Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: ADunkUDMujQJJGJ+8w9ScRABTiILSaAsCqScFh5UZ/s=
Subject key identifier: 1A:9C:96:D9:D3:78:C5:B2:6D:9E:62:E0:CB:A5:1C:1B:BD:44:08:93
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0197CACBEBBFA1AAEDCE9D99E9CE7257D335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0B9E
Signing time: Wed 02 Jul 2025 11:00:51 +0000
Manifest this update: Wed 02 Jul 2025 11:00:51 +0000
Manifest next update: Thu 03 Jul 2025 11:00:51 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 7NVnGo7yZ0LupfZMcjo8U3AqFb6a6uAz+c+EzR3U9uk=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cb:eb:bf:a1:aa:ed:ce:9d:99:e9:ce:72:57:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jul 2 11:00:51 2025 GMT
Not After : Jul 3 11:00:51 2025 GMT
Subject: CN=1a9c96d9d378c5b26d9e62e0cba51c1bbd440893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:80:75:5c:6c:c8:7e:d5:dc:d7:38:06:4c:
87:7a:fc:f5:00:8e:06:c2:8d:c8:a7:41:63:2b:ca:
98:9c:81:cb:00:65:32:6f:ea:a2:ee:5f:e5:ba:0c:
c2:5f:d5:dd:3c:e5:0e:6a:3e:8b:df:c0:51:17:5d:
e5:37:fd:b7:84:6f:8d:b7:33:3f:99:bb:f9:f2:30:
96:68:34:eb:4a:e9:5e:45:e6:2f:9f:71:43:c6:7c:
a0:48:31:aa:50:5f:52:e4:35:6e:47:11:48:f8:7a:
d7:83:59:ff:b8:09:02:78:1d:bd:b5:24:e5:ca:20:
78:2c:d3:36:07:18:2b:63:7c:f1:ce:87:e8:9a:2d:
7d:2a:66:ce:f3:f6:43:a5:3a:db:71:41:aa:fa:c7:
77:d0:26:f2:76:0a:36:9a:ec:29:da:62:f0:a1:af:
b7:03:6f:70:a4:3c:c0:61:00:c1:d2:a5:4c:a2:e8:
80:09:6c:b9:04:47:20:1b:9f:37:e1:37:18:60:b1:
4d:ae:d2:90:b0:55:9d:ad:d2:98:fd:cc:05:26:5c:
22:56:2d:da:9b:90:2b:09:ed:56:59:e4:6e:ad:cf:
68:4c:ef:2b:4b:5b:c8:14:b5:37:49:78:3a:f7:ae:
c1:bc:45:a9:31:5f:1a:07:17:b9:a9:4b:8a:93:38:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:96:D9:D3:78:C5:B2:6D:9E:62:E0:CB:A5:1C:1B:BD:44:08:93
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:28:f1:34:8d:51:4d:ac:13:44:d6:03:5c:3a:56:80:e5:7c:
ed:08:da:90:9e:88:8e:7b:3c:3f:d6:73:9a:3e:8b:d1:54:8c:
a5:85:3e:1d:b9:be:26:c7:8c:ee:df:8f:f6:ab:7e:b6:ce:ab:
8d:e8:99:83:9f:42:37:47:07:fb:04:00:8a:64:cb:39:0b:aa:
46:d7:97:e0:3e:cf:9b:3f:9e:7f:1e:59:6b:e5:f2:38:f1:b3:
c1:2e:40:3d:ac:59:8c:2e:2c:a2:3e:bd:a3:28:18:3c:ae:51:
43:65:62:8e:13:32:eb:18:39:dd:bf:fe:3e:72:bc:11:f4:01:
5d:5e:a1:24:5b:78:fb:6b:e9:a3:df:eb:4c:e4:c2:88:3f:0f:
24:0c:c0:7f:a8:70:df:25:f8:b5:fa:52:87:1e:be:d8:b5:06:
07:58:33:e9:eb:d7:8e:75:60:2e:fd:e7:f8:bf:30:b8:c4:bb:
de:b0:96:13:c9:54:d8:a4:b1:81:db:22:47:1a:f1:48:1b:41:
82:9c:c9:a4:90:02:5d:7a:32:47:ed:07:f9:12:b8:90:4a:f8:
2d:47:fd:5b:98:7a:67:53:fd:3d:a9:42:8f:24:20:8a:3b:5d:
68:21:ee:4d:e4:85:af:38:f6:62:cb:92:ad:d8:e0:1d:e2:3f:
b4:7e:b5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKy+u/oartzp2Z6c5yV9M1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5
ZjAxNDAwHhcNMjUwNzAyMTEwMDUxWhcNMjUwNzAzMTEwMDUxWjAzMTEwLwYDVQQD
EygxYTljOTZkOWQzNzhjNWIyNmQ5ZTYyZTBjYmE1MWMxYmJkNDQwODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySyAdVxsyH7V3Nc4BkyHevz1AI4G
wo3Ip0FjK8qYnIHLAGUyb+qi7l/lugzCX9XdPOUOaj6L38BRF13lN/23hG+NtzM/
mbv58jCWaDTrSuleReYvn3FDxnygSDGqUF9S5DVuRxFI+HrXg1n/uAkCeB29tSTl
yiB4LNM2BxgrY3zxzofomi19KmbO8/ZDpTrbcUGq+sd30Cbydgo2muwp2mLwoa+3
A29wpDzAYQDB0qVMouiACWy5BEcgG5834TcYYLFNrtKQsFWdrdKY/cwFJlwiVi3a
m5ArCe1WWeRurc9oTO8rS1vIFLU3SXg6967BvEWpMV8aBxe5qUuKkzgU4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqcltnTeMWybZ5i4MulHBu9RAiTMB8GA1UdIwQY
MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt
YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2
LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlijxNI1R
TawTRNYDXDpWgOV87QjakJ6Ijns8P9Zzmj6L0VSMpYU+Hbm+JseM7t+P9qt+ts6r
jeiZg59CN0cH+wQAimTLOQuqRteX4D7Pmz+efx5Za+XyOPGzwS5APaxZjC4soj69
oygYPK5RQ2VijhMy6xg53b/+PnK8EfQBXV6hJFt4+2vpo9/rTOTCiD8PJAzAf6hw
3yX4tfpShx6+2LUGB1gz6evXjnVgLv3n+L8wuMS73rCWE8lU2KSxgdsiRxrxSBtB
gpzJpJACXXoyR+0H+RK4kEr4LUf9W5h6Z1P9PalCjyQgijtdaCHuTeSFrzj2YsuS
rdjgHeI/tH61/A==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:02:45 2025 by rpki-client