Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: ScmT7+ld/nf0w+gyxItoLFkGAaCgEDcn0usVPzmJJA0=
Subject key identifier: 44:6D:D5:4A:45:D6:7F:09:05:DA:A4:F1:1E:1E:76:9F:00:CD:73:9E
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01975A24C49A9331E731E20C96DAE6F7AB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 14:00:48 +0000
Manifest this update: Tue 10 Jun 2025 14:00:48 +0000
Manifest next update: Wed 11 Jun 2025 14:00:48 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: zER6rKDkxhWlBVWHGG2T9lW/LwJE1mWgjZYoZwpzlbU=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:c4:9a:93:31:e7:31:e2:0c:96:da:e6:f7:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jun 10 14:00:48 2025 GMT
Not After : Jun 11 14:00:48 2025 GMT
Subject: CN=446dd54a45d67f0905daa4f11e1e769f00cd739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:5d:d1:fd:d9:07:cb:89:57:a9:41:b4:14:
91:e2:d1:13:e7:9b:3d:9f:f3:37:6e:06:02:8d:33:
79:f7:59:7f:52:85:9e:7f:2b:5a:25:47:06:08:22:
dd:7c:b6:fc:58:64:76:7f:9f:43:a0:22:6e:fb:6b:
55:38:d9:76:b1:51:98:26:db:f5:d8:dd:df:41:67:
45:08:26:77:f1:a5:00:da:14:0c:19:a3:3f:9c:91:
28:68:d9:46:c3:be:3b:c6:2d:c4:c4:67:66:29:5f:
51:f1:44:cc:e6:29:59:52:86:0e:1c:71:82:35:de:
33:77:b2:6e:17:b8:b6:b5:e4:ca:fb:b0:a8:ce:ba:
d9:ab:85:0d:36:de:84:01:98:a1:0b:30:bc:91:b3:
c1:f0:fe:29:70:c1:78:f6:7c:ae:bf:83:c0:9b:47:
08:4d:db:38:33:3f:bc:3f:6f:99:f1:f0:0d:48:41:
90:77:6a:be:e0:24:51:51:62:b9:1c:0e:76:f9:5a:
2b:f9:c6:6f:2f:42:98:0a:0e:3f:96:a0:e5:7c:49:
c4:f5:c5:91:39:af:71:59:11:49:8c:8d:56:11:19:
06:90:eb:a7:74:c6:e2:36:99:79:ae:5d:8b:be:34:
f9:98:67:1c:9a:b3:8d:1e:9c:fb:ee:2b:88:9a:ab:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:D5:4A:45:D6:7F:09:05:DA:A4:F1:1E:1E:76:9F:00:CD:73:9E
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:1e:85:cd:dc:cf:ef:c7:bf:75:63:08:69:40:07:e4:86:
37:60:8f:5a:a8:ae:c8:d7:7a:16:fd:74:9e:d9:cf:41:0c:0c:
e3:e2:62:1a:59:7b:9c:bd:b4:c6:19:47:e7:79:3a:f1:3e:a2:
10:39:a9:5a:d5:e9:85:ba:09:c9:3c:21:0c:f9:4a:c0:b5:0a:
b4:c5:50:39:82:c5:36:34:15:0d:9a:70:05:5f:2b:0a:2b:cc:
a7:00:59:28:88:cd:2a:21:16:c1:d5:a6:7e:a3:34:28:11:f2:
2b:71:91:61:07:b9:52:b3:70:64:79:52:bf:f5:3b:a7:76:6c:
c1:30:61:98:65:19:32:3f:4f:5d:77:79:9e:ef:b2:0f:42:a8:
25:fc:8e:ec:2f:20:71:c2:de:19:3f:ab:b1:d7:ff:c1:54:f6:
c1:d5:f7:17:9e:e7:a0:3d:66:73:9d:27:a0:1e:6c:f0:96:81:
54:f3:61:82:fd:a2:41:67:01:13:be:f5:57:2f:8f:4e:29:ab:
15:f8:f1:3f:b8:71:5f:70:77:2f:9d:9b:e5:f9:68:0e:ab:f5:
a4:1e:e8:1c:01:08:04:cb:3a:90:05:80:24:48:0b:69:8d:1a:
03:30:c1:f9:e6:ae:42:6d:ad:d9:35:f4:da:9d:cf:64:15:f2:
2b:4a:e6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJMSakzHnMeIMltrm96tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk
YTBjM2YwHhcNMjUwNjEwMTQwMDQ4WhcNMjUwNjExMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0NDZkZDU0YTQ1ZDY3ZjA5MDVkYWE0ZjExZTFlNzY5ZjAwY2Q3MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbNd0f3ZB8uJV6lBtBSR4tET55s9
n/M3bgYCjTN591l/UoWefytaJUcGCCLdfLb8WGR2f59DoCJu+2tVONl2sVGYJtv1
2N3fQWdFCCZ38aUA2hQMGaM/nJEoaNlGw747xi3ExGdmKV9R8UTM5ilZUoYOHHGC
Nd4zd7JuF7i2teTK+7CozrrZq4UNNt6EAZihCzC8kbPB8P4pcMF49nyuv4PAm0cI
Tds4Mz+8P2+Z8fANSEGQd2q+4CRRUWK5HA52+Vor+cZvL0KYCg4/lqDlfEnE9cWR
Oa9xWRFJjI1WERkGkOundMbiNpl5rl2LvjT5mGccmrONHpz77iuImqvQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERt1UpF1n8JBdqk8R4edp8AzXOeMB8GA1UdIwQY
MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt
NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz
LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7gehc3c
z+/Hv3VjCGlAB+SGN2CPWqiuyNd6Fv10ntnPQQwM4+JiGll7nL20xhlH53k68T6i
EDmpWtXphboJyTwhDPlKwLUKtMVQOYLFNjQVDZpwBV8rCivMpwBZKIjNKiEWwdWm
fqM0KBHyK3GRYQe5UrNwZHlSv/U7p3ZswTBhmGUZMj9PXXd5nu+yD0KoJfyO7C8g
ccLeGT+rsdf/wVT2wdX3F57noD1mc50noB5s8JaBVPNhgv2iQWcBE771Vy+PTimr
FfjxP7hxX3B3L52b5floDqv1pB7oHAEIBMs6kAWAJEgLaY0aAzDB+eauQm2t2TX0
2p3PZBXyK0rmaw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:44 2025 by rpki-client