Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: zGEjlivODdHRaScHjHcgn//bSyJQmVeWqQT9FwTUhp8=
Subject key identifier: B8:8C:6F:F4:81:BB:AD:3E:96:0F:F0:41:26:14:5C:73:36:E6:80:DD
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 0197B9D9145C23A8FDD043B1050BB4119FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0A5E
Signing time: Sun 29 Jun 2025 04:01:40 +0000
Manifest this update: Sun 29 Jun 2025 04:01:40 +0000
Manifest next update: Mon 30 Jun 2025 04:01:40 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: F6ByPMIk6H6PyseWbTS0TlcD+f0W1Hdg/gt5d00Nzgk=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:14:5c:23:a8:fd:d0:43:b1:05:0b:b4:11:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jun 29 04:01:40 2025 GMT
Not After : Jun 30 04:01:40 2025 GMT
Subject: CN=b88c6ff481bbad3e960ff04126145c7336e680dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:db:d0:43:ac:69:82:4c:ad:2b:a5:9b:be:
e4:c3:4f:53:c2:0a:4a:d1:7b:94:87:68:3d:5c:1f:
d0:27:c0:02:72:e4:80:74:71:a8:22:96:e5:b2:66:
d6:ac:8a:4f:cb:bf:f6:97:ec:b6:ad:c7:fc:82:f5:
6d:0b:da:8f:aa:a0:7e:aa:43:ee:aa:15:e0:29:35:
06:f9:10:5b:8b:41:46:17:64:12:ff:da:5f:c7:97:
8a:b7:a2:93:39:c1:de:81:6a:09:1b:d1:cf:60:f5:
3e:5a:cd:d6:5c:49:b6:78:84:73:70:43:20:31:31:
1d:77:79:be:c3:3b:92:d1:55:81:34:8a:62:4d:b4:
64:96:be:98:5b:a6:a3:c5:1f:4f:17:fb:2b:06:ce:
90:93:e7:27:f0:92:9b:59:9c:ae:a2:aa:36:96:76:
ff:86:23:ea:87:14:e5:58:d8:b1:0d:bd:24:34:e5:
ce:03:3b:5b:22:6d:7d:11:aa:cf:46:a4:37:a2:2d:
81:18:ae:05:d9:8e:d1:f9:d9:a1:f7:6f:ca:c7:17:
8e:92:49:a0:8b:4e:a2:d5:ab:dd:fc:6e:fa:9a:05:
fd:e3:96:b6:54:e8:c7:80:80:da:8d:c6:3e:f9:38:
e1:12:d6:f1:42:33:df:f6:9b:cf:36:00:ec:a9:07:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:6F:F4:81:BB:AD:3E:96:0F:F0:41:26:14:5C:73:36:E6:80:DD
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:75:71:f5:f7:22:87:e7:8e:16:16:d7:4d:1b:34:e1:14:
c9:91:1f:ae:e6:04:23:4f:9f:d7:f5:e7:05:e4:ca:d9:a5:e5:
7e:8b:9d:76:87:35:c7:1d:3b:8a:01:96:1f:33:37:17:63:58:
98:23:9b:02:3b:9c:f4:f2:f7:2e:fa:c7:4f:01:71:f6:55:dc:
29:28:b3:f1:69:61:99:71:1e:9d:1a:6a:b9:c0:49:c7:8a:e3:
39:9b:d3:8b:57:07:b0:82:28:29:e8:0d:56:43:f4:cf:e8:d1:
92:14:ae:ee:b4:eb:ed:0c:82:a6:8d:c2:c2:d6:92:04:b4:2f:
9a:68:55:1f:09:ce:28:e7:6f:5e:c1:0b:0e:a7:89:00:2b:c7:
e0:3e:58:dd:ff:13:39:c4:e4:84:e1:eb:b4:03:d7:c9:36:e0:
2d:89:76:b6:c4:59:a4:af:b3:10:14:78:c1:f2:53:db:41:76:
43:07:12:f8:84:57:59:11:67:6e:8b:69:c5:da:95:87:dd:75:
9d:f2:f9:a5:c7:08:9b:3a:ff:32:2c:44:13:1a:da:d1:f4:9a:
9f:22:fd:e1:31:5c:03:a2:13:68:1e:7b:62:02:72:e9:1c:b8:
e5:db:a1:22:b7:d5:ae:7a:54:ee:fe:67:2f:6f:b8:af:58:2b:
52:05:f9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52RRcI6j90EOxBQu0EZ++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi
NjFhMjAwHhcNMjUwNjI5MDQwMTQwWhcNMjUwNjMwMDQwMTQwWjAzMTEwLwYDVQQD
EyhiODhjNmZmNDgxYmJhZDNlOTYwZmYwNDEyNjE0NWM3MzM2ZTY4MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXjb0EOsaYJMrSulm77kw09TwgpK
0XuUh2g9XB/QJ8ACcuSAdHGoIpblsmbWrIpPy7/2l+y2rcf8gvVtC9qPqqB+qkPu
qhXgKTUG+RBbi0FGF2QS/9pfx5eKt6KTOcHegWoJG9HPYPU+Ws3WXEm2eIRzcEMg
MTEdd3m+wzuS0VWBNIpiTbRklr6YW6ajxR9PF/srBs6Qk+cn8JKbWZyuoqo2lnb/
hiPqhxTlWNixDb0kNOXOAztbIm19EarPRqQ3oi2BGK4F2Y7R+dmh92/KxxeOkkmg
i06i1avd/G76mgX945a2VOjHgIDajcY++TjhEtbxQjPf9pvPNgDsqQePXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiMb/SBu60+lg/wQSYUXHM25oDdMB8GA1UdIwQY
MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt
MzdhMGU0NzRhYjE1LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1
LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk91cfX3
IofnjhYW100bNOEUyZEfruYEI0+f1/XnBeTK2aXlfouddoc1xx07igGWHzM3F2NY
mCObAjuc9PL3LvrHTwFx9lXcKSiz8WlhmXEenRpqucBJx4rjOZvTi1cHsIIoKegN
VkP0z+jRkhSu7rTr7QyCpo3CwtaSBLQvmmhVHwnOKOdvXsELDqeJACvH4D5Y3f8T
OcTkhOHrtAPXyTbgLYl2tsRZpK+zEBR4wfJT20F2QwcS+IRXWRFnbotpxdqVh911
nfL5pccImzr/MixEExra0fSanyL94TFcA6ITaB57YgJy6Ry45duhIrfVrnpU7v5n
L2+4r1grUgX55Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:15 2025 by rpki-client