
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: 0TZMytbfhQaF4xm6HDJHKbGHj2n+o6ijSsw8ebJCxdI=
Subject key identifier: E7:08:DB:0F:99:72:B5:9B:22:6F:DD:F0:93:01:13:AD:5F:39:B2:CC
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019676E80A4116D82E7DC5351144D4A4D6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1520
Signing time: Sun 27 Apr 2025 11:00:40 +0000
Manifest this update: Sun 27 Apr 2025 11:00:40 +0000
Manifest next update: Mon 28 Apr 2025 11:00:40 +0000
Files and hashes: 1: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: GJKGEJKthILAye0PLqXoDDpwzVKE9HznNK0o9dSdW5s=)
2: QwB_J4IBjr_kwpZ0DSZt7jLyFUw.roa (hash: xjQoVVO98cxf92eXukztlmvd0mAJHZVRoWG3GH3edIU=)
3: iO6yZ5D7of0MFaqogZYemiuZ76w.roa (hash: PHTDVbEdKwH0LDJ7ITv8L3fxTqXrLT8N8JGzjDrPDFE=)
4: noQO1tLrNCKz3bIWnBbDMmvuYLg.roa (hash: hYTtEju7KkB6LYquIBvGjeZyYymRK8/pFRz4XyGZMT8=)
5: qWeBIgMT9yofaevmnsJv-k3J7gM.roa (hash: OVmNg3h2HayVISC+svzIkwU6u8HmPx4SN/OehOmAqgY=)
6: v5y-XO_c3BUL4I2vKl0yvM3sR48.roa (hash: job18wRUBRjomyukO0QxaFg1pEdwxYB+4rsX0iFAoJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:0a:41:16:d8:2e:7d:c5:35:11:44:d4:a4:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Apr 27 11:00:40 2025 GMT
Not After : Apr 28 11:00:40 2025 GMT
Subject: CN=e708db0f9972b59b226fddf0930113ad5f39b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:92:f8:cf:12:f8:8f:87:11:fc:54:4e:f2:
c0:9f:fb:59:49:f0:19:6e:05:e4:83:33:68:de:d0:
bb:db:a3:e6:66:6e:a7:95:b8:ea:64:71:8e:5f:d2:
49:71:20:f9:aa:ac:52:40:85:ba:a3:ed:d9:2d:86:
14:e5:1c:3b:d9:c5:34:82:f1:22:c8:d9:1d:63:e7:
6d:ea:58:8d:3a:c9:21:44:9f:2f:eb:93:61:9b:f2:
d5:2a:2c:0a:35:7a:67:f1:3f:53:fa:d2:3a:a8:c7:
d6:45:6d:68:b4:a4:63:01:fe:af:a6:e9:08:26:e4:
b6:b7:0c:9f:79:fd:0c:4e:93:44:90:e5:bf:20:b0:
50:0b:9c:bb:44:c2:9a:9a:2c:5a:20:96:61:9e:f4:
52:c5:66:c1:da:de:68:c8:99:ef:0b:08:78:6a:a4:
66:3f:c6:59:19:2f:54:02:4d:82:65:aa:fc:0b:0e:
3b:c4:1c:08:83:50:53:57:2f:32:41:86:69:56:49:
de:49:d3:63:6b:14:c1:8c:1d:8e:72:ed:bc:41:f4:
ee:b6:63:da:7b:03:a4:0a:08:c2:84:52:c7:9c:54:
45:52:36:95:48:09:53:39:17:0d:2f:b7:17:46:af:
d1:ab:46:dc:8a:c5:76:27:bd:a0:fd:15:d2:aa:80:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:DB:0F:99:72:B5:9B:22:6F:DD:F0:93:01:13:AD:5F:39:B2:CC
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6c:b9:93:ac:98:5c:b5:d2:88:27:c1:38:55:a5:0f:c3:de:
51:ec:ee:b4:e3:3f:de:20:db:cb:5a:29:64:11:de:78:5e:b8:
44:fb:a3:c5:5e:44:1b:45:9c:19:17:ef:86:87:d6:e0:c5:56:
ed:85:04:b5:f3:e0:44:4d:46:75:f8:6f:a8:fe:48:c1:ea:61:
f7:18:3a:72:04:91:19:eb:cc:f1:7d:5f:25:06:2b:a7:c2:46:
4b:99:3c:1f:42:c9:c6:03:21:9e:24:fc:99:48:b1:40:34:39:
7f:21:3d:e6:59:ae:6f:2d:3a:9b:fd:30:1a:54:00:78:38:f0:
42:c3:31:d6:bc:2c:8d:c0:4b:a1:b4:d1:4c:45:6b:32:8c:d7:
43:e5:fb:cf:61:96:de:f3:05:3d:74:bd:26:ca:27:07:4d:df:
bf:d8:7b:df:5c:2e:eb:b8:37:ee:74:1e:31:e8:ab:74:0d:fd:
0c:82:9a:15:55:89:56:03:56:b3:07:11:d2:57:76:7c:36:03:
16:2a:53:c3:4b:44:30:da:68:2a:c7:35:3b:08:fa:5f:23:7f:
39:29:cb:2b:22:9b:50:2a:17:77:b0:30:49:d0:4d:16:9f:f8:
52:ec:6a:6e:d5:ed:87:02:34:f4:fc:9e:99:8d:82:6d:4b:55:
b8:d8:24:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26ApBFtgufcU1EUTUpNbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2
YzQwZmQwHhcNMjUwNDI3MTEwMDQwWhcNMjUwNDI4MTEwMDQwWjAzMTEwLwYDVQQD
EyhlNzA4ZGIwZjk5NzJiNTliMjI2ZmRkZjA5MzAxMTNhZDVmMzliMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBSS+M8S+I+HEfxUTvLAn/tZSfAZ
bgXkgzNo3tC726PmZm6nlbjqZHGOX9JJcSD5qqxSQIW6o+3ZLYYU5Rw72cU0gvEi
yNkdY+dt6liNOskhRJ8v65Nhm/LVKiwKNXpn8T9T+tI6qMfWRW1otKRjAf6vpukI
JuS2twyfef0MTpNEkOW/ILBQC5y7RMKamixaIJZhnvRSxWbB2t5oyJnvCwh4aqRm
P8ZZGS9UAk2CZar8Cw47xBwIg1BTVy8yQYZpVkneSdNjaxTBjB2Ocu28QfTutmPa
ewOkCgjChFLHnFRFUjaVSAlTORcNL7cXRq/Rq0bcisV2J72g/RXSqoCkGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcI2w+ZcrWbIm/d8JMBE61fObLMMB8GA1UdIwQY
MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt
Yzc4NjkxMjg1ODJjLzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj
LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWy5k6yY
XLXSiCfBOFWlD8PeUezutOM/3iDby1opZBHeeF64RPujxV5EG0WcGRfvhofW4MVW
7YUEtfPgRE1GdfhvqP5Iweph9xg6cgSRGevM8X1fJQYrp8JGS5k8H0LJxgMhniT8
mUixQDQ5fyE95lmuby06m/0wGlQAeDjwQsMx1rwsjcBLobTRTEVrMozXQ+X7z2GW
3vMFPXS9JsonB03fv9h731wu67g37nQeMeirdA39DIKaFVWJVgNWswcR0ld2fDYD
FipTw0tEMNpoKsc1Owj6XyN/OSnLKyKbUCoXd7AwSdBNFp/4UuxqbtXthwI09Pye
mY2CbUtVuNgkmA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:23:42 2025 by rpki-client