Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: l+yqNGEI3O5GUOfa9qjbrSEc8toVtu6evIi6PyrWojE=
Subject key identifier: C7:E9:BC:84:99:FE:CA:1B:F2:62:21:C7:AC:D3:1A:C1:35:D6:72:06
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 01976A05E38A34B3CE10E53EDA773CD921DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 14F0
Signing time: Fri 13 Jun 2025 16:01:00 +0000
Manifest this update: Fri 13 Jun 2025 16:01:00 +0000
Manifest next update: Sat 14 Jun 2025 16:01:00 +0000
Files and hashes: 1: WWNEma98vqvt3aWub4KvZrisRPY.roa (hash: 8ej/FxtmoHvT2+4JYPncO9OF+5JwUWMEm2sRynTw/0U=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: tjCITmA2qMFXihPxy7pdd84nBc8+fErfojlRS9cKhA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e3:8a:34:b3:ce:10:e5:3e:da:77:3c:d9:21:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jun 13 16:01:00 2025 GMT
Not After : Jun 14 16:01:00 2025 GMT
Subject: CN=c7e9bc8499feca1bf26221c7acd31ac135d67206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:e2:9e:b1:78:50:03:3c:1a:17:fe:99:88:
2c:bb:fe:10:46:8d:9f:21:e1:9c:1c:21:74:19:33:
06:4c:fd:17:6e:06:6f:0e:b6:8a:4a:21:4a:dd:74:
72:12:92:67:dc:33:2d:de:f0:72:f1:54:ee:0e:61:
24:f0:92:2d:e4:7a:25:e9:f4:7b:c5:46:bb:54:24:
85:f8:2e:3f:d0:b9:9b:0e:c3:96:4e:0d:b0:74:cd:
90:14:b3:86:c8:ac:d2:76:cc:eb:f6:ed:4a:13:4f:
9d:b0:bf:a2:a5:4c:46:bb:62:ec:62:bc:bd:3b:a2:
ce:33:28:eb:b3:ad:8a:b5:0b:8a:80:78:74:c6:59:
3f:ad:df:44:21:76:e8:c8:c2:ac:d6:07:fd:04:65:
92:4f:c5:10:2c:12:b7:08:14:8e:23:72:14:9c:60:
13:a5:b0:22:bd:5e:03:61:42:37:d6:f6:8b:c0:cc:
5c:1c:0b:04:f2:e2:47:35:e1:5a:20:cc:2a:80:52:
13:db:4e:c7:91:f4:02:a5:f0:f7:e5:59:9d:63:6a:
c4:f8:3b:b0:4e:51:04:17:28:8b:75:a1:98:c1:09:
65:b6:6f:08:4a:e0:17:e0:cd:bf:59:58:c2:fa:b2:
3a:f6:06:c2:da:d5:92:a5:36:12:d4:b0:14:7e:7b:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:BC:84:99:FE:CA:1B:F2:62:21:C7:AC:D3:1A:C1:35:D6:72:06
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:56:70:09:39:14:69:f2:98:8e:ee:a5:ad:43:d8:e0:b6:
81:d1:d7:85:90:9b:aa:d3:fb:b1:15:02:ef:82:19:c3:15:97:
cb:37:0e:fc:53:d2:94:ca:e1:25:8b:cc:b6:bb:9a:57:62:08:
37:de:e8:3f:b0:15:12:08:89:65:b3:4e:d5:1e:50:35:7a:0b:
8b:61:16:ab:8e:51:6e:2b:51:20:f7:99:8d:fb:09:9d:3f:2e:
22:83:75:4a:e5:c7:1f:cf:c3:7c:d7:a4:53:0c:96:a2:d2:e1:
17:1e:d2:56:4a:07:bb:1d:be:bf:79:34:b5:4b:e7:b8:29:90:
6d:24:70:72:88:da:ca:57:f2:7b:1c:46:c4:75:30:0a:10:9f:
25:8f:32:b0:4f:cd:d5:1c:a9:c4:58:18:ce:ff:8f:35:a8:d3:
c7:33:0f:b1:69:59:4c:45:6e:d8:e4:08:69:61:02:11:9c:d4:
22:e7:76:c1:f8:ad:59:d3:93:28:3a:12:fa:42:5f:15:92:62:
2b:7e:2b:ca:4f:8a:20:65:28:5f:77:5a:0b:f1:2e:42:ba:7b:
9d:3e:73:44:35:58:f9:9d:71:fb:03:88:dc:dc:3f:3a:b9:91:
e9:70:4a:e4:c2:41:3a:a5:c7:6d:30:b2:ec:1d:24:a5:c4:52:
43:93:da:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBeOKNLPOEOU+2nc82SHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNmIzMzYxYTFhMmEwMGRiY2UzMTkwMTk4MjdmZWJiNzE1
YmQwNDQwHhcNMjUwNjEzMTYwMTAwWhcNMjUwNjE0MTYwMTAwWjAzMTEwLwYDVQQD
EyhjN2U5YmM4NDk5ZmVjYTFiZjI2MjIxYzdhY2QzMWFjMTM1ZDY3MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll/inrF4UAM8Ghf+mYgsu/4QRo2f
IeGcHCF0GTMGTP0XbgZvDraKSiFK3XRyEpJn3DMt3vBy8VTuDmEk8JIt5Hol6fR7
xUa7VCSF+C4/0LmbDsOWTg2wdM2QFLOGyKzSdszr9u1KE0+dsL+ipUxGu2LsYry9
O6LOMyjrs62KtQuKgHh0xlk/rd9EIXboyMKs1gf9BGWST8UQLBK3CBSOI3IUnGAT
pbAivV4DYUI31vaLwMxcHAsE8uJHNeFaIMwqgFIT207HkfQCpfD35VmdY2rE+Duw
TlEEFyiLdaGYwQlltm8ISuAX4M2/WVjC+rI69gbC2tWSpTYS1LAUfntC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfpvISZ/sob8mIhx6zTGsE11nIGMB8GA1UdIwQY
MBaAFP9rM2GhoqANvOMZAZgn/rtxW9BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUt
ZjYyMzIwOTUxYTM2LzEvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUtZjYyMzIwOTUxYTM2
LzEvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAB1WcAk5
FGnymI7upa1D2OC2gdHXhZCbqtP7sRUC74IZwxWXyzcO/FPSlMrhJYvMtruaV2II
N97oP7AVEgiJZbNO1R5QNXoLi2EWq45RbitRIPeZjfsJnT8uIoN1SuXHH8/DfNek
UwyWotLhFx7SVkoHux2+v3k0tUvnuCmQbSRwcojaylfyexxGxHUwChCfJY8ysE/N
1RypxFgYzv+PNajTxzMPsWlZTEVu2OQIaWECEZzUIud2wfitWdOTKDoS+kJfFZJi
K34ryk+KIGUoX3daC/EuQrp7nT5zRDVY+Z1x+wOI3Nw/OrmR6XBK5MJBOqXHbTCy
7B0kpcRSQ5PaCA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:54 2025 by rpki-client