Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: ZF/xbk1rYBVjmXL4Pl0xm1UUETzxmKiHiJfWgUX8qNM=
Subject key identifier: 78:9B:1C:20:31:82:D7:7A:FB:DA:62:89:49:59:49:66:61:96:D1:DF
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019768F32D16E4302ADF9841139BEA1B8D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 15
Signing time: Fri 13 Jun 2025 11:00:56 +0000
Manifest this update: Fri 13 Jun 2025 11:00:56 +0000
Manifest next update: Sat 14 Jun 2025 11:00:56 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: 9QzJMqFD/6R3YMR0yY65Fmb2oqtMqiqkMh7x/p3tVfw=)
2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:2d:16:e4:30:2a:df:98:41:13:9b:ea:1b:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jun 13 11:00:56 2025 GMT
Not After : Jun 14 11:00:56 2025 GMT
Subject: CN=789b1c203182d77afbda6289495949666196d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:bb:07:8b:0f:8a:1b:b4:d8:7d:f6:32:6f:
6d:2b:7c:70:c6:92:87:41:3a:99:82:82:de:6d:11:
ea:90:3b:e7:e8:9f:77:62:a6:f9:fa:66:b9:06:9f:
5f:a2:28:bf:46:86:98:99:d7:75:b6:d5:b5:43:f8:
d6:6e:74:7f:6c:5f:05:77:9a:0b:aa:53:f5:cf:03:
3b:ea:7c:ed:b3:6f:e0:a8:9f:38:cc:aa:80:67:6f:
f6:31:6f:60:30:b7:f8:dd:4c:8d:51:15:8d:af:d6:
04:76:23:25:d9:3b:ad:cc:99:ce:57:10:84:61:2c:
c7:e6:fd:db:04:08:53:cd:1c:c5:f4:fc:a3:1b:92:
5c:b9:a8:19:c5:71:08:a2:90:3f:b7:80:c3:1c:02:
ff:98:46:fa:f4:19:27:74:e2:8d:68:58:1f:08:f2:
a0:4c:4f:87:fc:17:57:81:c7:8f:e0:a4:39:22:8b:
96:1a:0b:bc:80:20:0c:56:77:8b:3b:5b:b5:c3:9a:
02:7e:9a:90:09:1e:2f:77:3c:75:d6:7f:f7:27:ce:
2e:92:e6:1f:86:2a:40:73:71:7b:03:9f:ad:3d:04:
39:af:f1:f2:10:28:a5:be:6d:ae:92:e8:66:af:78:
83:65:55:7b:da:7a:f4:6a:78:42:63:3b:4e:d9:16:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:1C:20:31:82:D7:7A:FB:DA:62:89:49:59:49:66:61:96:D1:DF
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dd:c0:e7:ef:b5:7b:82:a9:6e:60:ea:0d:14:e7:11:3a:89:
45:15:95:fb:fa:cb:e4:09:c6:ff:e6:e9:3f:c3:6c:9f:e2:82:
ed:4c:14:2b:d7:06:4f:57:0d:05:e4:02:9c:c8:e6:db:af:a2:
a2:79:3f:e9:cf:4b:79:cc:27:9b:f3:67:cb:ee:50:55:1b:82:
68:ba:3e:82:07:90:df:ec:f9:4a:bc:6b:89:68:f4:1a:06:61:
ba:a7:96:eb:1f:bc:7c:5d:e7:9b:47:46:6c:a8:ee:b3:ff:6d:
39:60:39:fa:ac:0a:f1:e2:4b:7a:2d:26:31:65:10:d5:13:03:
4a:8f:1d:01:8b:34:9d:08:0f:1e:bb:d9:35:e8:8c:c0:a9:4e:
81:9f:10:2c:b9:31:e7:c1:00:04:95:a3:55:7b:09:89:d8:52:
f3:37:bc:83:92:db:32:7d:92:de:35:af:a9:3a:13:8f:99:7f:
fa:b7:e7:fe:f1:06:81:94:48:b9:88:df:23:09:61:1b:fc:47:
46:5a:05:50:e7:67:05:c3:b3:4f:cb:a5:cd:49:ec:23:a1:57:
7e:c2:42:c1:07:40:94:2e:8f:0a:98:35:96:9f:7b:e1:a1:7d:
aa:7e:bc:51:15:b1:26:a1:6f:8a:ca:5b:06:0c:5b:df:be:7a:
19:cf:23:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8y0W5DAq35hBE5vqG41tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDUzNjBlOTg3MzgyNWY3NWQ2NzFkYWYxNjI0YTUyZTk4
NTM5MGMwHhcNMjUwNjEzMTEwMDU2WhcNMjUwNjE0MTEwMDU2WjAzMTEwLwYDVQQD
Eyg3ODliMWMyMDMxODJkNzdhZmJkYTYyODk0OTU5NDk2NjYxOTZkMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCK7B4sPihu02H32Mm9tK3xwxpKH
QTqZgoLebRHqkDvn6J93Yqb5+ma5Bp9foii/RoaYmdd1ttW1Q/jWbnR/bF8Fd5oL
qlP1zwM76nzts2/gqJ84zKqAZ2/2MW9gMLf43UyNURWNr9YEdiMl2TutzJnOVxCE
YSzH5v3bBAhTzRzF9PyjG5JcuagZxXEIopA/t4DDHAL/mEb69BkndOKNaFgfCPKg
TE+H/BdXgceP4KQ5IouWGgu8gCAMVneLO1u1w5oCfpqQCR4vdzx11n/3J84ukuYf
hipAc3F7A5+tPQQ5r/HyECilvm2ukuhmr3iDZVV72nr0anhCYztO2RZ2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHibHCAxgtd6+9piiUlZSWZhltHfMB8GA1UdIwQY
MBaAFNsFNg6Yc4JfddZx2vFiSlLphTkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2Ut
ZDYyZDIyNGUzY2FmLzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2UtZDYyZDIyNGUzY2Fm
LzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid3A5++1
e4KpbmDqDRTnETqJRRWV+/rL5AnG/+bpP8Nsn+KC7UwUK9cGT1cNBeQCnMjm26+i
onk/6c9Lecwnm/Nny+5QVRuCaLo+ggeQ3+z5SrxriWj0GgZhuqeW6x+8fF3nm0dG
bKjus/9tOWA5+qwK8eJLei0mMWUQ1RMDSo8dAYs0nQgPHrvZNeiMwKlOgZ8QLLkx
58EABJWjVXsJidhS8ze8g5LbMn2S3jWvqToTj5l/+rfn/vEGgZRIuYjfIwlhG/xH
RloFUOdnBcOzT8ulzUnsI6FXfsJCwQdAlC6PCpg1lp974aF9qn68URWxJqFvispb
Bgxb3756Gc8j5A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:40 2025 by rpki-client