Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: 92WpLj4HQApjIAbs4iDDK14ZpwsgkwfXl/sj9WkRiaA=
Subject key identifier: F5:44:13:79:06:2F:86:58:BA:85:7D:93:C0:F8:98:0C:F4:CC:5C:18
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 01974C31ED370954B812793C5D5769713D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 01EC
Signing time: Sat 07 Jun 2025 21:00:29 +0000
Manifest this update: Sat 07 Jun 2025 21:00:29 +0000
Manifest next update: Sun 08 Jun 2025 21:00:29 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: Sf7azQ+zLfBxrLrsUqQvj3dOlVu//eUmKOwKCzvqJLw=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:ed:37:09:54:b8:12:79:3c:5d:57:69:71:3d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jun 7 21:00:29 2025 GMT
Not After : Jun 8 21:00:29 2025 GMT
Subject: CN=f5441379062f8658ba857d93c0f8980cf4cc5c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:59:9e:0a:ff:c6:26:90:f7:b8:26:65:b7:
93:33:6a:26:47:e6:54:15:bb:bb:c4:ca:6a:9b:6c:
e5:4b:90:2f:0e:63:2f:52:f6:25:b1:f7:ef:c0:4f:
10:9e:1d:cf:6b:31:0e:57:1a:c2:af:f4:0d:89:94:
7f:a2:7a:40:08:d0:f2:d1:3b:cd:65:4f:6a:63:72:
23:1c:46:25:6c:4d:4d:e9:72:2a:7d:31:0d:00:dd:
e3:1c:86:eb:9d:dc:13:9c:f7:06:dc:5b:77:f0:74:
ee:cd:06:65:52:4f:f7:68:83:09:e6:df:c9:e5:f9:
de:b3:fe:9c:9f:46:e4:88:61:3d:5a:74:cd:54:e0:
2c:dc:94:93:9b:ba:27:bf:ff:b5:71:58:cd:66:cb:
c3:3f:ef:7f:cf:45:99:77:d3:62:9c:f3:e9:54:2f:
f3:f9:7f:74:a9:90:3b:f0:bc:f6:e5:f0:c3:e1:1b:
f4:83:9f:39:82:d8:24:2e:d2:f5:14:43:6d:c4:7b:
b5:da:6c:50:b1:71:f1:23:66:31:05:fd:aa:0d:c4:
47:b4:8e:69:d8:43:b2:6e:d5:2c:6b:d8:b4:76:fc:
01:19:49:1a:15:24:4b:06:d1:7b:91:8c:26:b9:15:
f4:a3:8f:08:c2:5c:a9:e4:b4:dc:38:ae:d7:a5:2a:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:13:79:06:2F:86:58:BA:85:7D:93:C0:F8:98:0C:F4:CC:5C:18
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:e5:b8:12:33:a4:42:96:35:be:59:56:4f:b4:66:05:d9:
1a:f6:d6:05:82:ab:23:11:3d:1b:9e:ee:3a:6d:38:30:9e:a7:
f3:09:2c:19:28:1d:e2:9f:03:e5:ff:48:d2:00:f1:8c:c1:aa:
30:83:9a:2f:48:38:0b:33:c7:5d:9f:b0:96:76:94:e9:da:d9:
09:26:c5:b1:3c:57:d7:5f:53:bc:f0:b2:d1:1a:80:37:5e:14:
00:9c:ff:7f:48:ab:be:28:80:18:e8:22:45:2e:8f:82:e8:f7:
7f:9b:41:1d:e2:eb:5d:50:9e:c0:3d:ed:11:74:cb:38:62:37:
4f:36:5b:b3:00:8c:7a:6d:27:93:4b:4c:65:d6:9a:b7:6f:3a:
30:fd:a7:55:67:c2:b3:64:fb:d0:bd:5b:03:58:8c:78:15:ba:
8f:41:f2:7c:cd:33:98:77:d9:a7:98:03:b5:96:f5:53:0b:97:
01:75:c6:ef:cc:02:95:cc:a3:ae:02:95:7f:69:1c:ac:f7:c5:
2d:2d:ba:40:0a:ce:24:d6:1c:9d:dc:17:c0:1d:44:2b:0a:ff:
46:19:bd:e8:40:bb:eb:ef:1d:b1:3c:46:ba:e4:76:63:de:75:
e8:63:36:e1:85:ff:0c:35:ea:4d:d6:88:8b:71:b6:f4:6c:b6:
13:4f:3a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMe03CVS4Enk8XVdpcT1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz
OWEzNWUwHhcNMjUwNjA3MjEwMDI5WhcNMjUwNjA4MjEwMDI5WjAzMTEwLwYDVQQD
EyhmNTQ0MTM3OTA2MmY4NjU4YmE4NTdkOTNjMGY4OTgwY2Y0Y2M1YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+RZngr/xiaQ97gmZbeTM2omR+ZU
Fbu7xMpqm2zlS5AvDmMvUvYlsffvwE8Qnh3PazEOVxrCr/QNiZR/onpACNDy0TvN
ZU9qY3IjHEYlbE1N6XIqfTENAN3jHIbrndwTnPcG3Ft38HTuzQZlUk/3aIMJ5t/J
5fnes/6cn0bkiGE9WnTNVOAs3JSTm7onv/+1cVjNZsvDP+9/z0WZd9NinPPpVC/z
+X90qZA78Lz25fDD4Rv0g585gtgkLtL1FENtxHu12mxQsXHxI2YxBf2qDcRHtI5p
2EOybtUsa9i0dvwBGUkaFSRLBtF7kYwmuRX0o48Iwlyp5LTcOK7XpSqMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVEE3kGL4ZYuoV9k8D4mAz0zFwYMB8GA1UdIwQY
MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt
NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4
LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4DluBIz
pEKWNb5ZVk+0ZgXZGvbWBYKrIxE9G57uOm04MJ6n8wksGSgd4p8D5f9I0gDxjMGq
MIOaL0g4CzPHXZ+wlnaU6drZCSbFsTxX119TvPCy0RqAN14UAJz/f0irviiAGOgi
RS6Pguj3f5tBHeLrXVCewD3tEXTLOGI3TzZbswCMem0nk0tMZdaat286MP2nVWfC
s2T70L1bA1iMeBW6j0HyfM0zmHfZp5gDtZb1UwuXAXXG78wClcyjrgKVf2kcrPfF
LS26QArOJNYcndwXwB1EKwr/Rhm96EC76+8dsTxGuuR2Y9516GM24YX/DDXqTdaI
i3G29Gy2E086Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:09 2025 by rpki-client