Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: kvCRKftA83RMCwOUdIU7Kjk9eV4kRsjhYE+qsakoAI8=
Subject key identifier: A3:83:BF:56:91:AC:70:7D:83:E7:E4:5B:40:77:C9:72:2A:81:AD:78
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 019768BC0B6AB70CF2BEACC80776FAE91E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 10:00:43 +0000
Manifest this update: Fri 13 Jun 2025 10:00:43 +0000
Manifest next update: Sat 14 Jun 2025 10:00:43 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: nEeqFVDCznpRHFgqJK/K1lCl0W710bAZ7ri84yJgBBY=)
2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:0b:6a:b7:0c:f2:be:ac:c8:07:76:fa:e9:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Jun 13 10:00:43 2025 GMT
Not After : Jun 14 10:00:43 2025 GMT
Subject: CN=a383bf5691ac707d83e7e45b4077c9722a81ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:c0:d5:25:77:33:c8:ea:15:c1:a4:1a:25:
6e:d1:8b:2d:78:1c:f9:e0:8e:2f:04:e2:4f:e0:56:
e8:ff:c4:f5:7e:d9:54:0f:29:b7:ab:2f:8f:f3:c8:
cb:24:65:91:1d:6d:9a:f9:41:62:e9:02:2d:9a:c0:
df:ec:50:d2:c1:ed:4e:54:74:bf:c6:ce:73:20:21:
bb:47:6d:32:16:09:e7:47:a9:e7:86:56:7b:35:f7:
6a:21:20:af:05:b8:23:b5:f6:5b:8c:87:83:90:54:
05:65:4b:a5:e4:de:69:c7:0e:ff:70:81:f5:fd:a7:
78:51:54:a9:ff:da:a0:d1:8f:e2:ea:4a:70:37:43:
fa:86:c5:62:15:97:e8:c4:7d:1d:b5:90:81:d9:5e:
ac:6e:64:6c:1f:a0:ee:85:03:05:89:19:aa:a6:5b:
03:66:01:d4:59:a5:ee:31:c1:6a:91:07:b9:dd:84:
57:78:ec:74:19:bf:b9:b4:81:33:a9:c8:65:9e:c4:
30:a5:f7:88:27:45:61:f3:01:5a:22:3f:1c:39:ad:
14:0c:cc:a3:ef:4a:cb:bc:f4:78:14:98:09:93:1f:
b3:85:fd:d8:db:0a:51:ac:4c:51:5f:69:1d:22:3f:
31:23:ba:80:e2:31:c2:b7:94:42:f1:fe:41:d7:a0:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:BF:56:91:AC:70:7D:83:E7:E4:5B:40:77:C9:72:2A:81:AD:78
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ac:67:b7:dd:f0:ec:b8:5e:9d:a0:cb:f1:36:61:ee:e1:e3:
14:7c:8d:92:06:96:e4:4c:f0:a1:21:ca:fe:c0:2a:9f:ad:4e:
98:47:2d:3c:18:16:31:b2:ae:49:bb:bd:95:53:a8:77:18:17:
6d:af:ac:ae:9c:2c:50:cf:09:d4:c4:dc:6f:11:ca:16:ef:6f:
85:9c:77:2b:74:4c:d0:cf:45:be:f0:14:9f:f7:7e:62:3b:f3:
a7:fc:a4:26:03:aa:3a:dc:e5:88:49:79:0b:56:ce:fd:48:fe:
7b:81:b1:35:7b:50:39:5a:df:3e:d0:f3:be:9e:2f:af:b4:00:
df:41:e4:cc:25:31:e4:a3:d7:32:ed:b0:3b:a1:3e:a3:8e:3a:
8a:18:90:5e:dc:75:4e:7a:12:ce:ce:86:a7:92:02:cf:0b:dc:
74:f4:57:d5:bd:d8:ca:4f:57:ca:50:e7:d9:ef:3f:34:a3:1c:
b2:07:f7:3d:53:ed:0d:07:d9:95:1e:2c:5e:a0:5e:32:cc:59:
ac:47:f7:94:f3:3f:18:9a:f8:55:a5:30:a5:ea:6e:fe:31:d1:
98:8b:68:a1:c0:c8:ab:52:13:02:ec:40:30:b6:ae:6f:1b:6a:
5a:f0:22:0a:46:eb:25:85:da:46:ce:c1:ed:c4:34:a6:63:b8:
98:29:05:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovAtqtwzyvqzIB3b66R5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1
MjRkZWMwHhcNMjUwNjEzMTAwMDQzWhcNMjUwNjE0MTAwMDQzWjAzMTEwLwYDVQQD
EyhhMzgzYmY1NjkxYWM3MDdkODNlN2U0NWI0MDc3Yzk3MjJhODFhZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XLA1SV3M8jqFcGkGiVu0YsteBz5
4I4vBOJP4Fbo/8T1ftlUDym3qy+P88jLJGWRHW2a+UFi6QItmsDf7FDSwe1OVHS/
xs5zICG7R20yFgnnR6nnhlZ7NfdqISCvBbgjtfZbjIeDkFQFZUul5N5pxw7/cIH1
/ad4UVSp/9qg0Y/i6kpwN0P6hsViFZfoxH0dtZCB2V6sbmRsH6DuhQMFiRmqplsD
ZgHUWaXuMcFqkQe53YRXeOx0Gb+5tIEzqchlnsQwpfeIJ0Vh8wFaIj8cOa0UDMyj
70rLvPR4FJgJkx+zhf3Y2wpRrExRX2kdIj8xI7qA4jHCt5RC8f5B16DjQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKODv1aRrHB9g+fkW0B3yXIqga14MB8GA1UdIwQY
MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt
MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi
LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6xnt93w
7LhenaDL8TZh7uHjFHyNkgaW5EzwoSHK/sAqn61OmEctPBgWMbKuSbu9lVOodxgX
ba+srpwsUM8J1MTcbxHKFu9vhZx3K3RM0M9FvvAUn/d+Yjvzp/ykJgOqOtzliEl5
C1bO/Uj+e4GxNXtQOVrfPtDzvp4vr7QA30HkzCUx5KPXMu2wO6E+o446ihiQXtx1
TnoSzs6Gp5ICzwvcdPRX1b3Yyk9XylDn2e8/NKMcsgf3PVPtDQfZlR4sXqBeMsxZ
rEf3lPM/GJr4VaUwpepu/jHRmItoocDIq1ITAuxAMLaubxtqWvAiCkbrJYXaRs7B
7cQ0pmO4mCkFAg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:47 2025 by rpki-client