Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: DuzgMoIgknT0X70vfJ8kdP3flezox4rM2fJxcfvMQG0=
Subject key identifier: 00:1E:BD:A7:BE:2A:A6:36:3D:BD:51:0E:7A:EE:0C:79:12:52:B6:94
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 01976D3E0FA830F664609674B822B0DE825B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:01:13 +0000
Manifest this update: Sat 14 Jun 2025 07:01:13 +0000
Manifest next update: Sun 15 Jun 2025 07:01:13 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: K2Z6hjzZX/KqK/K+2RusSM6y+Up02/nXFkn4K5v1kX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0f:a8:30:f6:64:60:96:74:b8:22:b0:de:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jun 14 07:01:13 2025 GMT
Not After : Jun 15 07:01:13 2025 GMT
Subject: CN=001ebda7be2aa6363dbd510e7aee0c791252b694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:de:63:83:0d:c1:ba:f7:4b:59:9c:c2:c1:
44:ed:2a:1d:5f:99:eb:70:d9:53:12:7a:5a:7a:37:
48:e3:cc:98:69:23:24:4c:66:77:bf:80:61:a5:29:
42:8e:ec:e2:7d:70:7d:68:80:94:07:13:5f:0e:ef:
87:b1:64:33:ae:4c:f7:32:b3:8f:ce:ad:08:ca:d4:
d6:6b:81:7d:14:e2:e8:ff:38:42:88:e0:c0:a8:0f:
4d:bf:49:59:62:44:98:5e:58:6b:7d:ba:c8:bc:39:
24:9e:ee:d0:f7:d8:72:2d:93:1e:38:23:3a:6e:9f:
09:f9:5b:6e:3a:37:ef:dc:d5:a6:4f:8e:2b:fe:2a:
a2:f8:20:5d:c6:4b:68:67:fc:a4:fb:3f:22:b1:ef:
84:49:c5:8d:2b:74:99:3c:6e:7e:ab:b4:87:02:d4:
f7:ee:55:f7:8c:25:7c:78:6d:84:4d:ff:15:f7:78:
53:f7:b5:1e:55:b0:3f:63:bb:07:5b:a0:3b:91:12:
6d:ab:75:37:d9:5c:40:f2:a1:28:d7:5e:9d:5f:95:
92:fc:63:de:7c:c5:cc:34:3b:d3:38:25:d0:3c:df:
b6:d5:7d:00:85:2c:74:02:0a:be:fc:f6:f7:50:c4:
5d:7f:63:02:7c:42:01:03:11:33:7a:0e:be:ab:12:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:BD:A7:BE:2A:A6:36:3D:BD:51:0E:7A:EE:0C:79:12:52:B6:94
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:18:58:90:15:37:bf:d7:c9:70:41:36:b3:85:29:39:00:48:
9f:2e:da:08:fd:3a:a9:b6:81:17:7f:86:68:13:af:69:9a:e9:
49:83:2d:d3:fd:7c:75:c0:1a:ec:42:86:cd:0e:76:01:19:fb:
1a:0b:5e:ca:f9:be:c7:7f:92:be:14:a8:31:c1:57:7c:91:03:
44:93:61:05:ff:a8:9a:17:81:4d:b6:a2:e3:11:8c:6d:fb:fc:
71:43:aa:a7:8b:a0:f7:36:55:ee:77:dd:c4:eb:fb:05:6a:8b:
28:cc:06:5b:c1:51:61:19:56:4c:cd:6b:c6:ca:8b:44:89:0f:
7b:87:5f:35:8c:c5:34:7f:7f:2e:4c:d7:48:fd:06:3d:31:54:
e2:a8:8d:cf:4c:62:85:7d:53:7b:3f:60:bc:d0:3d:67:a7:0c:
68:21:c1:ad:91:85:ed:cb:2f:38:29:dd:ce:93:b6:39:77:5e:
7c:29:4e:92:29:c9:52:13:4c:e3:fc:1f:36:03:48:03:02:c7:
ac:ea:2b:b8:b2:f0:dd:c1:a2:0a:42:f0:02:36:b7:05:7f:d6:
bf:35:72:f4:57:8b:d8:04:0f:ba:a7:11:97:27:99:5c:80:ec:
93:12:5a:c5:64:82:42:2a:79:44:59:a4:b4:6a:a8:94:27:b3:
d1:d4:f6:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPg+oMPZkYJZ0uCKw3oJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj
NzRhNWQwHhcNMjUwNjE0MDcwMTEzWhcNMjUwNjE1MDcwMTEzWjAzMTEwLwYDVQQD
EygwMDFlYmRhN2JlMmFhNjM2M2RiZDUxMGU3YWVlMGM3OTEyNTJiNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B3eY4MNwbr3S1mcwsFE7SodX5nr
cNlTEnpaejdI48yYaSMkTGZ3v4BhpSlCjuzifXB9aICUBxNfDu+HsWQzrkz3MrOP
zq0IytTWa4F9FOLo/zhCiODAqA9Nv0lZYkSYXlhrfbrIvDkknu7Q99hyLZMeOCM6
bp8J+VtuOjfv3NWmT44r/iqi+CBdxktoZ/yk+z8ise+EScWNK3SZPG5+q7SHAtT3
7lX3jCV8eG2ETf8V93hT97UeVbA/Y7sHW6A7kRJtq3U32VxA8qEo116dX5WS/GPe
fMXMNDvTOCXQPN+21X0AhSx0Agq+/Pb3UMRdf2MCfEIBAxEzeg6+qxIFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAevae+KqY2Pb1RDnruDHkSUraUMB8GA1UdIwQY
MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt
YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh
LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhhYkBU3
v9fJcEE2s4UpOQBIny7aCP06qbaBF3+GaBOvaZrpSYMt0/18dcAa7EKGzQ52ARn7
Ggteyvm+x3+SvhSoMcFXfJEDRJNhBf+omheBTbai4xGMbfv8cUOqp4ug9zZV7nfd
xOv7BWqLKMwGW8FRYRlWTM1rxsqLRIkPe4dfNYzFNH9/LkzXSP0GPTFU4qiNz0xi
hX1Tez9gvNA9Z6cMaCHBrZGF7csvOCndzpO2OXdefClOkinJUhNM4/wfNgNIAwLH
rOoruLLw3cGiCkLwAja3BX/WvzVy9FeL2AQPuqcRlyeZXIDskxJaxWSCQip5RFmk
tGqolCez0dT2xw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:31:45 2025 by rpki-client