Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: fzHRQTfQFs79eqgBs7mCWQQ0sjBdHf86D/52hqG+Sxo=
Subject key identifier: 5B:BD:EB:80:AE:36:8A:FD:16:85:60:E6:6E:C3:00:FE:B7:7C:FE:D6
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019749D637C19F219E55377B60CFA9530D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:01:05 +0000
Manifest this update: Sat 07 Jun 2025 10:01:05 +0000
Manifest next update: Sun 08 Jun 2025 10:01:05 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: FcVIBkQGTxykn1YMxXP/a65C3j/P22VBlVmZj2EnIwE=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:37:c1:9f:21:9e:55:37:7b:60:cf:a9:53:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jun 7 10:01:05 2025 GMT
Not After : Jun 8 10:01:05 2025 GMT
Subject: CN=5bbdeb80ae368afd168560e66ec300feb77cfed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:4b:f0:1c:c2:46:33:88:4a:f5:3c:a3:31:
7d:5f:74:7b:ff:db:5c:8c:56:fb:d5:ee:8a:36:d4:
7a:85:65:aa:f0:2c:8b:e8:c1:19:27:9c:6c:70:aa:
2b:dd:d2:7b:2e:2d:49:18:08:d4:a7:5b:ed:b2:d6:
39:95:db:80:7e:7c:be:86:91:14:8b:8d:4b:3d:c6:
23:d2:59:7b:9e:19:73:6c:10:f9:de:9d:ab:c2:1a:
69:2b:14:df:97:dd:44:c6:bf:9e:62:aa:54:42:30:
3f:b8:62:db:2f:fc:6e:a5:4d:72:55:84:01:e8:7e:
73:ca:6e:d7:f7:c1:22:ea:f0:47:f3:e0:ec:fa:4d:
38:ea:8a:ad:33:2c:11:06:cc:f9:db:c0:74:4a:8e:
7c:4b:74:64:1c:28:5d:b1:d5:c7:fe:76:4e:3b:d6:
41:06:73:2b:e5:d6:3d:6c:64:da:9a:71:70:16:5a:
2a:54:b9:53:95:41:d6:de:a8:d2:9d:85:f1:bd:9b:
ae:c9:1d:31:99:6e:0d:fc:3f:6e:f4:da:a1:91:10:
de:82:6a:3b:e9:8c:de:f2:80:ca:33:50:db:d0:f5:
0d:71:90:48:e5:39:de:d4:27:8b:c4:17:59:84:2a:
59:cc:6b:46:56:74:90:e6:e4:2f:c1:7d:48:2b:06:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:EB:80:AE:36:8A:FD:16:85:60:E6:6E:C3:00:FE:B7:7C:FE:D6
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:5f:8b:07:dd:a8:e3:eb:6e:10:cb:b9:84:01:95:8d:60:
36:67:07:a5:08:e3:56:21:65:ef:10:75:c5:35:35:c4:0b:7c:
e7:b4:68:55:2e:2c:03:4c:15:3a:2a:3d:11:bd:8a:a9:a4:38:
ae:d0:11:89:20:dd:02:52:42:9d:2b:65:00:ae:b6:03:81:b4:
1f:d4:34:c5:2e:8f:fd:e2:69:8e:5f:70:19:cf:1e:be:14:10:
a2:2a:d7:e7:98:2b:6c:45:80:f4:7d:a3:96:c5:7a:4c:72:48:
65:81:b4:f3:3d:4c:47:fd:be:3b:1e:a0:fa:24:4c:53:18:85:
d0:ea:70:2e:8a:79:ac:42:0e:97:d9:49:fb:df:14:b5:fb:02:
21:e8:cd:f1:c8:ae:46:f0:20:d7:d1:29:6d:e1:07:59:57:ec:
13:a2:df:dc:9f:4d:a5:64:c1:63:5c:65:f0:19:58:6d:89:3f:
71:c4:60:c7:39:81:34:45:a2:f1:c0:d3:6e:0b:32:7f:0e:3c:
d3:5f:4a:f0:a5:50:52:45:a2:cf:a7:b0:10:f7:67:26:84:c0:
03:bf:ac:d7:c1:1c:6a:37:a1:05:4e:24:16:49:1d:b4:dd:43:
d5:96:43:ca:4e:a6:ef:a4:74:86:6d:f6:8e:a4:7a:12:bc:dd:
62:ee:d7:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1jfBnyGeVTd7YM+pUw0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk
MjNlNWQwHhcNMjUwNjA3MTAwMTA1WhcNMjUwNjA4MTAwMTA1WjAzMTEwLwYDVQQD
Eyg1YmJkZWI4MGFlMzY4YWZkMTY4NTYwZTY2ZWMzMDBmZWI3N2NmZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF9L8BzCRjOISvU8ozF9X3R7/9tc
jFb71e6KNtR6hWWq8CyL6MEZJ5xscKor3dJ7Li1JGAjUp1vtstY5lduAfny+hpEU
i41LPcYj0ll7nhlzbBD53p2rwhppKxTfl91Exr+eYqpUQjA/uGLbL/xupU1yVYQB
6H5zym7X98Ei6vBH8+Ds+k046oqtMywRBsz528B0So58S3RkHChdsdXH/nZOO9ZB
BnMr5dY9bGTamnFwFloqVLlTlUHW3qjSnYXxvZuuyR0xmW4N/D9u9NqhkRDegmo7
6Yze8oDKM1Db0PUNcZBI5Tne1CeLxBdZhCpZzGtGVnSQ5uQvwX1IKwYJbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu964CuNor9FoVg5m7DAP63fP7WMB8GA1UdIwQY
MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt
NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4
LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARndfiwfd
qOPrbhDLuYQBlY1gNmcHpQjjViFl7xB1xTU1xAt857RoVS4sA0wVOio9Eb2KqaQ4
rtARiSDdAlJCnStlAK62A4G0H9Q0xS6P/eJpjl9wGc8evhQQoirX55grbEWA9H2j
lsV6THJIZYG08z1MR/2+Ox6g+iRMUxiF0OpwLop5rEIOl9lJ+98UtfsCIejN8ciu
RvAg19EpbeEHWVfsE6Lf3J9NpWTBY1xl8BlYbYk/ccRgxzmBNEWi8cDTbgsyfw48
019K8KVQUkWiz6ewEPdnJoTAA7+s18EcajehBU4kFkkdtN1D1ZZDyk6m76R0hm32
jqR6ErzdYu7XmA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:48 2025 by rpki-client