Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: 7G3n0kYjEDWMB4g/6sbkNpktw90ekKFJMaxtMtPRCME=
Subject key identifier: 64:CE:F6:36:80:81:A9:9D:09:F4:03:19:6E:E3:5F:A5:8A:BB:39:12
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 0197703F1F110A87D3435505CB3419AFF067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 0EBA
Signing time: Sat 14 Jun 2025 21:01:14 +0000
Manifest this update: Sat 14 Jun 2025 21:01:14 +0000
Manifest next update: Sun 15 Jun 2025 21:01:14 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: byVM8WRmb1/w0vbx/TZT3Xy7F+L5OE3iFMz7GI3ep0I=)
2: pGBMbGUVmfmMQKR1-BVF--sKK7U.roa (hash: ayj/a/EtllFNMGD1HzcA6KglHzS5bxHd+NVb8RRWcAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3f:1f:11:0a:87:d3:43:55:05:cb:34:19:af:f0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Jun 14 21:01:14 2025 GMT
Not After : Jun 15 21:01:14 2025 GMT
Subject: CN=64cef6368081a99d09f403196ee35fa58abb3912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:16:63:a5:cc:6c:37:37:e8:f5:d7:a9:1d:
1b:85:fe:c3:73:e4:b7:f1:8e:e8:b6:08:56:47:de:
0c:09:b2:c8:52:74:ad:c7:9c:a2:bc:f3:88:c3:35:
9f:0c:4d:16:6c:87:d1:8e:f9:9a:d5:71:c9:74:62:
8a:44:18:64:ce:76:3b:6a:8a:e2:16:fe:b1:34:a7:
4c:35:e4:8e:62:08:dc:67:87:37:5b:9c:20:d5:7e:
a0:1a:11:1f:dc:5b:64:7b:a0:7d:9c:93:9a:91:b5:
4e:65:c0:62:7f:51:d4:4b:6d:b1:7f:d7:dd:f6:37:
fa:1f:9a:44:ff:5a:0e:00:5f:45:84:c6:92:eb:5b:
69:f4:d3:ed:db:91:24:95:59:e9:6f:30:35:b2:16:
f1:51:85:be:89:86:13:ff:41:81:f1:d6:ab:81:65:
55:61:79:ea:02:84:6f:e0:b7:73:6d:0e:f9:5b:30:
94:03:39:e5:58:66:16:ea:3b:84:0d:25:9b:14:ca:
c9:8b:11:3e:6b:b0:11:c8:cc:57:e5:fa:19:a8:4a:
c3:4e:bd:81:e9:06:c7:a7:fa:26:83:79:e7:47:29:
64:99:91:89:e3:c0:da:95:7a:64:4d:4b:47:5a:e2:
cb:c3:bf:75:25:40:b5:07:39:8a:8b:d9:aa:2d:76:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:F6:36:80:81:A9:9D:09:F4:03:19:6E:E3:5F:A5:8A:BB:39:12
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fa:9f:16:79:d2:27:1d:a4:66:f7:43:56:5b:aa:fa:b8:92:
b5:a2:00:07:81:57:0f:5a:47:c5:6d:d7:09:04:5f:42:0f:ce:
e4:17:d8:66:5c:4d:ad:26:f4:b8:7c:66:93:6e:ad:9b:bd:c0:
a0:85:7c:d5:0e:ff:b6:a8:f5:04:04:e0:46:40:07:e4:5e:51:
60:97:0e:6d:c4:a7:4e:1e:87:ee:05:5e:12:1a:c0:65:31:d8:
66:b7:a4:f5:ee:3a:55:b6:ae:27:dc:a4:71:71:20:b7:07:f7:
82:3d:88:a1:8a:52:3b:67:09:17:38:c1:a7:27:05:35:8b:e1:
eb:bb:76:d2:9d:90:cc:69:42:ac:37:d3:e5:d4:3e:d3:50:8e:
f6:c5:c5:c1:dd:3c:48:78:9b:6c:39:14:2d:59:df:d8:2c:dc:
41:0d:3e:65:1c:be:3e:04:a6:b1:84:ba:25:42:78:d3:f5:08:
9e:b7:10:6e:9e:4a:64:52:57:f0:39:5a:0f:79:f1:ed:7f:be:
cb:19:6b:99:60:a7:a9:9e:e7:3d:74:b4:f7:42:13:6c:c3:bc:
10:5e:7f:ac:e7:7d:e4:97:71:41:93:83:09:82:5f:39:8c:fe:
fa:05:88:8b:9f:49:99:d5:04:30:16:cd:e6:bd:a2:53:99:cd:
d0:6d:2e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPx8RCofTQ1UFyzQZr/BnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGI1YTVmYjEzODY4M2QxYThjYzcwMTlmNzg5NzBiYWU2
NzgyMjgwHhcNMjUwNjE0MjEwMTE0WhcNMjUwNjE1MjEwMTE0WjAzMTEwLwYDVQQD
Eyg2NGNlZjYzNjgwODFhOTlkMDlmNDAzMTk2ZWUzNWZhNThhYmIzOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RwWY6XMbDc36PXXqR0bhf7Dc+S3
8Y7otghWR94MCbLIUnStx5yivPOIwzWfDE0WbIfRjvma1XHJdGKKRBhkznY7aori
Fv6xNKdMNeSOYgjcZ4c3W5wg1X6gGhEf3Ftke6B9nJOakbVOZcBif1HUS22xf9fd
9jf6H5pE/1oOAF9FhMaS61tp9NPt25EklVnpbzA1shbxUYW+iYYT/0GB8dargWVV
YXnqAoRv4LdzbQ75WzCUAznlWGYW6juEDSWbFMrJixE+a7ARyMxX5foZqErDTr2B
6QbHp/omg3nnRylkmZGJ48DalXpkTUtHWuLLw791JUC1BzmKi9mqLXabZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTO9jaAgamdCfQDGW7jX6WKuzkSMB8GA1UdIwQY
MBaAFNmLWl+xOGg9GozHAZ94lwuuZ4IoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgt
ODMxN2E4Mjg4ZDEwLzEvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgtODMxN2E4Mjg4ZDEw
LzEvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvqfFnnS
Jx2kZvdDVluq+riStaIAB4FXD1pHxW3XCQRfQg/O5BfYZlxNrSb0uHxmk26tm73A
oIV81Q7/tqj1BATgRkAH5F5RYJcObcSnTh6H7gVeEhrAZTHYZrek9e46VbauJ9yk
cXEgtwf3gj2IoYpSO2cJFzjBpycFNYvh67t20p2QzGlCrDfT5dQ+01CO9sXFwd08
SHibbDkULVnf2CzcQQ0+ZRy+PgSmsYS6JUJ40/UInrcQbp5KZFJX8DlaD3nx7X++
yxlrmWCnqZ7nPXS090ITbMO8EF5/rOd95JdxQZODCYJfOYz++gWIi59JmdUEMBbN
5r2iU5nN0G0uPA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:00 2025 by rpki-client