Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: B+LTcehs591JBZRZ0/mGQHCYtlqzYdxkhu/cQlgbX44=
Subject key identifier: 9C:73:7F:09:93:BF:5D:A4:75:B3:96:62:22:8A:7B:E7:B4:52:9F:AF
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019747B0B995A1C15B8365720F9CF2C9E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0E4E
Signing time: Sat 07 Jun 2025 00:00:53 +0000
Manifest this update: Sat 07 Jun 2025 00:00:53 +0000
Manifest next update: Sun 08 Jun 2025 00:00:53 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: k/rj3quLYvuet+zVbK5g4NesVo9K9zlOvGAv+Hd9pRo=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:b9:95:a1:c1:5b:83:65:72:0f:9c:f2:c9:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jun 7 00:00:53 2025 GMT
Not After : Jun 8 00:00:53 2025 GMT
Subject: CN=9c737f0993bf5da475b39662228a7be7b4529faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:e0:eb:76:7d:40:93:f0:9a:eb:a6:05:0a:
09:db:6e:83:c3:96:46:05:77:51:05:7a:1d:72:a4:
13:b4:3e:98:3f:1f:06:0a:81:ac:0d:89:d3:08:66:
73:a8:4b:e3:48:21:e5:77:d6:6f:49:c0:f8:37:31:
dd:33:77:39:3f:52:b0:55:a6:2d:34:2c:dc:24:f8:
7a:ba:6b:99:6f:96:d7:ca:74:ac:9e:bc:7b:e8:93:
1a:7a:14:f6:ef:ce:e9:ab:50:f7:57:3e:c6:7e:92:
ca:48:8b:7f:38:6c:5a:3a:59:eb:16:79:95:a8:f5:
00:4e:ef:a6:da:f4:5d:71:db:9f:14:10:8b:c4:53:
16:14:87:1c:b2:cc:1f:f4:90:40:99:e1:19:99:81:
39:65:44:72:82:d5:e7:0d:f7:d7:ca:2d:86:d8:80:
2e:69:35:0e:b4:fb:f1:9f:c7:ba:07:7a:d9:9a:12:
ac:8e:b2:d4:06:6f:8c:ca:90:f4:1a:fd:8c:67:37:
fb:b5:bc:9b:f0:cd:53:56:95:03:9d:22:54:ca:c1:
23:40:f9:f5:c9:45:dd:09:73:42:d1:d0:c6:2c:3d:
d3:20:95:c5:52:a0:f9:d5:6b:fe:28:0a:b3:25:72:
65:60:d8:4a:57:0c:07:33:99:b4:d5:4a:6f:bd:cc:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:7F:09:93:BF:5D:A4:75:B3:96:62:22:8A:7B:E7:B4:52:9F:AF
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:29:7a:5f:5d:c6:35:5f:90:dc:fb:62:e5:9e:78:d3:c0:1d:
56:97:ef:a6:d3:6c:61:e0:a5:ce:2d:4a:4a:22:61:a9:74:13:
48:62:c7:87:e4:4c:9c:91:a3:cb:29:c6:5c:67:e2:a8:3d:01:
03:37:04:02:7f:bb:b1:78:d9:e0:51:58:bc:0d:22:ce:bd:3e:
f3:63:a7:5f:58:14:a8:22:bb:b2:15:ff:3e:92:e9:91:4d:8b:
04:a2:54:d4:5b:98:f7:c5:50:e1:9f:7e:43:4e:fb:00:f3:ea:
9e:19:20:7f:8a:44:52:1d:d2:dd:3b:e4:eb:09:80:22:8d:25:
f9:43:06:dc:22:bc:e3:90:73:8a:e1:e9:c2:29:e3:4d:e0:3a:
a0:36:c4:2b:b7:af:a0:68:73:be:c6:7e:46:bf:7f:96:be:b7:
70:e6:86:db:10:5b:58:d9:ca:83:91:b1:95:1f:39:90:65:4b:
30:60:17:33:5f:74:ab:76:70:91:6f:af:c7:e9:b6:46:f3:b7:
8d:57:25:1b:a6:40:03:2f:87:bb:73:6d:52:6b:3d:38:f8:9d:
35:25:56:3f:04:e6:28:9d:b7:ff:55:f0:da:3d:19:fe:ed:6f:
b6:c1:97:63:90:b9:ac:2c:07:75:51:27:4e:c3:d1:c7:f7:4a:
ca:8e:bc:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsLmVocFbg2VyD5zyyecFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4
NzA3NmUwHhcNMjUwNjA3MDAwMDUzWhcNMjUwNjA4MDAwMDUzWjAzMTEwLwYDVQQD
Eyg5YzczN2YwOTkzYmY1ZGE0NzViMzk2NjIyMjhhN2JlN2I0NTI5ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PPg63Z9QJPwmuumBQoJ226Dw5ZG
BXdRBXodcqQTtD6YPx8GCoGsDYnTCGZzqEvjSCHld9ZvScD4NzHdM3c5P1KwVaYt
NCzcJPh6umuZb5bXynSsnrx76JMaehT2787pq1D3Vz7GfpLKSIt/OGxaOlnrFnmV
qPUATu+m2vRdcdufFBCLxFMWFIccsswf9JBAmeEZmYE5ZURygtXnDffXyi2G2IAu
aTUOtPvxn8e6B3rZmhKsjrLUBm+MypD0Gv2MZzf7tbyb8M1TVpUDnSJUysEjQPn1
yUXdCXNC0dDGLD3TIJXFUqD51Wv+KAqzJXJlYNhKVwwHM5m01UpvvcyXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxzfwmTv12kdbOWYiKKe+e0Up+vMB8GA1UdIwQY
MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt
MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3
LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSl6X13G
NV+Q3Pti5Z5408AdVpfvptNsYeClzi1KSiJhqXQTSGLHh+RMnJGjyynGXGfiqD0B
AzcEAn+7sXjZ4FFYvA0izr0+82OnX1gUqCK7shX/PpLpkU2LBKJU1FuY98VQ4Z9+
Q077APPqnhkgf4pEUh3S3Tvk6wmAIo0l+UMG3CK845BziuHpwinjTeA6oDbEK7ev
oGhzvsZ+Rr9/lr63cOaG2xBbWNnKg5GxlR85kGVLMGAXM190q3ZwkW+vx+m2RvO3
jVclG6ZAAy+Hu3NtUms9OPidNSVWPwTmKJ23/1Xw2j0Z/u1vtsGXY5C5rCwHdVEn
TsPRx/dKyo68qA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:53 2025 by rpki-client