Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: KQkhJ3cY2zzGHmz+eLpyhSDClGXzaY3I+LuyEmRlcAs=
Subject key identifier: 94:75:BA:0A:50:A5:4C:5F:11:71:6E:3B:66:FE:99:09:BE:D9:0C:52
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 0197481E8DCB5CEEDCA4AF71B4B8571735FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0C63
Signing time: Sat 07 Jun 2025 02:00:51 +0000
Manifest this update: Sat 07 Jun 2025 02:00:51 +0000
Manifest next update: Sun 08 Jun 2025 02:00:51 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: faz0A8ikh+L2FmHzctPetkvPnm48guR8EXsynbpYpQE=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:8d:cb:5c:ee:dc:a4:af:71:b4:b8:57:17:35:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Jun 7 02:00:51 2025 GMT
Not After : Jun 8 02:00:51 2025 GMT
Subject: CN=9475ba0a50a54c5f11716e3b66fe9909bed90c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:a4:d2:bc:6b:f3:72:a5:4d:2e:77:85:c7:
e7:08:2a:fd:26:f2:6d:56:20:2d:52:0a:05:9a:ed:
6e:d4:54:c2:15:f3:2a:4c:87:7a:e0:dc:51:6f:41:
91:f1:03:cb:31:7e:cf:12:db:90:5f:c8:0c:55:9b:
5a:a1:b5:a2:7f:c8:86:62:53:89:c9:cc:02:67:e6:
67:dc:9d:27:99:27:3e:b1:b1:28:7c:70:ae:be:e3:
b8:98:37:8a:da:10:f4:1d:54:8e:51:79:0b:12:5f:
86:12:ae:5c:9f:d9:ec:f9:09:ba:1c:50:96:f2:b2:
98:f8:2a:58:a1:5f:18:10:a1:94:63:3a:89:da:67:
d0:df:ee:10:9a:ed:a0:1e:d0:db:f7:54:b7:38:7e:
71:63:e0:f9:fa:8b:d2:44:4f:cd:17:49:5f:fa:11:
20:55:ed:af:45:42:27:5b:9f:25:60:60:c9:9b:3e:
25:a8:93:cf:dd:d0:83:ba:59:8f:35:75:ee:df:c1:
d9:b2:7c:ad:e1:92:63:73:0e:82:65:a2:90:2f:7d:
74:69:9b:c4:1e:87:cb:09:b5:35:73:ed:de:f0:9d:
e1:9e:60:f7:0d:39:21:7a:6a:9c:d8:d5:84:4f:c2:
78:0b:8d:f8:f4:19:47:61:86:4c:da:9c:84:b7:fb:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:BA:0A:50:A5:4C:5F:11:71:6E:3B:66:FE:99:09:BE:D9:0C:52
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:c1:2a:c0:6b:e7:5b:d5:78:8b:3c:f0:d2:88:b5:9d:6d:
08:4a:65:c7:78:80:18:d2:f6:64:de:e7:29:90:a4:75:aa:bc:
2e:7e:a2:97:40:4b:2d:88:ea:ec:7a:3c:55:44:2f:fc:cf:88:
53:4d:de:a0:c0:31:1a:03:36:71:bd:4e:dd:e8:0c:12:06:72:
55:59:6e:7a:04:b3:44:fd:5b:5b:ab:49:e3:83:4b:48:40:fe:
50:46:b8:4a:e1:cd:1c:c9:7e:13:2a:d4:2f:91:73:e6:bb:f0:
58:91:18:a3:39:5c:ef:b6:0d:79:84:5e:5e:f8:7f:e9:fd:a3:
63:6c:16:5b:60:5e:8e:ae:c5:1c:0f:00:6c:25:93:3b:60:f5:
8a:12:8b:6d:86:7c:91:e5:da:48:69:4d:13:36:2a:1b:90:67:
ec:f7:1a:7f:eb:87:b8:86:7a:09:ab:d6:ff:57:88:76:b1:2a:
de:21:6c:c0:3b:56:1b:b1:00:c5:06:7a:5c:71:a2:0b:91:04:
c1:39:8f:4c:f3:f5:37:e5:b7:40:e2:d2:99:37:4f:d4:0f:02:
ea:29:59:5c:e2:54:2f:45:0f:21:89:c4:c7:fd:b6:8a:a2:78:
96:5b:f2:95:98:93:3c:79:28:d1:74:52:a8:b7:f1:02:59:c2:
ef:46:a8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHo3LXO7cpK9xtLhXFzX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzcxMjA5Mzc1MDBlYjQ2Njk2NDI4OTYyZTUxMGUwMmMz
NDhlNmMwHhcNMjUwNjA3MDIwMDUxWhcNMjUwNjA4MDIwMDUxWjAzMTEwLwYDVQQD
Eyg5NDc1YmEwYTUwYTU0YzVmMTE3MTZlM2I2NmZlOTkwOWJlZDkwYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSKk0rxr83KlTS53hcfnCCr9JvJt
ViAtUgoFmu1u1FTCFfMqTId64NxRb0GR8QPLMX7PEtuQX8gMVZtaobWif8iGYlOJ
ycwCZ+Zn3J0nmSc+sbEofHCuvuO4mDeK2hD0HVSOUXkLEl+GEq5cn9ns+Qm6HFCW
8rKY+CpYoV8YEKGUYzqJ2mfQ3+4Qmu2gHtDb91S3OH5xY+D5+ovSRE/NF0lf+hEg
Ve2vRUInW58lYGDJmz4lqJPP3dCDulmPNXXu38HZsnyt4ZJjcw6CZaKQL310aZvE
HofLCbU1c+3e8J3hnmD3DTkhemqc2NWET8J4C4349BlHYYZM2pyEt/tH0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR1ugpQpUxfEXFuO2b+mQm+2QxSMB8GA1UdIwQY
MBaAFNl3Egk3UA60ZpZCiWLlEOAsNI5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEt
ZGUzODFkYjQzNmVjLzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEtZGUzODFkYjQzNmVj
LzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5zBKsBr
51vVeIs88NKItZ1tCEplx3iAGNL2ZN7nKZCkdaq8Ln6il0BLLYjq7Ho8VUQv/M+I
U03eoMAxGgM2cb1O3egMEgZyVVluegSzRP1bW6tJ44NLSED+UEa4SuHNHMl+EyrU
L5Fz5rvwWJEYozlc77YNeYReXvh/6f2jY2wWW2Bejq7FHA8AbCWTO2D1ihKLbYZ8
keXaSGlNEzYqG5Bn7Pcaf+uHuIZ6CavW/1eIdrEq3iFswDtWG7EAxQZ6XHGiC5EE
wTmPTPP1N+W3QOLSmTdP1A8C6ilZXOJUL0UPIYnEx/22iqJ4llvylZiTPHko0XRS
qLfxAlnC70aoow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:30:24 2025 by rpki-client