Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: OAusQeKmtunxquGNQKJm2Ra0o7eQ59YJljB7eSr32yQ=
Subject key identifier: 47:AF:50:B8:02:3E:ED:F6:65:F6:A1:E1:5A:C6:C7:65:C4:6F:AB:9C
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 01974B1F80DE55AA6FBCF368A1D633760C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 0388
Signing time: Sat 07 Jun 2025 16:00:45 +0000
Manifest this update: Sat 07 Jun 2025 16:00:45 +0000
Manifest next update: Sun 08 Jun 2025 16:00:45 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: YqcKtD+ixpk2o078/iTfx9BUFSDp0VVI8KakOZtRthM=)
2: JNEydf2lKXnao8GrKqno19jXP6w.roa (hash: +0xX0M+yF7B+qU3xPS7RZz2tcDVRNPquvsVNbfH8B2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:80:de:55:aa:6f:bc:f3:68:a1:d6:33:76:0c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Jun 7 16:00:45 2025 GMT
Not After : Jun 8 16:00:45 2025 GMT
Subject: CN=47af50b8023eedf665f6a1e15ac6c765c46fab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:0b:a8:b8:d5:5b:1c:65:66:9f:38:c4:30:
36:f8:7f:88:7b:f2:8f:a7:ea:6b:cd:f2:d8:c8:8d:
00:d1:66:af:8f:65:6c:e8:5a:9d:00:04:54:01:d8:
b4:db:96:be:64:43:5a:11:e3:4e:2b:39:6d:59:06:
7a:0f:b0:6c:2b:7d:d6:dd:fd:7c:c5:28:c1:ec:58:
5e:b0:17:da:ec:a4:83:29:0f:5f:50:2e:51:61:9a:
c2:a8:8e:4d:17:72:46:fa:4f:f1:36:6a:4d:34:7a:
d8:e4:a2:6e:8d:6f:c7:9f:26:e3:1a:bb:d8:bb:ea:
d1:44:e7:18:07:8c:ae:ed:b1:52:fa:75:d6:ef:65:
c2:80:26:7a:7f:fb:59:c4:7f:6a:1f:b4:27:67:b5:
84:66:87:b3:ae:9a:48:1a:78:3b:f9:99:7a:01:a0:
c3:c0:39:79:a4:bf:9c:2a:eb:6b:9f:cc:80:65:d8:
20:4e:89:31:02:be:c3:9c:98:67:7c:9f:fd:4a:50:
36:1a:f4:dc:1e:bd:05:94:ac:06:bd:f9:11:e8:ce:
b7:ce:fb:98:0e:63:55:3b:40:99:6e:b8:78:d4:36:
ac:16:68:2c:c8:8d:79:6b:19:e0:30:80:60:2b:23:
0d:2d:c7:7b:03:a7:a8:99:e2:0d:79:d7:e8:32:09:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:50:B8:02:3E:ED:F6:65:F6:A1:E1:5A:C6:C7:65:C4:6F:AB:9C
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:30:12:cc:47:d5:81:de:fa:1f:d1:8f:a9:cc:1e:12:15:7f:
b5:3a:0a:14:5c:89:e5:d1:d4:a5:e4:44:82:d3:e9:46:ae:07:
e2:66:47:a6:38:cd:cc:cc:a0:a4:69:4e:7f:83:9f:48:22:8e:
d7:80:ce:ce:35:64:2b:64:53:e2:0e:72:aa:cf:48:3c:5e:26:
9e:65:f8:ce:9d:6c:e2:17:5b:ba:db:81:6c:08:e6:b2:ed:d4:
df:e4:e3:d7:1e:f3:05:cc:b8:19:e7:52:ad:8d:16:78:a0:ad:
84:26:3b:2d:06:95:d5:54:b4:70:c5:f8:39:ed:35:a1:c7:77:
28:3f:50:15:bf:50:ec:bf:d8:6b:0e:84:56:81:3a:d4:6a:3d:
b2:50:f8:41:09:ae:e2:12:19:22:45:ad:d0:ad:ce:0f:f9:3b:
36:5c:37:63:3b:88:47:83:28:07:30:63:04:f4:45:bb:4e:d7:
d9:e9:77:40:29:25:09:88:b0:37:8d:7e:05:79:0e:36:2c:94:
49:5c:9f:ad:89:c0:90:39:2b:0f:75:fa:99:93:2d:53:1a:85:
33:b8:5f:5e:9d:e9:5a:e2:13:d3:a3:1a:b6:5e:cb:e7:ba:9f:
4b:d0:32:54:26:21:4a:a0:dc:bd:84:72:78:9a:24:02:f1:64:
5d:f6:2f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH4DeVapvvPNoodYzdgwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjUwNjA3MTYwMDQ1WhcNMjUwNjA4MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg0N2FmNTBiODAyM2VlZGY2NjVmNmExZTE1YWM2Yzc2NWM0NmZhYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb8LqLjVWxxlZp84xDA2+H+Ie/KP
p+przfLYyI0A0Wavj2Vs6FqdAARUAdi025a+ZENaEeNOKzltWQZ6D7BsK33W3f18
xSjB7FhesBfa7KSDKQ9fUC5RYZrCqI5NF3JG+k/xNmpNNHrY5KJujW/HnybjGrvY
u+rRROcYB4yu7bFS+nXW72XCgCZ6f/tZxH9qH7QnZ7WEZoezrppIGng7+Zl6AaDD
wDl5pL+cKutrn8yAZdggTokxAr7DnJhnfJ/9SlA2GvTcHr0FlKwGvfkR6M63zvuY
DmNVO0CZbrh41DasFmgsyI15axngMIBgKyMNLcd7A6eomeINedfoMgnfRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEevULgCPu32Zfah4VrGx2XEb6ucMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczASzEfV
gd76H9GPqcweEhV/tToKFFyJ5dHUpeREgtPpRq4H4mZHpjjNzMygpGlOf4OfSCKO
14DOzjVkK2RT4g5yqs9IPF4mnmX4zp1s4hdbutuBbAjmsu3U3+Tj1x7zBcy4GedS
rY0WeKCthCY7LQaV1VS0cMX4Oe01ocd3KD9QFb9Q7L/Yaw6EVoE61Go9slD4QQmu
4hIZIkWt0K3OD/k7Nlw3YzuIR4MoBzBjBPRFu07X2el3QCklCYiwN41+BXkONiyU
SVyfrYnAkDkrD3X6mZMtUxqFM7hfXp3pWuIT06Matl7L57qfS9AyVCYhSqDcvYRy
eJokAvFkXfYvaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:57 2025 by rpki-client