Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: jnw+ltHhRu7HZ0cO+yMuvhylE/5pBb0sXs/PmYMUWUk=
Subject key identifier: 2D:61:A0:27:7B:F6:71:4A:39:75:23:A0:DD:0A:88:2B:4A:20:98:E6
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 0197696097AEC6CE1DD8D73C9F998057A045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 137D
Signing time: Fri 13 Jun 2025 13:00:27 +0000
Manifest this update: Fri 13 Jun 2025 13:00:27 +0000
Manifest next update: Sat 14 Jun 2025 13:00:27 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: EHcv9v6eSQpjAdGOtbhtfVJQS/1/XpvdMIrOZShjHcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:97:ae:c6:ce:1d:d8:d7:3c:9f:99:80:57:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Jun 13 13:00:27 2025 GMT
Not After : Jun 14 13:00:27 2025 GMT
Subject: CN=2d61a0277bf6714a397523a0dd0a882b4a2098e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:d4:d3:d2:86:98:73:14:72:45:7f:ad:4c:
83:f9:22:e9:01:7d:0a:fb:bd:51:a0:27:1f:0e:9c:
8b:57:6c:43:00:47:cd:de:81:2a:f7:98:d7:e8:7d:
4b:7c:14:9a:90:72:70:52:cf:8a:84:64:c1:e9:04:
d8:5b:59:02:7f:3c:7c:e6:47:34:a0:74:4f:5d:0b:
98:91:64:09:90:e8:c8:c8:b3:44:b1:cd:06:09:32:
13:bc:4a:a7:3a:9f:bd:b2:67:74:0f:0d:92:ae:20:
94:87:05:0c:59:e5:e5:62:0d:a6:f2:5c:fa:b2:d7:
f2:ef:a2:27:df:d4:45:51:3d:40:62:64:f0:6f:45:
c8:64:17:aa:84:be:0c:25:81:81:43:8d:11:65:d0:
c9:93:ad:12:73:01:6e:dd:02:4d:2a:f4:3f:f1:79:
71:53:e8:13:d7:81:a2:90:61:ba:83:38:91:0e:0e:
95:f6:52:36:fe:19:c9:62:98:79:67:69:54:c3:6e:
1b:d0:04:08:89:cd:3e:e6:56:e8:28:d0:22:a4:41:
ec:ab:b6:de:3c:41:6f:71:38:ef:02:85:f6:20:9a:
98:0b:f4:fa:05:99:64:fb:e8:24:71:4f:8d:98:e5:
a4:98:9a:97:10:83:9c:d5:b0:cc:8f:5a:04:4d:bb:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:A0:27:7B:F6:71:4A:39:75:23:A0:DD:0A:88:2B:4A:20:98:E6
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:cd:dc:7e:82:55:7e:01:3e:c0:b7:af:dd:12:b6:4a:5b:
ba:6e:1b:8e:9e:65:42:b4:e0:15:f4:71:99:9f:2b:6e:27:1c:
5b:4a:6f:a0:84:a6:f8:b5:1c:18:90:7c:4e:dc:c6:22:76:1c:
42:b8:20:ca:b7:e8:2c:66:ed:79:27:06:0c:68:dc:8a:e7:c1:
64:a9:f7:48:97:6b:b3:7a:d7:7f:f9:4a:83:0c:6e:58:a6:5e:
9a:c7:75:7b:d4:07:c1:39:95:7d:35:69:8c:e4:74:4e:b3:f0:
20:1c:7e:64:52:3f:ea:92:80:ac:54:58:b9:74:1d:63:f8:da:
68:53:7c:a8:fd:17:d4:e5:d3:3a:90:1f:0b:1b:97:a0:37:dc:
69:8b:3d:1d:16:dc:e6:95:c7:72:bd:73:2b:70:df:f9:23:8d:
d2:d8:df:b2:cd:38:7d:88:c1:66:ae:bd:24:53:9a:85:4b:95:
54:b5:db:f8:ce:cf:d2:99:08:65:5d:a0:b1:03:38:35:b8:fb:
58:12:4a:1a:69:a3:ea:91:f0:80:b9:fb:69:c6:b7:9e:dd:3e:
e6:38:4e:de:17:8a:96:f8:0a:f7:f3:56:99:88:f0:a8:71:65:
1a:a3:3b:e1:ae:66:d8:c0:c1:7a:bc:3a:5a:46:79:4b:6f:2f:
2e:e9:54:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYJeuxs4d2Nc8n5mAV6BFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1
YTMzYTEwHhcNMjUwNjEzMTMwMDI3WhcNMjUwNjE0MTMwMDI3WjAzMTEwLwYDVQQD
EygyZDYxYTAyNzdiZjY3MTRhMzk3NTIzYTBkZDBhODgyYjRhMjA5OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14zU09KGmHMUckV/rUyD+SLpAX0K
+71RoCcfDpyLV2xDAEfN3oEq95jX6H1LfBSakHJwUs+KhGTB6QTYW1kCfzx85kc0
oHRPXQuYkWQJkOjIyLNEsc0GCTITvEqnOp+9smd0Dw2SriCUhwUMWeXlYg2m8lz6
stfy76In39RFUT1AYmTwb0XIZBeqhL4MJYGBQ40RZdDJk60ScwFu3QJNKvQ/8Xlx
U+gT14GikGG6gziRDg6V9lI2/hnJYph5Z2lUw24b0AQIic0+5lboKNAipEHsq7be
PEFvcTjvAoX2IJqYC/T6BZlk++gkcU+NmOWkmJqXEIOc1bDMj1oETbs0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1hoCd79nFKOXUjoN0KiCtKIJjmMB8GA1UdIwQY
MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt
MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx
LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1nN3H6C
VX4BPsC3r90Stkpbum4bjp5lQrTgFfRxmZ8rbiccW0pvoISm+LUcGJB8TtzGInYc
QrggyrfoLGbteScGDGjciufBZKn3SJdrs3rXf/lKgwxuWKZemsd1e9QHwTmVfTVp
jOR0TrPwIBx+ZFI/6pKArFRYuXQdY/jaaFN8qP0X1OXTOpAfCxuXoDfcaYs9HRbc
5pXHcr1zK3Df+SON0tjfss04fYjBZq69JFOahUuVVLXb+M7P0pkIZV2gsQM4Nbj7
WBJKGmmj6pHwgLn7aca3nt0+5jhO3heKlvgK9/NWmYjwqHFlGqM74a5m2MDBerw6
WkZ5S28vLulUaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client