Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: 4KGvX826lmFG+A84nQi/mjwUPpDHbvbzj4czjgV28MY=
Subject key identifier: 93:89:70:A6:D2:D1:F9:F4:09:1D:26:ED:19:62:DF:9B:FD:03:69:BE
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 01976C62401CF79399F93518CB4247A89E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 119D
Signing time: Sat 14 Jun 2025 03:01:07 +0000
Manifest this update: Sat 14 Jun 2025 03:01:07 +0000
Manifest next update: Sun 15 Jun 2025 03:01:07 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: Ak+hbDa81zYwF9n/zBIE6Tx8vbuSeKL5IpHhGFTtjIc=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:40:1c:f7:93:99:f9:35:18:cb:42:47:a8:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jun 14 03:01:07 2025 GMT
Not After : Jun 15 03:01:07 2025 GMT
Subject: CN=938970a6d2d1f9f4091d26ed1962df9bfd0369be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:4e:eb:f8:c3:e1:8a:24:57:98:d1:48:74:
61:f6:11:29:5d:ae:20:a3:b1:92:00:6d:56:d9:0d:
fe:31:a8:45:e3:bb:0e:0b:37:48:e5:a4:d8:e4:47:
39:e8:b5:33:53:d5:c3:68:e5:34:fe:e0:f2:cc:b2:
9a:95:d7:bf:15:5c:cb:bd:df:cc:ab:a0:79:f6:2c:
98:4a:d9:71:91:0f:7b:ac:c7:e9:31:f5:2e:69:56:
55:1a:0f:d6:91:dd:b5:78:b8:61:c3:93:f4:96:b9:
bd:26:e5:ac:d5:09:ec:90:d3:dc:2d:c6:1e:94:81:
c6:3f:e1:12:8e:d6:eb:f1:32:cf:84:ab:9d:c3:f6:
10:af:34:e2:01:45:7b:ea:20:a4:49:aa:57:96:00:
ec:e8:85:1e:c1:b5:31:76:94:50:c7:ca:9f:ef:5b:
0e:e5:fb:d8:37:a5:7f:06:64:6b:d6:c0:fd:dd:0d:
ec:ae:58:50:8e:27:60:52:7d:d2:5e:50:5a:44:b3:
2c:52:9f:80:4b:16:ac:ff:51:2c:77:5a:3b:f8:9b:
1a:cb:d3:2d:8d:a0:6e:bc:98:53:20:2e:2c:b4:63:
fe:84:fd:db:e9:aa:41:ce:0a:7d:e3:2e:00:63:1e:
c1:12:ec:82:c3:82:87:a7:1e:c5:97:17:73:e8:ae:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:70:A6:D2:D1:F9:F4:09:1D:26:ED:19:62:DF:9B:FD:03:69:BE
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:90:11:80:75:cb:b9:3e:75:6a:5c:45:2a:e8:35:98:c7:
eb:f1:4d:3b:15:ff:10:f6:75:d5:77:6d:8b:b0:59:e5:7a:6b:
85:d3:d7:70:38:10:6c:35:a4:00:b8:1a:0b:f8:5b:4c:37:f2:
4d:ee:fe:e9:52:be:94:57:a4:58:9e:fe:8d:02:80:35:ef:7e:
6e:92:29:46:ec:4c:95:f7:37:fc:fb:df:be:5a:27:2d:13:90:
17:e0:7c:b7:14:30:37:73:a1:9b:b8:d2:92:5d:10:81:f7:6d:
92:70:23:75:91:4f:b5:dc:6f:e2:24:41:18:9d:2b:94:fb:6d:
54:da:13:48:d1:79:41:c0:47:fc:bf:e3:6c:c2:09:82:b3:1d:
73:40:a9:4e:88:32:fe:6c:b6:13:fb:9b:a9:29:ed:e5:15:93:
88:31:2d:c8:bc:6c:b8:b2:0b:3c:3f:b1:f4:ad:ec:5f:33:8a:
bf:d0:c3:8c:36:a5:86:1a:8f:63:f5:fe:ef:11:2a:29:95:bc:
2b:71:f4:aa:94:41:ed:5c:10:85:be:0e:a2:2f:6e:78:83:c2:
34:8d:f6:f5:2f:06:72:52:3a:41:75:0f:c2:f3:38:2a:ba:93:
f9:4a:2f:75:96:c6:cd:59:72:66:e2:5f:df:ad:38:ff:2c:70:
c1:57:a5:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYkAc95OZ+TUYy0JHqJ6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMGRiZjllYjgzNjA4NWMxOWQ5M2Y1MjU0MjIxYzMzOTQ4
ZTg1ZTMwHhcNMjUwNjE0MDMwMTA3WhcNMjUwNjE1MDMwMTA3WjAzMTEwLwYDVQQD
Eyg5Mzg5NzBhNmQyZDFmOWY0MDkxZDI2ZWQxOTYyZGY5YmZkMDM2OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvpO6/jD4YokV5jRSHRh9hEpXa4g
o7GSAG1W2Q3+MahF47sOCzdI5aTY5Ec56LUzU9XDaOU0/uDyzLKalde/FVzLvd/M
q6B59iyYStlxkQ97rMfpMfUuaVZVGg/Wkd21eLhhw5P0lrm9JuWs1QnskNPcLcYe
lIHGP+ESjtbr8TLPhKudw/YQrzTiAUV76iCkSapXlgDs6IUewbUxdpRQx8qf71sO
5fvYN6V/BmRr1sD93Q3srlhQjidgUn3SXlBaRLMsUp+ASxas/1Esd1o7+Jsay9Mt
jaBuvJhTIC4stGP+hP3b6apBzgp94y4AYx7BEuyCw4KHpx7Flxdz6K6lJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOJcKbS0fn0CR0m7Rli35v9A2m+MB8GA1UdIwQY
MBaAFA0Nv564NghcGdk/UlQiHDOUjoXjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgt
M2U0NmNlMzVkNGU3LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgtM2U0NmNlMzVkNGU3
LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIOQEYB1
y7k+dWpcRSroNZjH6/FNOxX/EPZ11Xdti7BZ5XprhdPXcDgQbDWkALgaC/hbTDfy
Te7+6VK+lFekWJ7+jQKANe9+bpIpRuxMlfc3/PvfvlonLROQF+B8txQwN3Ohm7jS
kl0QgfdtknAjdZFPtdxv4iRBGJ0rlPttVNoTSNF5QcBH/L/jbMIJgrMdc0CpTogy
/my2E/ubqSnt5RWTiDEtyLxsuLILPD+x9K3sXzOKv9DDjDalhhqPY/X+7xEqKZW8
K3H0qpRB7VwQhb4Ooi9ueIPCNI329S8GclI6QXUPwvM4KrqT+UovdZbGzVlyZuJf
3604/yxwwVelYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:09 2025 by rpki-client