Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: f0ABJYF/GG6KhYRuRBnDjWKvsneCnStBto4CadIR5Jw=
Subject key identifier: BE:3A:1D:19:E2:2D:87:19:04:C1:AC:D5:43:BA:16:50:28:AF:DB:03
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 01974AB18CB289168207B4CEBC0A3F7336BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 0C85
Signing time: Sat 07 Jun 2025 14:00:39 +0000
Manifest this update: Sat 07 Jun 2025 14:00:39 +0000
Manifest next update: Sun 08 Jun 2025 14:00:39 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: cjeGYpgZDPQNVvEysziEQc69spZ2tb4nMlXbef59ww0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:8c:b2:89:16:82:07:b4:ce:bc:0a:3f:73:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Jun 7 14:00:39 2025 GMT
Not After : Jun 8 14:00:39 2025 GMT
Subject: CN=be3a1d19e22d871904c1acd543ba165028afdb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:6a:33:c5:12:7e:f9:8d:50:f0:8d:99:4d:
f5:91:5a:9d:9b:54:16:65:80:5c:0a:a8:6b:64:01:
56:1d:5f:34:ab:19:44:98:49:e1:39:58:fb:72:e5:
e7:12:96:44:f8:91:9c:1e:aa:93:af:44:28:81:22:
4d:fb:20:de:b4:08:6b:1b:17:c3:14:36:7f:f8:3c:
54:5c:04:9d:87:f2:99:58:50:38:91:d0:86:d5:10:
a2:4d:6d:49:51:5a:89:d7:45:42:50:61:20:5d:f7:
ac:f9:93:80:88:1b:84:11:62:7b:56:11:2e:07:fe:
79:a3:73:bd:41:6f:12:01:d6:75:5c:6c:3d:16:0e:
54:0e:55:ac:d9:ea:1b:5f:8d:80:21:85:a7:67:08:
1d:fd:f4:fc:02:9b:d1:fd:2b:fe:1e:b6:59:c1:4e:
2a:bc:9b:8c:b5:5f:c0:79:86:40:6c:f5:53:17:dc:
84:49:f1:40:76:9a:c6:1e:8b:8e:05:42:07:54:67:
86:1c:d5:ef:1a:80:e7:20:69:57:82:56:8a:92:20:
37:82:13:ff:dd:75:c6:8b:86:17:00:b2:1a:b4:ac:
16:5b:db:d3:16:47:ef:1e:0e:43:9f:c4:2e:bd:a2:
12:fd:8e:ca:49:34:83:7c:8c:0a:1d:98:95:62:ba:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:1D:19:E2:2D:87:19:04:C1:AC:D5:43:BA:16:50:28:AF:DB:03
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:75:27:2c:ad:40:cf:5b:b1:6a:7d:ec:be:c3:4d:03:4d:76:
a0:eb:85:2e:cb:aa:c3:d0:48:8e:b4:d5:b4:e1:6d:04:d6:73:
8e:04:b3:9a:a0:52:89:b6:be:c6:84:47:10:1b:ea:80:26:9d:
bb:30:a4:ac:0b:4e:dc:34:da:38:0d:0f:ad:b0:21:91:b1:68:
0c:83:1a:a1:49:a1:5a:81:21:26:82:8d:67:f3:ae:3a:ab:06:
7b:0d:dc:3c:59:d6:c8:ce:dd:7c:8f:2a:68:c8:87:15:85:8e:
a4:ea:44:dc:71:72:fc:d6:b2:4f:b2:3b:38:f1:57:1c:63:9b:
d8:d4:5d:4e:9b:ba:a8:5a:55:42:13:17:ca:21:8e:9d:72:f0:
ee:4b:7f:a3:b3:6b:14:92:d4:1d:35:6d:15:3b:7c:10:03:ce:
c8:ab:49:5a:bb:48:88:a2:9c:25:f4:b4:8d:e8:c1:bc:4d:c8:
5d:3b:0a:9d:1b:76:c1:85:69:94:1f:52:75:cc:4a:28:4a:c0:
ff:c7:52:d8:a8:30:2f:bf:cf:59:6c:f3:65:1e:cb:a4:ee:71:
48:90:24:4c:56:91:5b:8d:bf:46:37:f0:93:5b:d1:e1:d9:14:
5d:36:42:78:0e:01:b0:f1:1c:85:02:f7:03:d1:88:6e:82:8e:
e3:0a:f1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsYyyiRaCB7TOvAo/cza7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjkxMGI0NDRkZTk5ZmE4MWMzOTM1NTBjOTdlNGEzMjBi
Y2U4MTIwHhcNMjUwNjA3MTQwMDM5WhcNMjUwNjA4MTQwMDM5WjAzMTEwLwYDVQQD
EyhiZTNhMWQxOWUyMmQ4NzE5MDRjMWFjZDU0M2JhMTY1MDI4YWZkYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPJqM8USfvmNUPCNmU31kVqdm1QW
ZYBcCqhrZAFWHV80qxlEmEnhOVj7cuXnEpZE+JGcHqqTr0QogSJN+yDetAhrGxfD
FDZ/+DxUXASdh/KZWFA4kdCG1RCiTW1JUVqJ10VCUGEgXfes+ZOAiBuEEWJ7VhEu
B/55o3O9QW8SAdZ1XGw9Fg5UDlWs2eobX42AIYWnZwgd/fT8ApvR/Sv+HrZZwU4q
vJuMtV/AeYZAbPVTF9yESfFAdprGHouOBUIHVGeGHNXvGoDnIGlXglaKkiA3ghP/
3XXGi4YXALIatKwWW9vTFkfvHg5Dn8QuvaIS/Y7KSTSDfIwKHZiVYrod0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL46HRniLYcZBMGs1UO6FlAor9sDMB8GA1UdIwQY
MBaAFNhpELRE3pn6gcOTVQyX5KMgvOgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAt
ODY5MzFiZmUzZWVhLzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAtODY5MzFiZmUzZWVh
LzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3UnLK1A
z1uxan3svsNNA012oOuFLsuqw9BIjrTVtOFtBNZzjgSzmqBSiba+xoRHEBvqgCad
uzCkrAtO3DTaOA0PrbAhkbFoDIMaoUmhWoEhJoKNZ/OuOqsGew3cPFnWyM7dfI8q
aMiHFYWOpOpE3HFy/NayT7I7OPFXHGOb2NRdTpu6qFpVQhMXyiGOnXLw7kt/o7Nr
FJLUHTVtFTt8EAPOyKtJWrtIiKKcJfS0jejBvE3IXTsKnRt2wYVplB9SdcxKKErA
/8dS2KgwL7/PWWzzZR7LpO5xSJAkTFaRW42/Rjfwk1vR4dkUXTZCeA4BsPEchQL3
A9GIboKO4wrxUw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:14:17 2025 by rpki-client