Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: ZsP+e+ovtmXyBlIhSxJfj2JPNVTZUDR8ZxUI0AOFXIo=
Subject key identifier: 12:6D:0E:49:76:A9:3D:E6:9D:28:AF:34:C2:69:C3:83:85:D6:9A:E2
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 01976D3D8B0B1EBC511B17AF83C2DD2D961C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 1363
Signing time: Sat 14 Jun 2025 07:00:39 +0000
Manifest this update: Sat 14 Jun 2025 07:00:39 +0000
Manifest next update: Sun 15 Jun 2025 07:00:39 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: rLGe716gZvGY6gfYEgnEir5sfoYDBkI4olNhyAzzQdk=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:8b:0b:1e:bc:51:1b:17:af:83:c2:dd:2d:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jun 14 07:00:39 2025 GMT
Not After : Jun 15 07:00:39 2025 GMT
Subject: CN=126d0e4976a93de69d28af34c269c38385d69ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:d9:d8:ab:de:f3:06:6b:3a:3c:59:c6:cc:
99:c4:b4:e2:8e:d7:41:88:0c:c5:09:d2:27:56:f2:
47:c2:07:a0:36:da:53:85:ad:ff:5a:48:fd:03:0e:
5c:d9:33:36:d0:55:11:fb:e5:d0:5c:24:4b:27:e8:
d6:e8:b5:61:4f:d6:57:b9:c5:c8:08:99:85:9b:6d:
03:bd:c7:20:50:f8:24:90:02:e6:24:29:25:7e:75:
f7:4f:c2:ba:ed:46:01:bb:45:3c:a1:03:13:04:0a:
bb:5c:f9:18:6a:4e:bd:a2:c4:2d:9f:00:43:bb:5a:
9f:74:2e:c7:3e:df:63:9f:27:a7:d6:df:b5:3e:9a:
db:a1:6e:ca:0f:22:f5:5c:a4:d1:86:3e:bd:41:45:
9d:d2:a7:2a:b8:d1:f3:3e:5a:e7:fc:03:6d:94:fe:
b8:b7:9a:41:b1:39:1d:6f:74:48:25:24:92:0f:e5:
ca:47:e7:30:25:fc:e7:39:7e:dd:00:69:fd:67:94:
f8:64:98:87:24:56:83:55:d7:f3:90:f9:84:9d:80:
99:dd:f0:cf:a9:b8:ca:c8:79:65:52:fa:a3:ce:d4:
aa:62:c5:d0:af:6e:79:d2:15:bf:c4:6c:ea:5a:69:
b3:41:0f:74:f8:bf:cc:eb:12:d5:04:17:8a:8d:f7:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:0E:49:76:A9:3D:E6:9D:28:AF:34:C2:69:C3:83:85:D6:9A:E2
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:dd:49:1b:4f:ae:07:18:0d:57:db:e4:ca:e9:c4:a8:bb:
a2:a0:da:24:df:ff:cc:b0:8d:9b:45:7e:1a:7c:28:67:01:95:
e0:5c:ce:02:fb:55:bb:5c:43:8f:6a:d9:ce:b5:2f:e0:22:b7:
06:2c:07:a5:32:a4:cc:ae:23:44:9d:f0:38:24:4f:37:7a:55:
5f:d7:c2:22:49:98:de:a2:45:85:d0:21:39:3c:04:de:f8:bc:
f1:58:80:61:5c:9d:b7:ca:8a:f1:e4:2a:c7:5f:8b:02:6f:88:
73:d5:ce:46:8d:dd:5a:42:d2:5a:f6:22:d5:eb:09:cf:34:5a:
c1:b3:9c:6e:2f:fc:cb:b8:d2:b5:aa:1a:be:9c:a0:b0:ea:88:
30:82:54:84:1f:6f:6c:97:6e:69:7a:54:00:46:a7:6c:aa:5f:
b8:d2:b4:e5:fa:62:d8:cd:8b:3f:db:59:8c:a1:b1:3e:f7:6a:
36:92:dd:aa:d6:2a:9b:c6:e5:15:77:1b:e3:8b:81:61:8d:78:
3d:e5:43:14:eb:4d:2c:4a:76:f1:0f:4e:98:3f:8d:b4:bd:66:
49:39:ed:ec:67:12:3a:c7:bc:c7:4d:39:b3:4e:82:62:a7:3a:
0a:b8:05:32:50:df:61:f6:18:f6:52:de:ec:2d:0d:69:e8:a6:
fa:9f:b3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPYsLHrxRGxevg8LdLZYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi
ODk1Y2IwHhcNMjUwNjE0MDcwMDM5WhcNMjUwNjE1MDcwMDM5WjAzMTEwLwYDVQQD
EygxMjZkMGU0OTc2YTkzZGU2OWQyOGFmMzRjMjY5YzM4Mzg1ZDY5YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LDZ2Kve8wZrOjxZxsyZxLTijtdB
iAzFCdInVvJHwgegNtpTha3/Wkj9Aw5c2TM20FUR++XQXCRLJ+jW6LVhT9ZXucXI
CJmFm20DvccgUPgkkALmJCklfnX3T8K67UYBu0U8oQMTBAq7XPkYak69osQtnwBD
u1qfdC7HPt9jnyen1t+1PprboW7KDyL1XKTRhj69QUWd0qcquNHzPlrn/ANtlP64
t5pBsTkdb3RIJSSSD+XKR+cwJfznOX7dAGn9Z5T4ZJiHJFaDVdfzkPmEnYCZ3fDP
qbjKyHllUvqjztSqYsXQr2550hW/xGzqWmmzQQ90+L/M6xLVBBeKjffZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJtDkl2qT3mnSivNMJpw4OF1priMB8GA1UdIwQY
MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt
ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw
LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFLdSRtP
rgcYDVfb5MrpxKi7oqDaJN//zLCNm0V+GnwoZwGV4FzOAvtVu1xDj2rZzrUv4CK3
BiwHpTKkzK4jRJ3wOCRPN3pVX9fCIkmY3qJFhdAhOTwE3vi88ViAYVydt8qK8eQq
x1+LAm+Ic9XORo3dWkLSWvYi1esJzzRawbOcbi/8y7jStaoavpygsOqIMIJUhB9v
bJduaXpUAEanbKpfuNK05fpi2M2LP9tZjKGxPvdqNpLdqtYqm8blFXcb44uBYY14
PeVDFOtNLEp28Q9OmD+NtL1mSTnt7GcSOse8x005s06CYqc6CrgFMlDfYfYY9lLe
7C0Naeim+p+z6A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:53 2025 by rpki-client