Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: vfEt4umm8lEnLV7H5PLbViPECrY65lqe18EeHUAZ9Nc=
Subject key identifier: 0F:89:A9:35:AB:9F:ED:F9:1D:51:FB:9D:BC:71:2C:5D:28:E0:7C:1F
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 01975422A4AC19A1B73AC2275016B14A0F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 10:00:45 +0000
Manifest this update: Mon 09 Jun 2025 10:00:45 +0000
Manifest next update: Tue 10 Jun 2025 10:00:45 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: JEcNiBHOV7uet1Q1A5dQtREGajYRpW386gRATHuK5DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:a4:ac:19:a1:b7:3a:c2:27:50:16:b1:4a:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jun 9 10:00:45 2025 GMT
Not After : Jun 10 10:00:45 2025 GMT
Subject: CN=0f89a935ab9fedf91d51fb9dbc712c5d28e07c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:c5:69:d8:14:c4:3a:a4:c0:b7:bd:30:34:
d2:17:32:67:78:92:d7:ed:46:ea:c0:bc:bd:9c:48:
75:b1:e6:f8:42:0e:c8:08:17:39:49:99:87:52:45:
07:24:1b:4d:ed:0e:24:42:38:01:67:42:e6:c1:b2:
48:c7:b7:6e:2a:7c:b8:ed:01:49:f0:09:c5:87:4c:
f4:e4:aa:c2:27:e1:f7:bd:7a:dc:a6:44:3c:71:c9:
8b:e2:11:49:e0:39:0c:35:5a:9c:44:08:20:8e:6e:
5f:a4:81:19:b9:87:e8:f6:64:7b:e1:6d:d1:ad:2b:
6c:ee:9d:39:93:ac:ff:60:38:14:07:3a:fb:b2:e9:
e2:f6:40:6a:6b:fd:a6:13:b4:7b:f2:81:56:b6:4b:
43:e1:53:75:1a:52:a2:eb:f7:bc:f2:83:34:58:c8:
fd:d6:59:67:78:b9:f1:89:d8:67:8c:72:ce:2b:4c:
25:3c:3c:1d:98:f4:d9:2d:a4:72:0c:3d:b6:20:50:
76:bc:b3:f8:f0:7b:cc:90:a6:12:e2:a1:2b:6b:c3:
8e:f3:2c:8d:7e:58:eb:70:d0:28:ad:a7:f0:07:ef:
64:c5:0b:a5:a3:f0:b4:e4:11:a8:ed:bd:97:dd:24:
55:74:61:95:1b:5f:ea:81:be:63:f4:b9:1d:d9:4c:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:A9:35:AB:9F:ED:F9:1D:51:FB:9D:BC:71:2C:5D:28:E0:7C:1F
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:59:c7:42:c2:f9:eb:40:00:2c:7a:e0:7f:f5:d1:f8:2a:d8:
75:f4:1e:b3:2f:76:6f:53:54:d8:9a:e9:a4:c9:f5:43:a7:b6:
38:3b:4d:59:e4:4c:84:92:82:a5:83:4b:78:75:92:16:2f:a6:
72:d8:5f:7f:fb:0d:13:25:7f:3f:58:6a:96:51:b5:af:39:ee:
09:82:eb:90:0b:10:f2:7a:ee:ae:53:06:ed:e0:12:22:52:0c:
16:37:58:14:3b:b6:f8:da:fa:ca:57:c7:9e:ee:f7:38:e3:8d:
4d:32:7d:c7:45:45:88:15:46:5e:be:36:63:b0:79:10:b5:59:
78:12:09:d3:57:87:e4:ad:16:fe:33:e9:4c:25:70:27:b3:01:
f0:ee:b9:11:ba:70:13:eb:c2:66:15:05:de:2d:9c:64:de:84:
d8:97:60:b7:08:1e:86:c7:b5:b5:f8:0a:38:78:12:e8:26:35:
55:e8:7a:94:fc:5d:24:58:59:3a:8e:e0:b2:a5:07:62:a1:27:
b3:a2:18:34:81:8b:dc:99:e6:33:da:26:4e:a0:db:91:e4:6a:
9e:69:40:28:a6:7a:5d:85:83:78:86:52:82:33:05:22:30:96:
2a:33:03:be:d4:fc:32:7d:47:f7:30:16:50:ac:67:3c:ac:6a:
f4:c3:6f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIqSsGaG3OsInUBaxSg+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj
NzRhNWQwHhcNMjUwNjA5MTAwMDQ1WhcNMjUwNjEwMTAwMDQ1WjAzMTEwLwYDVQQD
EygwZjg5YTkzNWFiOWZlZGY5MWQ1MWZiOWRiYzcxMmM1ZDI4ZTA3YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNTFadgUxDqkwLe9MDTSFzJneJLX
7UbqwLy9nEh1seb4Qg7ICBc5SZmHUkUHJBtN7Q4kQjgBZ0LmwbJIx7duKny47QFJ
8AnFh0z05KrCJ+H3vXrcpkQ8ccmL4hFJ4DkMNVqcRAggjm5fpIEZuYfo9mR74W3R
rSts7p05k6z/YDgUBzr7suni9kBqa/2mE7R78oFWtktD4VN1GlKi6/e88oM0WMj9
1llneLnxidhnjHLOK0wlPDwdmPTZLaRyDD22IFB2vLP48HvMkKYS4qEra8OO8yyN
fljrcNAorafwB+9kxQulo/C05BGo7b2X3SRVdGGVG1/qgb5j9Lkd2UwZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+JqTWrn+35HVH7nbxxLF0o4HwfMB8GA1UdIwQY
MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt
YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh
LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklnHQsL5
60AALHrgf/XR+CrYdfQesy92b1NU2JrppMn1Q6e2ODtNWeRMhJKCpYNLeHWSFi+m
cthff/sNEyV/P1hqllG1rznuCYLrkAsQ8nrurlMG7eASIlIMFjdYFDu2+Nr6ylfH
nu73OOONTTJ9x0VFiBVGXr42Y7B5ELVZeBIJ01eH5K0W/jPpTCVwJ7MB8O65Ebpw
E+vCZhUF3i2cZN6E2Jdgtwgehse1tfgKOHgS6CY1Veh6lPxdJFhZOo7gsqUHYqEn
s6IYNIGL3JnmM9omTqDbkeRqnmlAKKZ6XYWDeIZSgjMFIjCWKjMDvtT8Mn1H9zAW
UKxnPKxq9MNvPw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:06:16 2025 by rpki-client