Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: DZGSxykrp58G9NjU4XirlqUmU5UUF2ya841Bn+kSMWU=
Subject key identifier: FD:55:07:D9:10:A4:9F:A4:93:79:1C:73:18:F0:33:55:5D:4E:68:0E
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019779E6C401670143AC4FF217027A0C9FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 10
Signing time: Mon 16 Jun 2025 18:00:55 +0000
Manifest this update: Mon 16 Jun 2025 18:00:55 +0000
Manifest next update: Tue 17 Jun 2025 18:00:55 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: WBgPS6YMz5WlXiQUDni7appXN51pV51cTp1jFD86wgs=)
2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:c4:01:67:01:43:ac:4f:f2:17:02:7a:0c:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Jun 16 18:00:55 2025 GMT
Not After : Jun 17 18:00:55 2025 GMT
Subject: CN=fd5507d910a49fa493791c7318f033555d4e680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:e9:9d:17:72:ec:66:11:91:cd:9a:95:86:
e8:00:8a:9b:85:7c:f6:e1:7b:46:e9:2f:6d:ae:f8:
bf:0c:8c:ed:9a:ba:a1:c8:58:ef:67:97:fd:65:c0:
cd:d6:14:c1:b7:0e:0f:62:6f:20:6c:e4:28:72:2a:
d5:4f:33:28:19:87:fe:ac:e2:48:ce:96:b5:f4:25:
cf:90:57:57:bb:46:b2:b4:93:33:8e:d2:da:ba:f5:
b2:77:96:fa:29:52:d1:5b:51:d6:90:8d:ae:e7:1c:
f1:a2:d3:7c:d0:d7:6a:7d:95:e3:41:ac:14:a4:28:
69:09:d4:d6:55:3c:e9:7f:a5:76:ed:70:dd:30:f0:
a0:4d:21:e6:f7:87:3b:e5:b5:e7:3e:be:11:3d:1d:
54:68:18:22:2e:26:31:55:6e:5e:09:a6:14:86:cc:
fb:a2:ed:e9:ce:6a:59:01:aa:cc:a9:57:71:ee:76:
35:25:d8:18:ab:61:45:e5:e3:3b:7f:f2:75:b7:67:
80:6d:88:58:e1:0b:d4:9c:68:6e:f3:69:4e:ba:00:
eb:e7:91:7d:e7:c8:6e:a8:88:f0:d1:e8:e9:0a:77:
16:a8:b4:d6:4e:7f:0f:15:89:ae:f5:ad:44:76:fb:
40:b7:79:d1:e8:e6:39:64:5f:a3:62:16:e0:1b:32:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:07:D9:10:A4:9F:A4:93:79:1C:73:18:F0:33:55:5D:4E:68:0E
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:43:8b:4e:64:ca:ab:0c:c6:d2:19:14:33:73:bd:19:d5:
cf:f7:1e:6d:fe:3d:31:76:60:9c:14:df:16:fd:31:8d:92:14:
89:72:26:72:c5:55:f1:e5:2e:cd:40:c5:65:e5:5a:74:82:f0:
2b:6e:95:78:c3:2e:14:94:89:67:ed:36:47:2e:61:ac:65:76:
71:64:55:2a:5a:b7:cf:95:b0:0d:ee:7b:1a:d3:2e:c1:32:6a:
ad:8d:d3:4a:3c:bc:3a:04:04:0e:e3:a9:d2:96:af:c9:f6:91:
ac:94:c4:03:64:c0:f5:7a:aa:86:58:bc:49:e3:db:86:91:55:
d3:91:61:af:26:35:d9:d0:ff:f1:01:63:64:84:35:3f:d4:90:
9b:cc:c0:03:2f:3a:cb:dc:71:18:93:f3:02:e0:1c:cc:d8:9f:
ae:cf:34:66:9c:1b:8c:f2:bb:e5:c0:52:cb:05:51:a5:3e:1d:
2d:fe:b8:fc:4d:54:8a:7c:d7:24:eb:88:c7:41:fb:00:df:f4:
29:ab:cd:bb:00:19:c2:9d:61:66:c1:8e:f9:f5:c6:d0:01:f3:
81:60:b0:eb:ba:08:02:bd:a2:69:ba:5c:80:43:e6:99:e3:33:
cd:ae:91:94:c8:dc:b6:66:4e:a9:06:f6:49:fc:3c:4c:10:cd:
11:b8:23:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd55sQBZwFDrE/yFwJ6DJ/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl
M2E5MGUwHhcNMjUwNjE2MTgwMDU1WhcNMjUwNjE3MTgwMDU1WjAzMTEwLwYDVQQD
EyhmZDU1MDdkOTEwYTQ5ZmE0OTM3OTFjNzMxOGYwMzM1NTVkNGU2ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmLpnRdy7GYRkc2alYboAIqbhXz2
4XtG6S9trvi/DIztmrqhyFjvZ5f9ZcDN1hTBtw4PYm8gbOQocirVTzMoGYf+rOJI
zpa19CXPkFdXu0aytJMzjtLauvWyd5b6KVLRW1HWkI2u5xzxotN80NdqfZXjQawU
pChpCdTWVTzpf6V27XDdMPCgTSHm94c75bXnPr4RPR1UaBgiLiYxVW5eCaYUhsz7
ou3pzmpZAarMqVdx7nY1JdgYq2FF5eM7f/J1t2eAbYhY4QvUnGhu82lOugDr55F9
58huqIjw0ejpCncWqLTWTn8PFYmu9a1EdvtAt3nR6OY5ZF+jYhbgGzJOqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1VB9kQpJ+kk3kccxjwM1VdTmgOMB8GA1UdIwQY
MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt
ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx
LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4BDi05k
yqsMxtIZFDNzvRnVz/cebf49MXZgnBTfFv0xjZIUiXImcsVV8eUuzUDFZeVadILw
K26VeMMuFJSJZ+02Ry5hrGV2cWRVKlq3z5WwDe57GtMuwTJqrY3TSjy8OgQEDuOp
0pavyfaRrJTEA2TA9Xqqhli8SePbhpFV05FhryY12dD/8QFjZIQ1P9SQm8zAAy86
y9xxGJPzAuAczNifrs80ZpwbjPK75cBSywVRpT4dLf64/E1UinzXJOuIx0H7AN/0
KavNuwAZwp1hZsGO+fXG0AHzgWCw67oIAr2iabpcgEPmmeMzza6RlMjctmZOqQb2
Sfw8TBDNEbgj4A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:10:54 2025 by rpki-client