Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: 5X1HdcsZgUPoXAx7H98O+kmPYPgDd4P5B53nTMCZdjY=
Subject key identifier: E7:30:50:83:C5:2C:16:BF:7B:49:A6:D8:61:3A:EA:E9:BD:E6:AD:75
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 01977AC293A97D42015DFC9BDE111456BCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 22:01:01 +0000
Manifest this update: Mon 16 Jun 2025 22:01:01 +0000
Manifest next update: Tue 17 Jun 2025 22:01:01 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: e/wXYrMtLO11uL6dG8PhPaWHndluXEV/y6XjFylQk6Y=)
2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:93:a9:7d:42:01:5d:fc:9b:de:11:14:56:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Jun 16 22:01:01 2025 GMT
Not After : Jun 17 22:01:01 2025 GMT
Subject: CN=e7305083c52c16bf7b49a6d8613aeae9bde6ad75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:bf:bf:f3:0e:b0:51:78:b4:56:a5:49:40:
08:7d:7b:1a:1e:e8:43:8c:58:1d:e9:ac:11:5b:62:
81:a8:12:aa:97:5d:9b:ff:71:1a:d8:b1:ad:4a:08:
76:e8:dd:8c:67:1f:86:8f:94:ac:69:c1:38:3c:d3:
a6:6f:93:29:94:f4:ce:ae:0b:97:06:57:9b:b3:5e:
30:b0:a2:8f:37:40:bb:0a:86:6a:95:dd:49:37:9b:
fc:dc:39:85:b6:aa:81:05:77:19:0c:7a:b4:b7:f0:
0b:97:e2:38:1e:ca:54:98:2a:df:b7:7d:49:bb:67:
dc:a9:63:b7:e9:e0:1d:60:a3:bc:2c:e3:b6:93:f3:
67:66:2d:1e:a6:31:bd:3a:c2:1d:e2:7e:99:6d:71:
41:0f:b4:2d:23:48:9c:6f:b8:10:d0:4f:7d:43:61:
31:ea:f3:0e:e3:45:e0:39:bb:1f:00:7e:ea:3f:7d:
e2:2a:69:e3:32:8a:cd:3b:c9:cb:10:53:aa:f5:8a:
46:20:33:4c:60:b2:91:ff:69:d7:44:58:0d:8b:d5:
b9:bf:8d:3f:6c:32:af:10:36:02:d5:2a:1d:8e:b8:
d6:de:9a:75:5f:58:d2:04:c1:8b:11:4a:77:f9:51:
15:b5:db:b9:80:3a:79:6e:bd:0f:c2:1e:d6:10:26:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:50:83:C5:2C:16:BF:7B:49:A6:D8:61:3A:EA:E9:BD:E6:AD:75
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:d4:fd:63:2c:f2:e8:26:fa:71:59:e5:cf:08:54:c5:67:
28:c0:ad:4f:4f:01:e1:1f:c7:d0:f0:e5:26:f2:db:22:84:8e:
96:4b:f4:35:20:4d:d2:69:3b:f6:40:ab:e1:22:19:64:80:00:
24:ed:6e:8d:f3:20:6e:02:e0:00:cf:24:69:d8:8d:fc:2d:68:
db:6a:8f:ec:0a:c2:04:5d:d8:fd:62:a3:63:4b:64:eb:96:b2:
e0:41:a0:41:f7:60:a7:a4:ad:10:a3:0f:94:09:97:e6:4a:15:
81:31:99:96:28:3d:03:c5:7b:77:b2:fe:89:d7:39:3e:46:21:
f1:ba:9b:53:c9:86:2f:96:0b:8b:42:33:0e:8c:15:de:28:cd:
0e:4a:66:3f:4c:76:f7:91:62:6f:00:48:46:03:e2:cb:1e:41:
f3:b8:79:26:02:16:e2:f9:99:be:76:6b:c0:f3:d1:42:b6:76:
15:13:5f:19:b9:e1:50:57:29:9d:dc:78:26:6d:9d:dc:44:89:
b0:b5:2d:4d:18:d2:4e:26:19:54:d4:5d:3a:c7:3b:ff:e7:bf:
cc:56:72:52:30:c6:c1:bb:51:09:d1:0d:02:fc:84:b0:15:ed:
a0:f5:ed:e1:de:d2:26:1f:fe:ce:44:19:e3:2f:74:6d:79:91:
31:8b:61:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wpOpfUIBXfyb3hEUVrylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh
MzRiM2MwHhcNMjUwNjE2MjIwMTAxWhcNMjUwNjE3MjIwMTAxWjAzMTEwLwYDVQQD
EyhlNzMwNTA4M2M1MmMxNmJmN2I0OWE2ZDg2MTNhZWFlOWJkZTZhZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lS/v/MOsFF4tFalSUAIfXsaHuhD
jFgd6awRW2KBqBKql12b/3Ea2LGtSgh26N2MZx+Gj5SsacE4PNOmb5MplPTOrguX
Blebs14wsKKPN0C7CoZqld1JN5v83DmFtqqBBXcZDHq0t/ALl+I4HspUmCrft31J
u2fcqWO36eAdYKO8LOO2k/NnZi0epjG9OsId4n6ZbXFBD7QtI0icb7gQ0E99Q2Ex
6vMO40XgObsfAH7qP33iKmnjMorNO8nLEFOq9YpGIDNMYLKR/2nXRFgNi9W5v40/
bDKvEDYC1SodjrjW3pp1X1jSBMGLEUp3+VEVtdu5gDp5br0Pwh7WECYeFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcwUIPFLBa/e0mm2GE66um95q11MB8GA1UdIwQY
MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt
MjM4ZTBiN2FlMjg0LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0
LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKzU/WMs
8ugm+nFZ5c8IVMVnKMCtT08B4R/H0PDlJvLbIoSOlkv0NSBN0mk79kCr4SIZZIAA
JO1ujfMgbgLgAM8kadiN/C1o22qP7ArCBF3Y/WKjY0tk65ay4EGgQfdgp6StEKMP
lAmX5koVgTGZlig9A8V7d7L+idc5PkYh8bqbU8mGL5YLi0IzDowV3ijNDkpmP0x2
95FibwBIRgPiyx5B87h5JgIW4vmZvnZrwPPRQrZ2FRNfGbnhUFcpndx4Jm2d3ESJ
sLUtTRjSTiYZVNRdOsc7/+e/zFZyUjDGwbtRCdENAvyEsBXtoPXt4d7SJh/+zkQZ
4y90bXmRMYthQg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:41:06 2025 by rpki-client