Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: LX7/w2bkyvC7A/I5/wXnlGNsjvnuDor9qWoPcmKzlRM=
Subject key identifier: 64:06:0F:CD:22:F6:2E:86:81:61:B6:41:DE:CD:E4:09:A9:69:23:49
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 01968EF06E30A072E16FB4EDC49B43BC8A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 02D6
Signing time: Fri 02 May 2025 03:00:43 +0000
Manifest this update: Fri 02 May 2025 03:00:43 +0000
Manifest next update: Sat 03 May 2025 03:00:43 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: S9WXSdj6F7nX699SsukBbzT6rgqa5NZoHgNK/jBBpXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:6e:30:a0:72:e1:6f:b4:ed:c4:9b:43:bc:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: May 2 03:00:43 2025 GMT
Not After : May 3 03:00:43 2025 GMT
Subject: CN=64060fcd22f62e868161b641decde409a9692349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:d1:97:c8:50:f5:f2:7b:ed:4a:5e:2e:82:
89:5a:ed:86:c8:84:21:ca:cb:b6:5f:7c:34:6d:1f:
7d:d6:c5:5e:05:ce:37:ff:92:89:6f:85:f8:c4:64:
6d:44:50:ff:4e:8d:40:74:97:1e:9f:83:cd:b4:d9:
67:3c:ff:6d:8c:c6:52:07:a2:ac:b3:ad:78:86:52:
2e:99:7e:99:ff:ca:7e:fe:f8:47:bc:99:b3:b0:82:
33:38:3e:7f:26:bf:ed:d1:1f:ea:26:de:27:99:2c:
12:0f:13:a0:3e:f4:e4:ab:5d:a7:d1:fb:b2:97:6b:
9c:e5:7b:8e:eb:52:3e:0f:57:9f:04:29:3d:af:c5:
a7:11:b5:10:d5:66:30:86:84:d8:ac:b3:80:7a:07:
f0:57:7c:22:cc:19:42:bf:be:11:1a:5b:75:60:6b:
57:73:5c:2b:6e:a8:1f:86:a5:24:6c:12:b2:45:ea:
c8:1e:15:be:a8:f3:45:c1:b8:97:b1:23:69:4c:0b:
b0:39:d0:83:82:5c:a6:88:a0:4c:08:83:b5:35:8b:
4f:5d:7b:8e:52:a1:7e:14:1b:50:4d:99:b4:8a:0e:
1e:1d:18:a6:4a:66:87:d3:74:48:44:61:45:f6:2d:
5f:9a:67:65:4a:d9:24:f3:c4:2f:a1:a0:1c:1b:60:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:0F:CD:22:F6:2E:86:81:61:B6:41:DE:CD:E4:09:A9:69:23:49
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:89:09:7a:9e:48:53:78:bd:88:38:02:1c:f9:d3:1f:ca:
a5:40:2e:b0:79:37:3f:4b:8d:ee:81:d9:75:c6:18:80:a9:6b:
11:e6:65:8f:e3:98:4e:40:d1:ee:55:1e:9e:91:71:c9:4d:23:
68:ce:73:fb:0f:30:2e:9c:35:b0:6e:07:ea:13:51:c2:db:69:
4f:3c:c1:f3:05:ae:ce:fe:c4:2f:bf:ac:a2:0b:1a:e3:d6:f3:
f0:44:ec:c4:d6:20:67:7a:b5:e2:1f:5c:3d:a8:0e:59:cd:8a:
17:24:1f:20:85:ea:d3:26:8b:f8:27:9b:bb:1a:37:26:21:37:
f3:31:de:b3:ec:e3:97:5a:c2:71:51:f7:d5:71:c8:04:bd:2f:
cf:7c:34:a3:25:a5:e7:f8:8e:68:30:9f:55:75:ad:d3:e1:51:
6a:95:ec:1d:50:61:18:96:db:26:8e:40:eb:e2:27:47:66:32:
b7:a7:87:9d:77:f7:b3:6b:27:69:f1:21:58:91:ff:a9:fe:b8:
13:c9:24:8f:c9:5b:fd:db:38:bc:ac:dc:fd:b6:9c:ec:0f:0c:
17:25:57:ee:a0:7c:35:ca:27:ff:61:a2:c2:14:dd:f6:c6:03:
e8:3a:68:f6:19:56:85:b6:3a:e3:91:d9:99:4c:c5:5d:3d:2c:
9b:11:64:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaO8G4woHLhb7TtxJtDvIo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzI1YzNhOWM1Y2Q4NjY2Zjg2YjA3YTgwOGYxMzJlMDkx
MTE5OWUwHhcNMjUwNTAyMDMwMDQzWhcNMjUwNTAzMDMwMDQzWjAzMTEwLwYDVQQD
Eyg2NDA2MGZjZDIyZjYyZTg2ODE2MWI2NDFkZWNkZTQwOWE5NjkyMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35zRl8hQ9fJ77UpeLoKJWu2GyIQh
ysu2X3w0bR991sVeBc43/5KJb4X4xGRtRFD/To1AdJcen4PNtNlnPP9tjMZSB6Ks
s614hlIumX6Z/8p+/vhHvJmzsIIzOD5/Jr/t0R/qJt4nmSwSDxOgPvTkq12n0fuy
l2uc5XuO61I+D1efBCk9r8WnEbUQ1WYwhoTYrLOAegfwV3wizBlCv74RGlt1YGtX
c1wrbqgfhqUkbBKyRerIHhW+qPNFwbiXsSNpTAuwOdCDglymiKBMCIO1NYtPXXuO
UqF+FBtQTZm0ig4eHRimSmaH03RIRGFF9i1fmmdlStkk88QvoaAcG2CxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQGD80i9i6GgWG2Qd7N5AmpaSNJMB8GA1UdIwQY
MBaAFNpyXDqcXNhmb4aweoCPEy4JERmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUt
M2ZkMTgwMzQxY2JiLzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUtM2ZkMTgwMzQxY2Ji
LzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmWJCXqe
SFN4vYg4Ahz50x/KpUAusHk3P0uN7oHZdcYYgKlrEeZlj+OYTkDR7lUenpFxyU0j
aM5z+w8wLpw1sG4H6hNRwttpTzzB8wWuzv7EL7+sogsa49bz8ETsxNYgZ3q14h9c
PagOWc2KFyQfIIXq0yaL+Cebuxo3JiE38zHes+zjl1rCcVH31XHIBL0vz3w0oyWl
5/iOaDCfVXWt0+FRapXsHVBhGJbbJo5A6+InR2Yyt6eHnXf3s2snafEhWJH/qf64
E8kkj8lb/ds4vKzc/bac7A8MFyVX7qB8Ncon/2GiwhTd9sYD6Dpo9hlWhbY645HZ
mUzFXT0smxFkOw==
-----END CERTIFICATE-----
Generated at Fri May 2 09:41:19 2025 by rpki-client