Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: aPjDo8ZZMlLkTv6yvOy007XcfSMYCrMb86FcmtvBJs4=
Subject key identifier: F8:45:87:3B:14:37:7F:D3:D3:F8:B1:97:F2:91:4C:F8:D0:62:3E:D2
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019749D59163B4712A5F2316D3C645F32B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:22 +0000
Manifest this update: Sat 07 Jun 2025 10:00:22 +0000
Manifest next update: Sun 08 Jun 2025 10:00:22 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: 0xWYOaKrnsceAzWF99Yd316ZXHgv5sYNfAjHtO+7U88=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:91:63:b4:71:2a:5f:23:16:d3:c6:45:f3:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jun 7 10:00:22 2025 GMT
Not After : Jun 8 10:00:22 2025 GMT
Subject: CN=f845873b14377fd3d3f8b197f2914cf8d0623ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:1d:1f:b1:ac:18:7b:3c:ae:9e:3c:fa:4d:
e3:2c:6d:2a:30:60:4f:3e:1a:de:8d:1a:31:aa:4c:
58:8c:52:5d:38:64:b8:5b:46:4a:20:11:e7:a8:c3:
3c:4f:5b:3f:10:b6:29:f7:62:09:bb:08:52:05:54:
ef:ef:9d:7c:f6:f1:13:64:45:fa:6f:84:eb:25:50:
59:58:e5:73:fe:95:b3:36:00:32:b0:4d:75:60:9a:
15:c1:0f:08:64:a2:e1:ac:3e:86:a3:fd:74:cc:8e:
f8:d5:29:b8:64:d3:35:77:45:d1:5a:cd:c3:d3:31:
64:bf:27:ef:6d:4e:93:1f:3d:45:0f:b9:03:ab:24:
ee:5f:2e:51:be:db:e2:4c:50:8a:c2:71:95:d8:aa:
74:eb:fe:f6:2d:89:60:43:9b:40:55:19:e6:82:3e:
d4:52:84:36:6a:b2:cd:a4:da:29:ff:86:d4:62:b2:
8f:b7:d8:ef:c2:51:d2:ba:b2:a3:68:ca:04:3d:a9:
d5:88:a7:f3:2f:dc:fd:a7:b4:a6:66:40:22:5e:45:
cc:a5:df:d1:a5:f9:75:8e:3f:9d:c2:04:29:6e:c7:
2d:5f:64:33:d8:f1:f5:bb:4d:94:0a:53:18:88:01:
54:15:c4:a4:e6:7c:a6:56:ba:ea:33:2b:cc:bc:4b:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:87:3B:14:37:7F:D3:D3:F8:B1:97:F2:91:4C:F8:D0:62:3E:D2
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:33:10:e9:b9:27:5a:88:76:fd:c7:fe:c9:37:f2:f2:23:
2e:a7:01:00:a8:6d:bb:d2:ae:a1:a1:fa:77:19:16:2e:d7:1e:
14:56:b8:09:43:48:38:d6:77:4b:e2:ee:86:8d:17:55:db:39:
70:35:50:7e:16:e9:14:b4:10:8b:37:62:15:bc:83:40:2e:a3:
b5:b4:d0:68:f5:91:d0:8e:a3:6e:1a:48:86:53:bb:ba:8e:bc:
03:5d:25:55:a4:01:69:78:9f:b7:35:81:82:b7:be:d9:4b:30:
03:6a:d5:7d:b2:f3:b5:dc:66:49:42:25:7e:4d:01:1c:5e:33:
b8:88:54:a0:12:06:72:2e:af:a2:69:03:b4:ce:ba:07:b2:93:
dd:77:45:36:34:e8:84:43:2c:5a:04:57:32:4d:bd:38:cc:19:
f6:57:4c:24:a4:42:6c:66:06:97:b3:61:81:b7:27:84:fe:48:
f4:ee:bf:22:98:d0:7e:1f:f9:45:4d:c6:75:bf:62:ec:15:3b:
33:05:45:9d:5f:1a:fa:a3:7a:38:59:35:d4:b8:14:50:fe:e1:
1e:2e:72:33:a7:f7:fa:3d:90:9f:53:28:56:aa:ef:51:7a:dd:
35:f7:8b:a1:cc:67:d5:a9:96:8e:49:43:fc:42:1a:e9:ff:ea:
43:51:27:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1ZFjtHEqXyMW08ZF8ysNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0
NzBiZmYwHhcNMjUwNjA3MTAwMDIyWhcNMjUwNjA4MTAwMDIyWjAzMTEwLwYDVQQD
EyhmODQ1ODczYjE0Mzc3ZmQzZDNmOGIxOTdmMjkxNGNmOGQwNjIzZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A4dH7GsGHs8rp48+k3jLG0qMGBP
PhrejRoxqkxYjFJdOGS4W0ZKIBHnqMM8T1s/ELYp92IJuwhSBVTv75189vETZEX6
b4TrJVBZWOVz/pWzNgAysE11YJoVwQ8IZKLhrD6Go/10zI741Sm4ZNM1d0XRWs3D
0zFkvyfvbU6THz1FD7kDqyTuXy5RvtviTFCKwnGV2Kp06/72LYlgQ5tAVRnmgj7U
UoQ2arLNpNop/4bUYrKPt9jvwlHSurKjaMoEPanViKfzL9z9p7SmZkAiXkXMpd/R
pfl1jj+dwgQpbsctX2Qz2PH1u02UClMYiAFUFcSk5nymVrrqMyvMvEvgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhFhzsUN3/T0/ixl/KRTPjQYj7SMB8GA1UdIwQY
MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt
ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4
LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEkzEOm5
J1qIdv3H/sk38vIjLqcBAKhtu9KuoaH6dxkWLtceFFa4CUNIONZ3S+Luho0XVds5
cDVQfhbpFLQQizdiFbyDQC6jtbTQaPWR0I6jbhpIhlO7uo68A10lVaQBaXiftzWB
gre+2UswA2rVfbLztdxmSUIlfk0BHF4zuIhUoBIGci6vomkDtM66B7KT3XdFNjTo
hEMsWgRXMk29OMwZ9ldMJKRCbGYGl7NhgbcnhP5I9O6/IpjQfh/5RU3Gdb9i7BU7
MwVFnV8a+qN6OFk11LgUUP7hHi5yM6f3+j2Qn1MoVqrvUXrdNfeLocxn1amWjklD
/EIa6f/qQ1En3w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:14 2025 by rpki-client