Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: TX0dkjQXD14RVXSmxqX9Js82GGT7X3qaoKQt9tz+m2k=
Subject key identifier: 41:04:BB:D9:D2:DA:01:04:98:13:A1:A8:94:D6:29:C5:C8:78:D4:5B
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 01974A7B2E4FA5540DC74CB1801D49795BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0BE8
Signing time: Sat 07 Jun 2025 13:01:15 +0000
Manifest this update: Sat 07 Jun 2025 13:01:15 +0000
Manifest next update: Sun 08 Jun 2025 13:01:15 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: tCmCCH5xPo3RhcE0lI67V2vvwqc6u/HiqeubgpHxzKU=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:2e:4f:a5:54:0d:c7:4c:b1:80:1d:49:79:5b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jun 7 13:01:15 2025 GMT
Not After : Jun 8 13:01:15 2025 GMT
Subject: CN=4104bbd9d2da01049813a1a894d629c5c878d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:e7:b8:41:87:80:8a:ba:31:76:b8:a6:71:
5b:e3:9d:4c:89:4b:cd:1a:41:cc:cf:de:f6:01:05:
89:4a:41:6d:d5:85:12:de:20:1e:93:d5:43:4b:27:
6d:5b:c6:b4:89:94:26:c6:f1:ee:85:0d:ba:b0:4e:
07:66:73:0b:25:f2:5b:2b:c8:aa:db:c5:e2:34:29:
89:aa:3b:18:21:44:6f:57:02:27:27:a0:b9:c1:39:
61:3c:b9:ef:dd:76:21:8c:75:4f:d5:16:4c:fa:bc:
34:b3:86:fe:ea:fd:43:16:cc:22:63:9f:7a:56:82:
f9:94:07:de:10:ba:34:e7:7e:ba:c7:be:0f:7e:68:
0b:c2:98:25:75:97:10:51:96:23:7e:b9:64:80:ba:
5d:1a:ca:2b:28:02:4d:01:94:10:ae:08:f9:57:7a:
3b:44:ba:8d:99:f8:9e:ff:20:e3:a6:f3:bf:3d:94:
dd:5e:cd:59:fa:11:94:d4:60:df:6b:6b:66:f8:5d:
34:df:3c:12:29:9d:8f:8f:94:a4:6a:c1:54:1c:33:
9b:7e:d1:dc:40:23:eb:a7:da:91:0d:8a:95:e3:e4:
74:d2:ea:ac:3c:4a:15:0b:f3:65:16:fc:f0:2b:58:
6b:e4:98:86:18:9a:da:b2:01:3d:4e:e1:5e:8b:aa:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:BB:D9:D2:DA:01:04:98:13:A1:A8:94:D6:29:C5:C8:78:D4:5B
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:89:71:b9:57:58:14:c7:2b:f4:92:b8:ef:ef:9d:be:50:
4b:2f:fb:ba:3e:d1:2a:0d:2b:b3:d1:25:e6:6c:f8:bc:52:a7:
8d:ca:ee:fa:60:1f:37:00:8e:5c:ce:e9:1a:30:c5:48:49:f1:
1a:da:14:41:24:e8:e0:e9:b9:3b:be:73:5e:dc:ae:5d:ae:ad:
8b:88:11:7c:4c:49:96:33:f9:11:d0:83:52:57:b7:bf:a1:6c:
b0:a2:8d:36:79:89:3f:22:69:5e:70:23:54:2a:34:37:75:25:
17:72:01:5c:80:0f:83:a2:f3:14:a9:c5:fe:60:98:e0:74:ec:
28:21:1c:b1:31:c4:56:7d:2e:28:63:7f:10:67:4e:1c:c6:92:
3e:f7:96:5b:64:0a:78:ee:2a:ac:8d:0d:1d:b8:54:b3:07:46:
9a:af:17:b0:0d:33:09:0d:ed:fd:33:66:bf:c1:68:85:d5:6d:
a1:e4:5a:12:6d:9f:d7:df:7c:ce:68:5e:f6:87:ff:c4:4c:2d:
87:22:7e:d6:88:99:4f:12:cf:b5:bb:be:15:69:b7:6b:3b:95:
21:d3:14:1a:df:2e:1e:de:b6:b6:24:41:cd:24:d9:1a:35:e2:
75:02:de:c5:93:a4:6a:55:75:73:00:a6:1c:91:c7:68:f0:6f:
50:df:b6:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKey5PpVQNx0yxgB1JeVv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjUwNjA3MTMwMTE1WhcNMjUwNjA4MTMwMTE1WjAzMTEwLwYDVQQD
Eyg0MTA0YmJkOWQyZGEwMTA0OTgxM2ExYTg5NGQ2MjljNWM4NzhkNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiznuEGHgIq6MXa4pnFb451MiUvN
GkHMz972AQWJSkFt1YUS3iAek9VDSydtW8a0iZQmxvHuhQ26sE4HZnMLJfJbK8iq
28XiNCmJqjsYIURvVwInJ6C5wTlhPLnv3XYhjHVP1RZM+rw0s4b+6v1DFswiY596
VoL5lAfeELo05366x74PfmgLwpgldZcQUZYjfrlkgLpdGsorKAJNAZQQrgj5V3o7
RLqNmfie/yDjpvO/PZTdXs1Z+hGU1GDfa2tm+F003zwSKZ2Pj5SkasFUHDObftHc
QCPrp9qRDYqV4+R00uqsPEoVC/NlFvzwK1hr5JiGGJrasgE9TuFei6pdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEEu9nS2gEEmBOhqJTWKcXIeNRbMB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr+JcblX
WBTHK/SSuO/vnb5QSy/7uj7RKg0rs9El5mz4vFKnjcru+mAfNwCOXM7pGjDFSEnx
GtoUQSTo4Om5O75zXtyuXa6ti4gRfExJljP5EdCDUle3v6FssKKNNnmJPyJpXnAj
VCo0N3UlF3IBXIAPg6LzFKnF/mCY4HTsKCEcsTHEVn0uKGN/EGdOHMaSPveWW2QK
eO4qrI0NHbhUswdGmq8XsA0zCQ3t/TNmv8FohdVtoeRaEm2f1998zmhe9of/xEwt
hyJ+1oiZTxLPtbu+FWm3azuVIdMUGt8uHt62tiRBzSTZGjXidQLexZOkalV1cwCm
HJHHaPBvUN+2ww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:39 2025 by rpki-client