Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: wBSWdGv3jVFVqEdoVqY1wV+YckVWD8XOKIH7kFAGzRQ=
Subject key identifier: B9:E1:D8:48:D7:3B:D5:92:81:87:08:7C:A2:9B:B5:F5:AD:75:25:F2
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019752A23410B9BE7408E1045B51BBFAC0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 07EB
Signing time: Mon 09 Jun 2025 03:00:51 +0000
Manifest this update: Mon 09 Jun 2025 03:00:51 +0000
Manifest next update: Tue 10 Jun 2025 03:00:51 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: QEpEIDGQIcZ3F6SddicPO/dFU/SrCQxSmTn/TBi2xgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:34:10:b9:be:74:08:e1:04:5b:51:bb:fa:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jun 9 03:00:51 2025 GMT
Not After : Jun 10 03:00:51 2025 GMT
Subject: CN=b9e1d848d73bd5928187087ca29bb5f5ad7525f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:be:7c:e8:5a:15:db:80:e3:e4:3b:12:3c:
a0:c9:50:73:d1:1c:6d:1c:5a:0a:a8:16:04:fa:cd:
d7:32:9c:48:31:ef:db:21:32:7a:8a:e7:f1:b2:b9:
bd:1c:af:94:98:41:9b:78:36:08:e0:29:17:8b:f0:
57:16:67:da:13:23:76:69:73:d2:a6:ec:68:0d:72:
96:b1:03:a1:41:0f:f3:ae:32:18:ba:c7:57:98:53:
6e:b9:92:65:c7:12:d6:ad:17:3b:e6:4e:a2:3d:95:
5e:5e:8e:d0:c4:6a:43:55:a1:13:66:15:a4:2a:d8:
03:0e:d6:a5:61:7a:6f:1c:4b:8f:ba:0b:09:81:b3:
6f:08:3d:d2:00:60:2b:ea:28:fd:15:70:5a:6e:61:
c9:ca:f4:33:9c:0c:bf:8d:b6:86:44:6f:ef:98:e0:
b3:da:4a:93:a5:bd:d4:62:f8:f8:7c:d4:45:b4:d1:
42:e1:a0:75:9c:6b:6c:1a:16:13:a8:f3:6d:d7:89:
30:d5:38:aa:9e:e2:48:77:89:96:52:bb:fd:82:62:
49:77:94:0c:b5:b6:0a:f7:a1:f1:f7:91:46:2d:df:
ed:e1:15:ba:c0:9e:b5:18:3e:27:a1:02:39:63:73:
8b:4e:86:af:55:ce:cb:bb:5c:f8:e5:dd:db:00:a9:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:D8:48:D7:3B:D5:92:81:87:08:7C:A2:9B:B5:F5:AD:75:25:F2
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:b9:7f:64:b3:55:2a:9f:14:26:96:10:19:92:7e:b3:fa:
5e:1f:16:d3:b8:21:77:67:17:56:7f:dc:d4:97:d8:47:b0:ab:
f9:a6:16:47:f9:81:be:34:85:9c:ef:be:1a:80:4c:55:be:df:
16:dc:bf:e4:ac:99:1d:99:7b:c7:76:a9:35:b4:20:f3:26:01:
55:38:f5:f5:90:cc:d3:c1:5d:cb:5e:ba:1a:00:68:56:1a:dd:
5b:cd:a2:9c:e1:3f:74:cb:a6:94:41:60:77:3b:37:77:8d:04:
89:f9:89:9f:73:fc:29:6e:39:06:af:6c:ed:01:45:9c:1e:df:
f0:a8:e2:ce:6b:a9:e3:6f:d1:8a:b2:ee:d9:d1:e6:42:97:38:
16:66:e6:85:b4:69:76:c3:cd:fb:7c:33:c7:ec:e5:a6:05:bc:
23:f0:49:99:6c:3a:43:1c:bb:92:55:d6:be:80:79:9e:6f:8b:
a7:56:28:45:b7:52:38:d2:cf:ae:d0:a5:96:58:bc:63:1b:f7:
a6:15:67:d1:59:d9:d8:4c:5b:10:e6:46:53:92:88:23:d0:d0:
4c:0e:79:fe:87:af:90:b3:f2:8d:49:f4:dd:ce:47:1b:58:de:
07:ce:b5:90:2e:da:83:23:66:ef:3f:41:3f:5f:88:07:40:53:
f7:d5:f6:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSojQQub50COEEW1G7+sDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNhZDdhOWYwYTA5YjNkNTRkYTZjZGNkZTc0MzEyZmFj
YzZkNzcwHhcNMjUwNjA5MDMwMDUxWhcNMjUwNjEwMDMwMDUxWjAzMTEwLwYDVQQD
EyhiOWUxZDg0OGQ3M2JkNTkyODE4NzA4N2NhMjliYjVmNWFkNzUyNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2y+fOhaFduA4+Q7EjygyVBz0Rxt
HFoKqBYE+s3XMpxIMe/bITJ6iufxsrm9HK+UmEGbeDYI4CkXi/BXFmfaEyN2aXPS
puxoDXKWsQOhQQ/zrjIYusdXmFNuuZJlxxLWrRc75k6iPZVeXo7QxGpDVaETZhWk
KtgDDtalYXpvHEuPugsJgbNvCD3SAGAr6ij9FXBabmHJyvQznAy/jbaGRG/vmOCz
2kqTpb3UYvj4fNRFtNFC4aB1nGtsGhYTqPNt14kw1TiqnuJId4mWUrv9gmJJd5QM
tbYK96Hx95FGLd/t4RW6wJ61GD4noQI5Y3OLToavVc7Lu1z45d3bAKmypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnh2EjXO9WSgYcIfKKbtfWtdSXyMB8GA1UdIwQY
MBaAFNgcrXqfCgmz1U2mzc3nQxL6zG13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAt
ZDNlYTcwN2M4ZjE4LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAtZDNlYTcwN2M4ZjE4
LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJG5f2Sz
VSqfFCaWEBmSfrP6Xh8W07ghd2cXVn/c1JfYR7Cr+aYWR/mBvjSFnO++GoBMVb7f
Fty/5KyZHZl7x3apNbQg8yYBVTj19ZDM08Fdy166GgBoVhrdW82inOE/dMumlEFg
dzs3d40EifmJn3P8KW45Bq9s7QFFnB7f8Kjizmup42/RirLu2dHmQpc4FmbmhbRp
dsPN+3wzx+zlpgW8I/BJmWw6Qxy7klXWvoB5nm+Lp1YoRbdSONLPrtCllli8Yxv3
phVn0VnZ2ExbEOZGU5KII9DQTA55/oevkLPyjUn03c5HG1jeB861kC7agyNm7z9B
P1+IB0BT99X28Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:42 2025 by rpki-client