Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: Drnhbj740MLyju6VJ+Jl7cYe3G2stigKfiAS2uuMGjM=
Subject key identifier: EF:17:35:64:C7:03:56:33:79:A1:C3:81:8D:8E:94:8E:8D:A8:19:58
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 0197B77C552B47DFB0EB1DBEA1B2532A2E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: a1ZJcboZ9qCjlelSIq50iWW3KAqPJkdyiwa10Fp5rSA=)
2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:55:2b:47:df:b0:eb:1d:be:a1:b2:53:2a:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=ef173564c703563379a1c3818d8e948e8da81958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:02:79:99:5c:54:d8:3c:42:41:94:b2:73:
b6:e5:f2:18:08:e2:ca:51:b7:18:da:83:7e:7b:ff:
a3:69:a8:0f:fc:64:f8:9c:10:93:1e:8d:f1:d3:60:
6e:bb:e4:79:75:c9:28:2d:c2:a0:e1:81:01:76:b1:
b5:33:0e:2c:7e:09:8d:b6:ad:d0:10:58:56:a2:1b:
cd:c5:56:c8:0a:4e:2e:06:56:4e:50:fd:ce:c8:3e:
6f:cb:a3:8b:81:e9:8b:ef:6b:10:31:6c:5f:da:93:
40:79:3c:49:d2:b6:9a:a9:c5:d8:31:dc:a0:79:5a:
20:64:8d:e9:22:a8:cb:c3:75:c4:a9:52:14:e7:a3:
14:97:15:7e:a4:c9:3a:a2:d0:b0:6f:c9:8f:2c:eb:
31:18:ea:ae:c8:ee:cb:52:1f:86:e3:c2:04:80:41:
7c:d4:55:02:f9:60:85:a6:41:a5:b7:5f:41:24:1e:
91:b9:cc:36:6f:12:d0:5c:9b:4b:f6:65:ab:62:98:
c1:71:d4:98:74:4d:73:29:be:0f:26:f4:e2:3c:bf:
dd:7d:57:fd:45:a0:8d:b4:88:c4:b2:6a:13:49:c6:
bb:d1:89:ae:0f:90:90:56:03:1a:61:d1:69:54:9e:
dd:c3:d0:c3:23:8c:1c:91:f4:e0:07:f1:ce:23:2d:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:17:35:64:C7:03:56:33:79:A1:C3:81:8D:8E:94:8E:8D:A8:19:58
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:67:f0:93:64:c1:1d:e9:44:be:04:90:eb:92:ce:fa:15:
9b:10:fc:7d:9d:e4:48:a8:ce:3e:1c:e1:3d:8f:11:ce:ba:98:
1c:b9:f6:a6:37:3b:f1:5c:37:20:d6:ed:ed:91:2b:97:94:6e:
d5:1e:f5:1a:72:b4:31:f1:bc:aa:9f:50:4c:39:16:0f:c4:2f:
50:9a:39:26:04:91:4b:b3:57:9c:fc:ee:b0:58:b3:93:cd:fc:
05:48:ed:bc:06:22:62:40:ab:f9:2e:1b:44:d8:56:38:61:ba:
38:7a:0f:f4:c3:80:73:0d:33:cf:ce:b2:d0:35:56:66:b3:ed:
54:58:3c:1b:df:bb:80:65:d2:d5:2b:1f:ae:2e:42:c3:9c:4c:
06:3f:03:fe:f3:cd:f2:67:cd:7d:6f:6d:f3:34:e3:f6:ac:e5:
a4:1a:90:d4:1e:21:00:0c:30:64:d2:00:45:ef:b9:7b:9b:f7:
52:bb:24:0c:f6:b3:d3:5b:a1:1c:21:d4:27:b6:32:94:ff:dd:
cf:a5:25:67:16:21:41:d3:ac:36:08:c2:a9:5f:89:b9:47:38:
f2:21:5e:e6:3d:a5:d3:b4:ff:53:ed:1d:3b:89:76:07:a6:f6:
2c:d9:28:13:a6:25:c8:b4:ff:ac:1e:dc:89:d2:63:38:98:1c:
7f:23:f2:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFUrR9+w6x2+obJTKi6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjVhNjZjZmQyMWE1Y2FkN2EyOWI4ZWI1Y2Q5MmFhNDYw
MzIwYzMwHhcNMjUwNjI4MTcwMTA4WhcNMjUwNjI5MTcwMTA4WjAzMTEwLwYDVQQD
EyhlZjE3MzU2NGM3MDM1NjMzNzlhMWMzODE4ZDhlOTQ4ZThkYTgxOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoACeZlcVNg8QkGUsnO25fIYCOLK
UbcY2oN+e/+jaagP/GT4nBCTHo3x02Buu+R5dckoLcKg4YEBdrG1Mw4sfgmNtq3Q
EFhWohvNxVbICk4uBlZOUP3OyD5vy6OLgemL72sQMWxf2pNAeTxJ0raaqcXYMdyg
eVogZI3pIqjLw3XEqVIU56MUlxV+pMk6otCwb8mPLOsxGOquyO7LUh+G48IEgEF8
1FUC+WCFpkGlt19BJB6Rucw2bxLQXJtL9mWrYpjBcdSYdE1zKb4PJvTiPL/dfVf9
RaCNtIjEsmoTSca70YmuD5CQVgMaYdFpVJ7dw9DDI4wckfTgB/HOIy23CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8XNWTHA1YzeaHDgY2OlI6NqBlYMB8GA1UdIwQY
MBaAFNj1pmz9IaXK16KbjrXNkqpGAyDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTct
ODIxMGRiNzA0OWIxLzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTctODIxMGRiNzA0OWIx
LzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Zn8JNk
wR3pRL4EkOuSzvoVmxD8fZ3kSKjOPhzhPY8RzrqYHLn2pjc78Vw3INbt7ZErl5Ru
1R71GnK0MfG8qp9QTDkWD8QvUJo5JgSRS7NXnPzusFizk838BUjtvAYiYkCr+S4b
RNhWOGG6OHoP9MOAcw0zz86y0DVWZrPtVFg8G9+7gGXS1Ssfri5Cw5xMBj8D/vPN
8mfNfW9t8zTj9qzlpBqQ1B4hAAwwZNIARe+5e5v3UrskDPaz01uhHCHUJ7YylP/d
z6UlZxYhQdOsNgjCqV+JuUc48iFe5j2l07T/U+0dO4l2B6b2LNkoE6YlyLT/rB7c
idJjOJgcfyPy7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:09 2025 by rpki-client