Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: lThUplYbsOA7dgL6R8ss43D0dsAgWF5Bb+XCXDkHZNg=
Subject key identifier: E1:80:F2:90:99:DE:59:F5:96:71:F7:0E:FF:21:2B:67:D1:E3:E6:BD
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 01968A009DEF5E89954424BEAD0979446876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 08E2
Signing time: Thu 01 May 2025 04:00:18 +0000
Manifest this update: Thu 01 May 2025 04:00:18 +0000
Manifest next update: Fri 02 May 2025 04:00:18 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: nKT0bGs1B6uEfsADsBWYJVMGQ0HZW6Tg4SsBi+QfIAI=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:9d:ef:5e:89:95:44:24:be:ad:09:79:44:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: May 1 04:00:18 2025 GMT
Not After : May 2 04:00:18 2025 GMT
Subject: CN=e180f29099de59f59671f70eff212b67d1e3e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:02:36:df:44:b4:a9:38:fe:9f:08:e8:92:
dd:0d:8a:25:8e:ef:a4:ee:5d:c4:78:80:70:be:58:
0a:8d:99:c8:45:d1:9c:91:36:38:dd:43:39:70:a1:
b4:82:10:5c:5c:a1:ec:11:ee:e2:f4:7a:49:90:cf:
89:80:06:5b:37:17:7b:e3:c3:49:a2:bc:40:61:29:
91:d9:9a:a6:07:25:a6:fa:2d:46:a1:25:72:49:4a:
65:a7:29:11:59:5f:28:a0:f9:f5:21:f0:df:50:86:
3d:0e:36:d3:d4:f5:95:1f:18:c2:1f:64:cd:b8:dd:
c6:05:08:d7:c6:ed:20:b7:03:21:49:00:32:ed:d2:
7e:3d:04:0b:a5:a4:21:2f:4c:d8:a5:3f:e3:be:f5:
b6:1a:49:0f:d6:c9:45:0e:b0:2b:d9:07:fe:a6:ee:
aa:8b:72:20:35:a1:08:ac:49:db:01:6c:0f:35:8b:
2c:97:cc:b5:6f:49:50:bc:53:48:50:4f:49:4a:29:
c2:56:34:94:aa:d4:2c:85:e2:80:53:9a:bb:b8:ae:
bb:94:af:c0:56:41:94:52:34:1e:f9:62:30:be:97:
f8:de:28:02:54:4d:14:c8:d4:5b:0a:b9:d2:68:2a:
0c:cd:90:cc:3c:72:d6:d3:20:89:d7:b8:5a:31:d7:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:F2:90:99:DE:59:F5:96:71:F7:0E:FF:21:2B:67:D1:E3:E6:BD
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8e:42:02:a7:b8:cb:04:96:3b:f0:1f:ab:f9:56:5f:88:3e:
7a:b6:47:51:d0:a6:fb:d8:8e:50:fb:04:c6:52:50:96:0d:1a:
34:15:04:c5:3d:f6:bb:ed:5c:a2:ae:d7:c4:73:b4:9e:ed:f6:
4f:7a:70:9f:26:50:2b:d8:e0:c8:9b:c9:76:39:b5:98:4b:8f:
f4:62:3e:49:3f:95:61:79:da:ac:73:84:e6:df:af:6c:8a:9e:
80:ba:95:48:f2:99:51:c6:2a:78:99:05:8a:96:42:1c:c8:ce:
b0:6f:c6:fe:93:63:8e:f3:5d:09:99:7a:d8:e1:40:1e:d8:13:
fd:4e:c1:55:3c:05:aa:64:f3:88:3a:5a:08:b8:91:81:a4:62:
7c:ff:83:30:f3:e4:2b:78:16:ca:03:08:21:c5:4d:32:d1:60:
4e:9c:61:cd:83:4c:8d:de:0b:66:6f:75:c7:49:93:13:6d:40:
74:30:f3:9b:9a:5a:08:be:a3:cc:4d:46:0f:ce:b2:c6:f9:ec:
5a:48:f6:0d:00:46:33:d2:69:3b:94:89:41:b7:9c:21:c7:51:
32:d3:b9:72:ed:52:3e:12:dd:74:fd:63:1b:09:af:17:e0:3f:
d3:8e:07:65:d4:aa:25:c3:cd:a2:9a:e7:c7:ba:9c:15:68:c7:
5e:f9:18:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKAJ3vXomVRCS+rQl5RGh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz
YWU4ZWUwHhcNMjUwNTAxMDQwMDE4WhcNMjUwNTAyMDQwMDE4WjAzMTEwLwYDVQQD
EyhlMTgwZjI5MDk5ZGU1OWY1OTY3MWY3MGVmZjIxMmI2N2QxZTNlNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMCNt9EtKk4/p8I6JLdDYolju+k
7l3EeIBwvlgKjZnIRdGckTY43UM5cKG0ghBcXKHsEe7i9HpJkM+JgAZbNxd748NJ
orxAYSmR2ZqmByWm+i1GoSVySUplpykRWV8ooPn1IfDfUIY9DjbT1PWVHxjCH2TN
uN3GBQjXxu0gtwMhSQAy7dJ+PQQLpaQhL0zYpT/jvvW2GkkP1slFDrAr2Qf+pu6q
i3IgNaEIrEnbAWwPNYssl8y1b0lQvFNIUE9JSinCVjSUqtQsheKAU5q7uK67lK/A
VkGUUjQe+WIwvpf43igCVE0UyNRbCrnSaCoMzZDMPHLW0yCJ17haMdc+uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGA8pCZ3ln1lnH3Dv8hK2fR4+a9MB8GA1UdIwQY
MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt
YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4
LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo45CAqe4
ywSWO/Afq/lWX4g+erZHUdCm+9iOUPsExlJQlg0aNBUExT32u+1coq7XxHO0nu32
T3pwnyZQK9jgyJvJdjm1mEuP9GI+ST+VYXnarHOE5t+vbIqegLqVSPKZUcYqeJkF
ipZCHMjOsG/G/pNjjvNdCZl62OFAHtgT/U7BVTwFqmTziDpaCLiRgaRifP+DMPPk
K3gWygMIIcVNMtFgTpxhzYNMjd4LZm91x0mTE21AdDDzm5paCL6jzE1GD86yxvns
Wkj2DQBGM9JpO5SJQbecIcdRMtO5cu1SPhLddP1jGwmvF+A/044HZdSqJcPNoprn
x7qcFWjHXvkYaw==
-----END CERTIFICATE-----
Generated at Thu May 1 10:23:05 2025 by rpki-client