Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: W7QZDhkj3RdjuIsjApShHAJFmmbdTZD8rnccZQrg3ok=
Subject key identifier: 20:76:BE:A1:27:01:72:16:40:05:B8:22:3F:05:53:41:6B:17:8D:B1
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01974DB2920084521C82808DC77EAD2C0CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 13E0
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: xXOiVE4kwLvUpdDsh3rniAz9/Ydz1CwtLHzT34br7cM=)
2: 9A8IsknvAF0U5RNOtl5SOV4q0sQ.roa (hash: GaIzVo3DhiQTCBhrDdW3sH49d4PH5eF7D7kJvi+xVyk=)
3: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:92:00:84:52:1c:82:80:8d:c7:7e:ad:2c:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=2076bea1270172164005b8223f0553416b178db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:f8:8e:f6:fb:0b:99:da:db:46:1c:31:66:
dd:2d:b9:9e:0f:e9:ad:96:02:e5:fc:c2:63:91:d0:
3f:c8:ea:ea:1d:6c:a9:92:fe:a4:c2:ca:32:aa:39:
78:30:95:45:b1:72:21:9a:af:b1:d7:44:e7:4a:ed:
62:51:86:da:12:8e:fb:25:16:19:35:8c:9f:c9:b9:
ee:8e:f6:7e:99:39:81:16:81:fc:17:4a:9a:72:07:
32:9e:37:9e:6a:dc:4b:c5:9d:9a:ad:ae:95:64:fc:
83:d2:c0:b9:d3:3a:9d:e1:c9:88:be:9d:90:c4:59:
48:e4:ac:71:c2:78:af:8c:10:68:02:3f:47:15:01:
e0:58:f0:94:53:bb:8e:0e:79:dd:01:a4:d8:8d:b0:
95:fd:a9:97:e5:2e:86:5f:9c:4a:e4:47:e5:b0:a8:
a9:8a:49:1c:aa:fa:ac:97:b1:67:0d:1b:aa:1a:c5:
37:cb:c3:e6:13:c3:ce:14:28:7b:41:6a:1c:8a:61:
83:db:de:81:b7:08:8b:11:68:40:5d:4e:32:f5:b4:
36:48:7a:f3:9e:d7:53:8a:fd:0a:db:91:7a:ae:d7:
3a:93:c5:a2:b7:04:64:94:b0:63:92:c0:1f:40:a1:
12:e8:12:9d:4c:bf:e0:3a:36:d3:c9:3f:0d:a7:6d:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:BE:A1:27:01:72:16:40:05:B8:22:3F:05:53:41:6B:17:8D:B1
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:34:e1:30:57:39:7b:c2:29:c3:60:f2:69:da:38:51:8f:78:
8f:6c:ec:bd:e1:c9:ec:f1:25:67:64:70:dc:90:00:fc:a7:24:
df:69:1d:17:81:56:1d:ae:0a:95:42:28:ab:25:be:19:7a:6b:
43:4b:d6:96:9e:db:6a:c3:50:fb:8f:7b:8e:f5:f6:02:ef:6f:
4e:e2:a8:a0:92:37:e7:9b:f1:89:b2:c1:da:8a:f8:50:1e:db:
3b:33:54:27:97:45:5b:ba:eb:08:84:15:8a:43:18:23:62:fd:
37:d0:6a:4c:c4:9c:73:cd:35:22:f0:7b:67:be:c1:82:25:fd:
1a:2b:a1:83:60:a2:a6:b7:2c:b7:b6:73:e9:2a:99:2c:3b:ed:
18:29:c3:d5:49:e4:da:c8:b2:12:f5:b6:0c:0c:ee:23:87:51:
cd:60:21:61:1d:1a:59:37:a7:b9:9c:d4:9a:97:84:c2:58:b4:
63:a8:4c:e3:fe:5b:95:dd:9f:0e:4f:d5:0c:9c:d2:1f:9a:85:
49:75:7e:30:4d:e2:b3:1a:0a:19:fb:15:22:9d:83:60:3f:cd:
c9:1e:c4:64:f0:63:b8:42:27:5f:8c:a6:f8:61:1a:9a:8f:1b:
9d:1b:48:99:05:b7:70:03:01:1a:7f:a6:5a:2e:e1:22:85:a2:
01:9c:fe:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNspIAhFIcgoCNx36tLAykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4
ZDM0ZDYwHhcNMjUwNjA4MDQwMDM3WhcNMjUwNjA5MDQwMDM3WjAzMTEwLwYDVQQD
EygyMDc2YmVhMTI3MDE3MjE2NDAwNWI4MjIzZjA1NTM0MTZiMTc4ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFj4jvb7C5na20YcMWbdLbmeD+mt
lgLl/MJjkdA/yOrqHWypkv6kwsoyqjl4MJVFsXIhmq+x10TnSu1iUYbaEo77JRYZ
NYyfybnujvZ+mTmBFoH8F0qacgcynjeeatxLxZ2ara6VZPyD0sC50zqd4cmIvp2Q
xFlI5KxxwnivjBBoAj9HFQHgWPCUU7uODnndAaTYjbCV/amX5S6GX5xK5EflsKip
ikkcqvqsl7FnDRuqGsU3y8PmE8POFCh7QWocimGD296BtwiLEWhAXU4y9bQ2SHrz
ntdTiv0K25F6rtc6k8WitwRklLBjksAfQKES6BKdTL/gOjbTyT8Np233awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB2vqEnAXIWQAW4Ij8FU0FrF42xMB8GA1UdIwQY
MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt
MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw
LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajThMFc5
e8Ipw2Dyado4UY94j2zsveHJ7PElZ2Rw3JAA/Kck32kdF4FWHa4KlUIoqyW+GXpr
Q0vWlp7basNQ+497jvX2Au9vTuKooJI355vxibLB2or4UB7bOzNUJ5dFW7rrCIQV
ikMYI2L9N9BqTMScc801IvB7Z77BgiX9Giuhg2Ciprcst7Zz6SqZLDvtGCnD1Unk
2siyEvW2DAzuI4dRzWAhYR0aWTenuZzUmpeEwli0Y6hM4/5bld2fDk/VDJzSH5qF
SXV+ME3isxoKGfsVIp2DYD/NyR7EZPBjuEInX4ym+GEamo8bnRtImQW3cAMBGn+m
Wi7hIoWiAZz+QA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:39 2025 by rpki-client