Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: NI6XoZdNSFEcdijU/3eTie3dVNbXO4AfCm+RfsU5Hbg=
Subject key identifier: 02:B8:EE:F7:E5:BB:42:87:AD:1F:EC:C6:4E:0C:33:35:47:CA:1E:5A
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0197790AAAD31B32D48376B10EE6F4BCE534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 04B0
Signing time: Mon 16 Jun 2025 14:00:31 +0000
Manifest this update: Mon 16 Jun 2025 14:00:31 +0000
Manifest next update: Tue 17 Jun 2025 14:00:31 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: VF9gm2ZdsfVhkjwH0aRdcxYlETOLCE9xr1WmmfTXzdU=)
2: 2ivwdlO6NCnABRC9kvr6gLpW3_c.roa (hash: pNmKWv8L1NuyZyxU5cRcvqYqmxpaVqyNi8Y/MELNu7M=)
3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:aa:d3:1b:32:d4:83:76:b1:0e:e6:f4:bc:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 16 14:00:31 2025 GMT
Not After : Jun 17 14:00:31 2025 GMT
Subject: CN=02b8eef7e5bb4287ad1fecc64e0c333547ca1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:2f:15:a8:08:c9:43:11:f7:8c:65:e6:e1:
22:d6:6b:84:6e:cc:b8:35:5b:e8:5a:c1:80:c5:9b:
30:5d:48:b0:3f:6d:01:28:da:56:35:7f:29:a1:c4:
67:66:7d:c0:e4:7c:da:c4:7d:04:48:1c:c7:13:c8:
d1:80:dd:b3:69:21:a8:57:17:21:89:4a:a6:e7:51:
13:e1:0b:b2:66:73:c7:18:27:be:0a:aa:cf:99:94:
be:47:96:90:9b:8c:08:31:57:a5:78:7d:4d:a5:1e:
57:9e:42:ae:05:ec:e2:5e:ee:d0:6e:1c:11:f0:b1:
f7:f4:0d:2f:11:41:a7:db:a7:92:f5:fe:0e:6f:31:
a0:53:35:5a:0c:a9:01:cb:3c:15:44:a3:9f:a8:3d:
5b:c7:5e:01:1b:5d:f4:29:0c:8a:bb:fa:1f:5b:9d:
15:1f:56:64:ac:a2:5b:5c:dc:ef:86:4b:43:3c:ef:
c8:9e:a6:ee:a3:12:7a:cc:75:a1:65:e2:01:61:46:
a0:1e:21:f5:e6:40:4d:96:4c:60:8a:7f:e9:90:25:
a6:65:e7:28:13:6c:25:ec:78:4e:68:ee:4d:aa:d5:
e5:07:ad:28:61:77:0c:fd:33:31:c2:c5:d7:f6:ed:
7a:23:ff:6d:77:8a:69:5d:4b:94:a7:b9:fd:41:77:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:EE:F7:E5:BB:42:87:AD:1F:EC:C6:4E:0C:33:35:47:CA:1E:5A
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:d5:d1:53:84:23:58:3c:00:32:48:35:29:96:18:4c:21:
ff:60:7e:27:80:26:21:35:cd:93:64:16:da:87:57:1e:d3:6c:
5a:5e:d7:f1:da:28:b6:fa:ff:73:b2:c5:59:ad:48:62:6a:91:
9a:9c:2d:a0:35:3d:b1:fc:d9:c5:f4:40:b4:b8:f1:08:7c:87:
e2:fd:e1:db:91:40:a0:80:68:90:88:7f:d9:14:5d:46:57:c3:
ea:b0:88:7c:ad:bf:98:ce:c7:ed:9a:06:36:18:ec:16:5f:b2:
e6:05:8e:1c:72:75:ac:f4:20:cf:66:47:1e:aa:0b:bc:3a:13:
9a:c6:ef:ab:18:bf:96:b1:78:62:96:44:51:b1:8e:47:9f:06:
22:3f:08:f8:59:cc:8b:5f:d5:0e:5b:bc:43:62:cf:20:1e:9c:
88:34:89:d7:a5:f4:66:1c:04:a2:d9:38:b5:61:b9:bd:38:e5:
f0:49:f2:0d:02:4a:50:4b:9a:e0:0b:d9:15:e5:68:43:f3:e2:
c7:40:c1:1f:db:9d:7b:ab:50:62:b5:62:e1:b2:1c:b2:80:fb:
93:de:a3:f9:a6:3f:b2:c4:92:92:ee:43:71:74:7d:0c:7e:dc:
c9:64:60:e1:0d:dd:e5:7d:71:56:69:6b:de:ab:c5:b9:23:ce:
71:f2:ba:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5CqrTGzLUg3axDub0vOU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUwNjE2MTQwMDMxWhcNMjUwNjE3MTQwMDMxWjAzMTEwLwYDVQQD
EygwMmI4ZWVmN2U1YmI0Mjg3YWQxZmVjYzY0ZTBjMzMzNTQ3Y2ExZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVkvFagIyUMR94xl5uEi1muEbsy4
NVvoWsGAxZswXUiwP20BKNpWNX8pocRnZn3A5HzaxH0ESBzHE8jRgN2zaSGoVxch
iUqm51ET4QuyZnPHGCe+CqrPmZS+R5aQm4wIMVeleH1NpR5XnkKuBeziXu7QbhwR
8LH39A0vEUGn26eS9f4ObzGgUzVaDKkByzwVRKOfqD1bx14BG130KQyKu/ofW50V
H1ZkrKJbXNzvhktDPO/InqbuoxJ6zHWhZeIBYUagHiH15kBNlkxgin/pkCWmZeco
E2wl7HhOaO5NqtXlB60oYXcM/TMxwsXX9u16I/9td4ppXUuUp7n9QXckYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK47vflu0KHrR/sxk4MMzVHyh5aMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvjV0VOE
I1g8ADJINSmWGEwh/2B+J4AmITXNk2QW2odXHtNsWl7X8dootvr/c7LFWa1IYmqR
mpwtoDU9sfzZxfRAtLjxCHyH4v3h25FAoIBokIh/2RRdRlfD6rCIfK2/mM7H7ZoG
NhjsFl+y5gWOHHJ1rPQgz2ZHHqoLvDoTmsbvqxi/lrF4YpZEUbGOR58GIj8I+FnM
i1/VDlu8Q2LPIB6ciDSJ16X0ZhwEotk4tWG5vTjl8EnyDQJKUEua4AvZFeVoQ/Pi
x0DBH9ude6tQYrVi4bIcsoD7k96j+aY/ssSSku5DcXR9DH7cyWRg4Q3d5X1xVmlr
3qvFuSPOcfK6VQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:15 2025 by rpki-client