7b:99:bd:25:a7:f5:
44:f0:49:89:af:c0:a8:a4:7a:63:cb:62:65:23:65:
bd:3a:12:1c:2a:9a:3d:45:66:bf:f7:04:4d:15:86:
02:ef:6d:79:f5:5c:52:d0:2e:92:f9:f8:43:e3:b5:
3a:05:d0:c2:d6:0e:9d:4d:dd:13:a7:5c:e1:df:16:
3c:54:7f:4d:b4:ef:b9:66:82:48:96:f0:d9:f3:1c:
4c:49:4b:8a:2d:7c:23:da:22:15:56:fc:47:b8:f0:
8c:c6:3d:54:ab:a7:c1:bb:42:e1:19:c5:8f:f0:e2:
07:08:71:23:d3:04:2a:8c:1a:c4:7b:e5:90:78:a2:
32:71:4b:43:d4:06:5f:69:43:41:7b:c8:7a:c3:11:
02:3d:8e:a4:58:6c:3b:da:1b:ad:84:53:24:87:6d:
a8:ca:f3:8c:7f:14:31:17:0d:fc:fc:ab:3a:95:f6:
17:6a:48:34:94:34:22:a7:49:1c:44:03:9f:d2:10:
fa:b2:2d:9e:a2:58:58:3f:3b:f5:bc:43:6c:d3:a6:
88:ca:53:7d:64:b8:30:69:c0:cc:85:f9:1f:bf:f2:
dc:93:5f:08:b9:f5:3b:51:74:f2:72:f0:64:f7:52:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BB:98:6C:1F:09:8B:4C:89:C1:9E:5F:A4:23:A5:70:E6:38:1F:CC
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:0f:f4:49:f5:bc:aa:60:c8:1c:46:8c:de:34:f7:cc:91:
8a:9c:fe:18:08:8d:1b:66:c9:ec:8a:b4:d9:8a:6e:c1:ec:dd:
d0:74:5a:c1:88:a0:6e:b2:a0:11:70:57:40:3b:eb:c0:11:ab:
a3:d3:b7:ad:de:ba:3f:c6:89:18:53:fc:3c:b0:2f:a9:41:c9:
65:a6:20:a5:55:d9:66:82:9e:6e:8c:90:58:1f:18:28:08:c0:
ea:9b:d6:b0:74:27:20:5d:76:24:f7:e7:39:46:35:db:d0:6d:
5f:11:2c:16:4e:af:56:c6:2f:af:0b:c5:ba:0e:2c:7c:6f:f1:
fa:05:f4:0f:53:5a:20:11:30:2d:86:08:c3:60:81:ee:f8:d0:
aa:55:05:d5:3f:06:84:81:06:9b:91:77:81:3a:c2:04:27:35:
c9:ab:5f:df:0f:bc:d8:15:50:a9:cd:b9:5d:2b:1a:9a:ec:ee:
f0:30:50:5e:40:e3:a8:df:53:1d:de:64:e7:86:4e:7e:95:21:
b4:86:50:12:02:be:f4:26:f6:0b:40:1b:34:80:21:b3:b5:99:
2b:03:a2:65:30:3a:26:f5:6f:28:eb:7a:60:4c:8f:9c:ee:cf:
2f:b6:9c:48:04:aa:d1:c5:49:2e:dc:95:63:37:c8:81:9f:25:
73:33:74:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV8sUnQ+sGP0FgVHXhhZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh
MzRiM2MwHhcNMjUwNjA4MDcwMTA1WhcNMjUwNjA5MDcwMTA1WjAzMTEwLwYDVQQD
EygwMGJiOTg2YzFmMDk4YjRjODljMTllNWZhNDIzYTU3MGU2MzgxZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQOVK9m9uJq2f8v8ViucZ36TRwQV
UtJ7mb0lp/VE8EmJr8CopHpjy2JlI2W9OhIcKpo9RWa/9wRNFYYC72159VxS0C6S
+fhD47U6BdDC1g6dTd0Tp1zh3xY8VH9NtO+5ZoJIlvDZ8xxMSUuKLXwj2iIVVvxH
uPCMxj1Uq6fBu0LhGcWP8OIHCHEj0wQqjBrEe+WQeKIycUtD1AZfaUNBe8h6wxEC
PY6kWGw72huthFMkh22oyvOMfxQxFw38/Ks6lfYXakg0lDQip0kcRAOf0hD6si2e
olhYPzv1vENs06aIylN9ZLgwacDMhfkfv/Lck18IufU7UXTycvBk91JJoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAC7mGwfCYtMicGeX6QjpXDmOB/MMB8GA1UdIwQY
MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt
MjM4ZTBiN2FlMjg0LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0
LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftMP9En1
vKpgyBxGjN4098yRipz+GAiNG2bJ7Iq02Ypuwezd0HRawYigbrKgEXBXQDvrwBGr
o9O3rd66P8aJGFP8PLAvqUHJZaYgpVXZZoKeboyQWB8YKAjA6pvWsHQnIF12JPfn
OUY129BtXxEsFk6vVsYvrwvFug4sfG/x+gX0D1NaIBEwLYYIw2CB7vjQqlUF1T8G
hIEGm5F3gTrCBCc1yatf3w+82BVQqc25XSsamuzu8DBQXkDjqN9THd5k54ZOfpUh
tIZQEgK+9Cb2C0AbNIAhs7WZKwOiZTA6JvVvKOt6YEyPnO7PL7acSASq0cVJLtyV
YzfIgZ8lczN0xA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:12 2025 by rpki-client