Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: Xjpm4MVMNB5Rhp/QYQFk991MwF0w/13ZS2cK/WkpmhE=
Subject key identifier: 43:D2:B9:D1:DD:1D:80:87:3E:09:F5:54:45:C1:79:3E:49:16:24:5E
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 01976F2CBEDBAC6A98D476135C3A750814AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 07DE
Signing time: Sat 14 Jun 2025 16:01:32 +0000
Manifest this update: Sat 14 Jun 2025 16:01:32 +0000
Manifest next update: Sun 15 Jun 2025 16:01:32 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: U2E8v5aIXjJw4eexDCjGd071N7gAGTvyScvjJsVPx9I=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:be:db:ac:6a:98:d4:76:13:5c:3a:75:08:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Jun 14 16:01:32 2025 GMT
Not After : Jun 15 16:01:32 2025 GMT
Subject: CN=43d2b9d1dd1d80873e09f55445c1793e4916245e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:ee:dc:65:0d:1b:2d:84:52:2e:2f:26:c0:
b1:fe:83:ec:d0:24:60:d5:73:ee:f9:f8:13:c4:e9:
de:31:3f:3f:f1:0c:e4:c8:3c:24:c1:f6:77:94:1a:
52:77:8b:c0:b2:7c:b6:be:8f:dc:bb:a2:67:2c:9a:
9a:d3:53:f0:39:15:fb:4e:d8:54:d2:26:a4:69:15:
23:79:b9:68:94:90:88:52:ae:33:ad:0f:12:c0:cb:
0a:a5:b7:c0:61:a8:e4:7d:c2:b8:bd:1f:06:7e:6b:
4f:dc:87:a9:da:c2:d1:ec:d5:29:d6:8a:05:42:f6:
38:4c:2c:d0:2c:8e:a6:75:88:d9:72:54:ca:25:b7:
67:b5:ad:8b:df:aa:11:85:30:d3:ba:01:e8:80:c4:
70:77:f8:e3:41:87:73:ae:21:c2:4c:9e:70:ac:cd:
15:41:31:62:18:10:c0:1c:99:a3:71:c7:43:69:c0:
15:cc:88:ac:35:a8:15:9b:74:b3:b3:8e:bd:0e:54:
83:c7:34:2c:a9:2b:1c:2f:a8:bd:be:cb:17:ba:1e:
8c:d2:aa:4c:cc:d2:b2:c7:0d:0b:f9:5e:de:83:eb:
39:83:e9:00:ff:a5:74:32:a3:aa:7d:35:f5:0c:30:
b2:44:41:b5:38:4e:51:e2:a7:93:69:a1:27:fd:43:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:B9:D1:DD:1D:80:87:3E:09:F5:54:45:C1:79:3E:49:16:24:5E
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5d:84:f4:52:63:05:40:e1:0f:21:af:38:9f:46:b6:4f:61:
21:91:aa:8f:cc:e8:a5:8a:6b:4b:4e:3a:63:f1:4d:1d:25:16:
5f:dd:9f:87:06:0d:43:e5:46:03:13:12:d1:bb:64:27:eb:9a:
e9:8c:42:77:68:cd:73:26:60:34:f7:6a:4f:c6:5f:20:6e:f0:
e0:42:1e:a6:64:d3:ef:a0:fc:35:36:87:bb:61:70:3e:bc:d8:
3d:86:5f:f7:76:78:fb:5d:b5:c3:fd:51:c6:54:97:e4:bc:6d:
83:2f:65:50:1a:7f:b8:55:77:8f:db:2f:15:c0:d0:68:98:30:
b2:03:0f:3c:d4:df:ab:f6:13:a5:9d:eb:20:45:27:b0:59:05:
4e:dc:37:c5:43:52:52:8a:d6:79:a8:04:5d:c9:c9:e8:18:cd:
36:8c:7e:21:73:85:89:9d:11:cb:72:5f:1d:ac:1e:9c:53:4b:
28:13:4f:36:a8:2a:81:57:6d:23:61:3e:26:7a:ee:80:f9:23:
04:8e:b1:38:6f:ee:2c:f7:89:ec:98:e8:a3:a2:84:85:0b:35:
77:e5:e4:e2:e3:ea:ef:9c:3e:54:6d:7e:f1:47:d6:f7:23:c8:
02:1d:cf:4b:87:2b:cb:8e:e4:e2:a5:ac:ca:de:c8:06:2a:68:
a8:32:f0:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLL7brGqY1HYTXDp1CBSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4
MzRhMGIwHhcNMjUwNjE0MTYwMTMyWhcNMjUwNjE1MTYwMTMyWjAzMTEwLwYDVQQD
Eyg0M2QyYjlkMWRkMWQ4MDg3M2UwOWY1NTQ0NWMxNzkzZTQ5MTYyNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT3u3GUNGy2EUi4vJsCx/oPs0CRg
1XPu+fgTxOneMT8/8QzkyDwkwfZ3lBpSd4vAsny2vo/cu6JnLJqa01PwORX7TthU
0iakaRUjeblolJCIUq4zrQ8SwMsKpbfAYajkfcK4vR8GfmtP3Iep2sLR7NUp1ooF
QvY4TCzQLI6mdYjZclTKJbdnta2L36oRhTDTugHogMRwd/jjQYdzriHCTJ5wrM0V
QTFiGBDAHJmjccdDacAVzIisNagVm3Szs469DlSDxzQsqSscL6i9vssXuh6M0qpM
zNKyxw0L+V7eg+s5g+kA/6V0MqOqfTX1DDCyREG1OE5R4qeTaaEn/UPLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPSudHdHYCHPgn1VEXBeT5JFiReMB8GA1UdIwQY
MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt
MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3
LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV2E9FJj
BUDhDyGvOJ9Gtk9hIZGqj8zopYprS046Y/FNHSUWX92fhwYNQ+VGAxMS0btkJ+ua
6YxCd2jNcyZgNPdqT8ZfIG7w4EIepmTT76D8NTaHu2FwPrzYPYZf93Z4+121w/1R
xlSX5Lxtgy9lUBp/uFV3j9svFcDQaJgwsgMPPNTfq/YTpZ3rIEUnsFkFTtw3xUNS
UorWeagEXcnJ6BjNNox+IXOFiZ0Ry3JfHawenFNLKBNPNqgqgVdtI2E+JnrugPkj
BI6xOG/uLPeJ7Jjoo6KEhQs1d+Xk4uPq75w+VG1+8UfW9yPIAh3PS4cry47k4qWs
yt7IBipoqDLwwg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:15:40 2025 by rpki-client