Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: sATDVGC8IA0510LmeEADUSq8Z5cDXM8pi3aPRBvzEUY=
Subject key identifier: E3:3B:F9:8C:4E:A1:8B:EC:B3:42:75:2A:EE:03:D7:7F:45:18:5C:81
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 01975DCADDDFD38CE1FB4FD3A71CDD3EA2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 05AD
Signing time: Wed 11 Jun 2025 07:01:05 +0000
Manifest this update: Wed 11 Jun 2025 07:01:05 +0000
Manifest next update: Thu 12 Jun 2025 07:01:05 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: 3dcrJ6Wu3JaH0JOmi+o+14yiPYgLmWHLUBkyuESC8W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:dd:df:d3:8c:e1:fb:4f:d3:a7:1c:dd:3e:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Jun 11 07:01:05 2025 GMT
Not After : Jun 12 07:01:05 2025 GMT
Subject: CN=e33bf98c4ea18becb342752aee03d77f45185c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:dd:11:57:85:1d:40:91:eb:b6:f5:f2:d3:
c7:1a:05:b2:94:ee:f0:ba:5d:76:1c:f0:de:d6:17:
e9:7e:14:3c:ad:5d:41:a1:04:c6:fd:4f:59:f2:3e:
b8:7b:63:72:11:72:6c:cd:19:fd:8e:68:8b:f4:36:
af:d9:37:d7:b9:97:9c:a0:d6:8e:c4:7a:e6:2e:61:
ba:4c:59:9c:4b:47:3e:3b:33:9f:4f:30:f9:f4:ea:
19:ae:48:8c:b4:a7:63:48:24:0f:59:26:3e:7b:34:
91:b9:15:57:d0:d7:0f:dd:d9:c6:bb:4f:98:df:68:
e0:5c:58:df:5f:a6:71:27:5e:7a:7d:cf:be:a1:48:
4f:8a:4d:92:f4:40:0e:d0:a0:4b:39:52:fd:91:47:
96:2d:71:1f:39:74:02:d0:61:fe:17:63:ef:89:ff:
91:e9:74:d6:36:15:ca:17:5e:bb:cf:c1:22:a4:db:
e4:05:de:69:13:bb:b0:06:ea:00:3e:d1:46:8e:e6:
03:8a:53:63:9c:14:86:33:a6:0e:78:50:cb:ba:74:
a8:28:e1:68:df:60:df:85:74:9d:f0:71:89:a7:ff:
bb:74:0a:e8:42:f2:d7:2b:d4:93:27:45:60:58:dc:
90:14:2a:62:bc:fd:fd:b3:1b:1a:30:44:06:0a:df:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:F9:8C:4E:A1:8B:EC:B3:42:75:2A:EE:03:D7:7F:45:18:5C:81
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c9:58:03:8a:49:06:49:8c:df:75:bc:b2:b9:94:a3:74:bc:
8f:91:45:af:0c:87:74:9a:81:a9:63:f4:b9:76:30:88:67:f9:
05:4f:b7:73:54:ee:ce:dd:3c:8c:f0:0f:20:e3:8b:56:16:f3:
89:44:7a:c8:99:a5:d0:9a:32:42:b8:a6:92:34:b4:31:eb:49:
1a:f9:d8:90:8e:ae:ae:7b:19:6c:f5:06:59:72:34:9f:19:74:
b0:c2:33:fd:24:93:0b:5d:08:dd:f2:fb:3b:8e:7f:93:b0:50:
f2:0f:db:d6:22:5b:85:44:d9:7e:8f:42:42:41:1f:ff:05:c7:
5d:e7:8a:1f:ed:e2:d3:2d:10:19:54:6a:86:e0:49:82:c4:59:
e6:85:57:ca:76:7d:63:06:43:9e:9f:56:ca:71:3c:68:0a:4d:
03:45:8b:9c:d4:17:56:d3:4f:31:08:0e:e0:3a:fc:2e:3e:2b:
48:7e:51:75:a9:19:fa:fe:aa:58:ed:25:06:7a:10:2c:da:3c:
72:95:db:53:b7:01:64:1a:af:ad:03:bd:b6:d0:ad:94:9b:d0:
3f:c1:0d:da:06:05:69:4c:3c:57:83:7d:78:09:f4:70:66:be:
e9:07:20:61:23:11:ad:78:95:55:92:1a:85:1f:cf:30:ca:f9:
58:83:8d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyt3f04zh+0/TpxzdPqLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjUwNjExMDcwMTA1WhcNMjUwNjEyMDcwMTA1WjAzMTEwLwYDVQQD
EyhlMzNiZjk4YzRlYTE4YmVjYjM0Mjc1MmFlZTAzZDc3ZjQ1MTg1YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPzdEVeFHUCR67b18tPHGgWylO7w
ul12HPDe1hfpfhQ8rV1BoQTG/U9Z8j64e2NyEXJszRn9jmiL9Dav2TfXuZecoNaO
xHrmLmG6TFmcS0c+OzOfTzD59OoZrkiMtKdjSCQPWSY+ezSRuRVX0NcP3dnGu0+Y
32jgXFjfX6ZxJ156fc++oUhPik2S9EAO0KBLOVL9kUeWLXEfOXQC0GH+F2Pvif+R
6XTWNhXKF167z8EipNvkBd5pE7uwBuoAPtFGjuYDilNjnBSGM6YOeFDLunSoKOFo
32DfhXSd8HGJp/+7dAroQvLXK9STJ0VgWNyQFCpivP39sxsaMEQGCt/3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM7+YxOoYvss0J1Ku4D139FGFyBMB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8lYA4pJ
BkmM33W8srmUo3S8j5FFrwyHdJqBqWP0uXYwiGf5BU+3c1Tuzt08jPAPIOOLVhbz
iUR6yJml0JoyQrimkjS0MetJGvnYkI6urnsZbPUGWXI0nxl0sMIz/SSTC10I3fL7
O45/k7BQ8g/b1iJbhUTZfo9CQkEf/wXHXeeKH+3i0y0QGVRqhuBJgsRZ5oVXynZ9
YwZDnp9WynE8aApNA0WLnNQXVtNPMQgO4Dr8Lj4rSH5RdakZ+v6qWO0lBnoQLNo8
cpXbU7cBZBqvrQO9ttCtlJvQP8EN2gYFaUw8V4N9eAn0cGa+6QcgYSMRrXiVVZIa
hR/PMMr5WIONlw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:21 2025 by rpki-client