Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: bOLfHaeDzVrgiaAE8lU3jks/rXQ7BGgdRYp88A+UHz4=
Subject key identifier: A2:3C:71:AA:38:91:AD:EE:9A:B2:6D:B6:0E:53:C6:C0:0B:DD:93:69
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 0197C50106158E4BC1D099B8A15991526872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1482
Signing time: Tue 01 Jul 2025 08:01:08 +0000
Manifest this update: Tue 01 Jul 2025 08:01:08 +0000
Manifest next update: Wed 02 Jul 2025 08:01:08 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: LndoGd/uWSe83CQ4cVLUeANOWwFo/dLGdq7VG8m4ZGQ=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:06:15:8e:4b:c1:d0:99:b8:a1:59:91:52:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jul 1 08:01:08 2025 GMT
Not After : Jul 2 08:01:08 2025 GMT
Subject: CN=a23c71aa3891adee9ab26db60e53c6c00bdd9369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:c1:21:9d:56:ca:5f:6b:14:26:e8:8b:0d:
f9:e9:9c:56:68:d7:f8:b0:0d:65:f5:0c:8f:76:11:
ad:5e:d8:bc:2a:29:97:52:27:0f:f2:01:a6:c7:1e:
ba:9d:5c:61:75:04:b3:50:c6:15:9a:61:6c:9c:a9:
63:ec:03:77:35:ac:ec:1e:72:31:fb:cf:0b:82:64:
91:83:de:d1:54:55:8c:7b:99:cc:38:c3:0d:68:a7:
91:d6:c4:da:90:09:b5:b6:e3:19:c5:ba:28:18:f7:
18:63:1a:6d:80:89:d8:13:ad:f8:90:4c:6b:af:63:
77:7c:81:62:93:8b:84:ad:c1:2e:aa:30:f2:3b:5a:
3b:83:23:16:01:99:b9:ac:0f:9c:6b:e4:f6:fb:4d:
22:66:db:ae:56:18:f8:60:58:a9:5b:1d:73:bb:d9:
a8:73:26:77:3f:40:c8:6e:50:ee:05:56:98:d9:23:
c2:74:3d:26:88:15:b3:3c:cb:a5:c3:53:cd:44:7f:
54:ad:91:01:4c:e2:c9:21:d6:d2:5f:c6:ce:82:e9:
aa:b3:07:88:5d:de:a9:33:36:f6:db:aa:7c:62:d5:
ca:cf:ec:5d:63:fc:a0:1a:88:6f:de:35:6c:0e:df:
be:9c:72:b8:c6:d2:fb:78:7d:fa:96:b7:fa:f9:1b:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:71:AA:38:91:AD:EE:9A:B2:6D:B6:0E:53:C6:C0:0B:DD:93:69
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fa:21:ab:55:fc:fa:1a:23:d1:93:00:12:a9:fe:8d:94:f8:
3c:47:00:a3:32:37:d6:ac:71:0f:19:bd:1f:93:a0:6e:da:14:
58:af:43:a6:4f:eb:49:29:71:07:0c:ef:21:2d:6c:42:ad:2c:
7c:a1:7d:f8:7a:fd:ff:e6:47:54:96:6e:0a:cf:22:93:1d:1b:
e0:95:c4:ab:bf:e7:19:b7:84:86:09:6a:f4:b0:37:43:71:43:
db:50:75:60:1f:87:8c:1f:e8:40:33:17:61:14:86:63:03:a2:
11:1b:bf:17:98:d3:b7:3c:f1:5d:d3:cb:2b:cb:bf:8e:e5:72:
5f:a3:4a:69:58:1c:d9:23:a6:e9:6e:7e:65:07:e7:94:f3:f0:
0d:ea:8b:cf:05:20:ea:e0:ed:04:3f:25:ba:d9:a8:24:ed:b7:
5c:82:65:b7:d0:7d:00:7e:56:0b:23:a5:5c:e4:3b:55:45:e4:
a2:f7:ca:2d:f3:31:bc:e4:2d:cc:22:c5:b8:b8:d7:7a:1e:2b:
4d:e2:27:ac:eb:08:9c:2b:a3:96:2c:eb:40:ea:f9:ea:ee:92:
ce:bc:64:7e:13:47:0b:5f:17:ca:43:f2:d4:7f:26:f7:fd:72:
7b:e3:0f:0f:76:3d:39:03:3b:8b:6f:e1:ed:38:e7:17:0c:56:
6e:b0:e7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAQYVjkvB0Jm4oVmRUmhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl
NTI2ZGIwHhcNMjUwNzAxMDgwMTA4WhcNMjUwNzAyMDgwMTA4WjAzMTEwLwYDVQQD
EyhhMjNjNzFhYTM4OTFhZGVlOWFiMjZkYjYwZTUzYzZjMDBiZGQ5MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylDBIZ1Wyl9rFCboiw356ZxWaNf4
sA1l9QyPdhGtXti8KimXUicP8gGmxx66nVxhdQSzUMYVmmFsnKlj7AN3NazsHnIx
+88LgmSRg97RVFWMe5nMOMMNaKeR1sTakAm1tuMZxbooGPcYYxptgInYE634kExr
r2N3fIFik4uErcEuqjDyO1o7gyMWAZm5rA+ca+T2+00iZtuuVhj4YFipWx1zu9mo
cyZ3P0DIblDuBVaY2SPCdD0miBWzPMulw1PNRH9UrZEBTOLJIdbSX8bOgumqsweI
Xd6pMzb226p8YtXKz+xdY/ygGohv3jVsDt++nHK4xtL7eH36lrf6+RsLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8cao4ka3umrJttg5TxsAL3ZNpMB8GA1UdIwQY
MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt
OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4
LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/ohq1X8
+hoj0ZMAEqn+jZT4PEcAozI31qxxDxm9H5OgbtoUWK9Dpk/rSSlxBwzvIS1sQq0s
fKF9+Hr9/+ZHVJZuCs8ikx0b4JXEq7/nGbeEhglq9LA3Q3FD21B1YB+HjB/oQDMX
YRSGYwOiERu/F5jTtzzxXdPLK8u/juVyX6NKaVgc2SOm6W5+ZQfnlPPwDeqLzwUg
6uDtBD8lutmoJO23XIJlt9B9AH5WCyOlXOQ7VUXkovfKLfMxvOQtzCLFuLjXeh4r
TeInrOsInCujlizrQOr56u6SzrxkfhNHC18XykPy1H8m9/1ye+MPD3Y9OQM7i2/h
7TjnFwxWbrDnsw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:50 2025 by rpki-client