Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: eT8GzM2nU0fs6gD5YATh8aPeMxFp8bDsk8J8YLduZCw=
Subject key identifier: 2A:9E:F6:8D:35:69:17:91:7B:6B:85:6D:EA:5D:96:E5:65:E9:14:9A
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01976884F8AE90A365F05EF0B8BEA902FB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0E5F
Signing time: Fri 13 Jun 2025 09:00:34 +0000
Manifest this update: Fri 13 Jun 2025 09:00:34 +0000
Manifest next update: Sat 14 Jun 2025 09:00:34 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: 1j4y2cBpNXrEfSWITbkRew3Nol50adfoQN/PCtnK1eM=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f8:ae:90:a3:65:f0:5e:f0:b8:be:a9:02:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jun 13 09:00:34 2025 GMT
Not After : Jun 14 09:00:34 2025 GMT
Subject: CN=2a9ef68d356917917b6b856dea5d96e565e9149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:de:53:57:76:be:85:3c:38:6e:e2:64:56:
28:15:89:a0:ad:87:b8:e6:da:1e:4c:b0:1c:0f:ec:
73:af:fe:8d:18:34:b7:ca:9f:81:ca:f6:79:b7:45:
ca:2f:26:b2:2a:26:10:cd:19:14:70:05:4c:bd:a7:
9f:ee:aa:43:df:17:14:4a:06:18:23:59:a5:95:6b:
30:32:f7:22:95:80:2a:a9:0a:1b:9c:8d:11:a7:4b:
18:45:76:cd:47:b9:17:ac:65:90:48:15:a0:02:18:
4b:4a:09:b7:52:67:c1:ca:f0:e3:ae:4d:5f:94:b6:
63:aa:62:67:94:54:9c:9c:22:b1:23:e9:e1:76:92:
b0:59:a2:de:4a:69:a3:de:de:8c:00:56:dd:d0:6c:
31:ae:90:eb:7f:0e:c4:70:07:2a:23:47:55:c0:fe:
f1:43:34:36:56:23:38:c4:f6:ba:69:f4:98:bc:54:
5d:4c:28:e9:f0:57:10:f9:aa:20:aa:96:e1:42:e0:
59:46:7f:e6:2f:f8:4c:a1:db:0a:dd:4d:fe:10:c5:
7f:33:88:59:aa:b3:e9:d1:f6:1c:ad:a6:f9:cb:c4:
75:39:2d:f5:f0:55:62:5f:bf:c2:f9:66:be:dc:ef:
09:89:e8:58:59:f6:b7:5e:2d:c5:67:c8:fe:3a:f3:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:F6:8D:35:69:17:91:7B:6B:85:6D:EA:5D:96:E5:65:E9:14:9A
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:ff:d2:e0:b7:af:48:35:5b:01:c1:a6:cc:0b:5d:69:7b:
41:66:35:71:ad:3d:5b:8c:8c:39:49:d1:a5:c7:69:fb:06:98:
09:eb:2a:b0:d1:35:20:05:72:a4:74:27:df:ae:f6:c3:c2:5e:
92:f9:56:be:6e:ac:09:16:ff:4e:65:ef:a7:d6:1b:5d:f6:67:
f0:2f:d8:c7:a3:12:ae:4a:97:64:3e:05:41:36:65:07:46:18:
78:a7:1e:e9:e6:ff:4b:30:57:68:5b:30:72:a0:2d:6a:4d:f5:
3b:75:ff:ed:0f:d6:cf:4c:aa:44:bb:fa:84:60:d5:ba:2c:60:
e3:8f:1c:fe:4d:69:18:37:82:93:80:5a:9c:34:e6:a8:37:11:
b8:68:e5:6c:20:d0:60:2f:ff:9c:b1:0f:5a:00:d6:8b:aa:27:
da:aa:52:c2:ab:e1:6d:d1:a3:31:80:47:fb:a3:86:44:69:01:
cc:3e:03:85:89:12:e8:ea:c9:5e:45:86:ac:92:a5:79:b5:aa:
cc:93:18:26:ee:db:cf:c6:06:22:ac:b0:dc:72:52:81:17:69:
c5:ed:5f:e1:77:1d:a3:79:db:d7:4f:c4:4b:7c:ab:0f:0e:2d:
eb:bc:4f:ff:b9:46:4e:a2:50:d4:e7:31:c5:a5:45:f3:9e:65:
fc:81:b9:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohPiukKNl8F7wuL6pAvtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4
NzA3NmUwHhcNMjUwNjEzMDkwMDM0WhcNMjUwNjE0MDkwMDM0WjAzMTEwLwYDVQQD
EygyYTllZjY4ZDM1NjkxNzkxN2I2Yjg1NmRlYTVkOTZlNTY1ZTkxNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd/eU1d2voU8OG7iZFYoFYmgrYe4
5toeTLAcD+xzr/6NGDS3yp+ByvZ5t0XKLyayKiYQzRkUcAVMvaef7qpD3xcUSgYY
I1mllWswMvcilYAqqQobnI0Rp0sYRXbNR7kXrGWQSBWgAhhLSgm3UmfByvDjrk1f
lLZjqmJnlFScnCKxI+nhdpKwWaLeSmmj3t6MAFbd0GwxrpDrfw7EcAcqI0dVwP7x
QzQ2ViM4xPa6afSYvFRdTCjp8FcQ+aogqpbhQuBZRn/mL/hModsK3U3+EMV/M4hZ
qrPp0fYcrab5y8R1OS318FViX7/C+Wa+3O8JiehYWfa3Xi3FZ8j+OvO5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqe9o01aReRe2uFbepdluVl6RSaMB8GA1UdIwQY
MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt
MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3
LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyv/0uC3
r0g1WwHBpswLXWl7QWY1ca09W4yMOUnRpcdp+waYCesqsNE1IAVypHQn3672w8Je
kvlWvm6sCRb/TmXvp9YbXfZn8C/Yx6MSrkqXZD4FQTZlB0YYeKce6eb/SzBXaFsw
cqAtak31O3X/7Q/Wz0yqRLv6hGDVuixg448c/k1pGDeCk4BanDTmqDcRuGjlbCDQ
YC//nLEPWgDWi6on2qpSwqvhbdGjMYBH+6OGRGkBzD4DhYkS6OrJXkWGrJKlebWq
zJMYJu7bz8YGIqyw3HJSgRdpxe1f4Xcdo3nb10/ES3yrDw4t67xP/7lGTqJQ1Ocx
xaVF855l/IG5rg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:58 2025 by rpki-client