Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: nprYSusYmcuc2hi3R9t1k6HVbNtkwXBJ7kPFxZ+3HzA=
Subject key identifier: A9:04:6B:35:CF:58:98:0F:FF:AF:2A:8E:52:84:85:94:70:87:FD:D9
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 0197B6A17496FFB530A354EF07BBF901FEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 10C8
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: RLVqlJYb6AQnLBQ3SpzW9CNj1wvz/ElYdJ2D+XpAz/g=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:74:96:ff:b5:30:a3:54:ef:07:bb:f9:01:fe:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=a9046b35cf58980fffaf2a8e528485947087fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:df:c6:b4:c6:fd:eb:da:58:09:86:ac:29:
e8:47:fd:bc:19:b4:48:cb:da:2d:13:78:6b:71:1f:
8c:f0:4b:a9:b7:6b:2b:b1:c5:69:09:36:21:01:37:
d8:00:04:17:84:3a:7b:49:ce:f0:3b:af:cd:16:29:
37:52:0e:bf:97:91:4b:28:d7:ef:48:fe:ff:03:1d:
10:59:d8:05:f1:d7:52:a8:11:cc:cd:d9:f5:ea:81:
82:6c:9a:04:2b:00:b3:fb:3c:ea:e6:c2:af:67:4c:
84:8e:3f:9f:f3:d0:06:45:31:9e:2b:26:b0:c3:99:
1a:d3:6d:0c:59:7f:26:f4:2c:8a:be:96:2d:da:1a:
bd:1b:07:6e:4d:1f:59:63:0b:21:e9:e0:96:93:ec:
f8:fa:7d:95:b3:af:11:2e:bb:93:4c:b7:8d:35:f1:
ff:6a:19:7e:0e:a9:b1:13:71:ab:1c:86:4e:82:1a:
48:66:10:a0:14:bd:74:d3:1a:0b:12:09:d3:dd:62:
65:12:1b:13:b5:1a:df:9d:a8:1e:8d:ef:69:1e:1d:
4d:9f:0d:7d:c3:36:b4:be:e9:4a:a6:7e:3b:f0:b3:
e9:06:9d:67:c0:f6:39:77:12:a1:62:37:62:e3:05:
9e:23:77:cc:10:d7:bf:1b:a6:a0:04:1e:0e:d8:0e:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:6B:35:CF:58:98:0F:FF:AF:2A:8E:52:84:85:94:70:87:FD:D9
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:96:20:2e:b7:c7:a8:79:32:34:c2:2d:a6:4c:4a:81:60:
b8:28:26:a3:d6:d3:2f:2d:74:79:e1:bd:6a:2c:91:bc:22:3f:
69:34:3f:9e:6c:6a:c1:37:b9:66:3f:2c:ab:5d:0b:b0:55:45:
68:d0:ea:41:1b:84:77:7b:00:4a:b3:db:cc:d4:c5:ef:95:fc:
2a:f3:dd:f4:58:bd:48:80:91:36:79:71:0e:37:ce:eb:a9:60:
4b:76:66:d6:83:d9:05:82:e9:fa:b1:37:7f:cd:f6:4f:e3:d7:
37:08:3d:d9:0d:83:b5:09:63:28:f7:89:f6:c0:b6:73:db:1c:
e3:d7:c8:a0:17:12:57:7a:aa:ca:84:aa:ff:9b:5b:ff:cc:e3:
9d:04:73:d7:77:5e:45:68:94:ae:0d:47:b3:2c:3f:cb:2e:44:
a1:f4:fa:94:31:ec:f3:f6:01:41:d4:86:25:e6:1a:88:f8:7e:
76:21:50:85:0f:c5:44:3f:9f:f2:32:64:46:f6:dd:19:d7:ed:
95:85:90:aa:6e:a2:12:58:99:d9:df:e7:3f:27:73:c6:29:54:
f3:60:78:d4:07:a4:c0:42:ea:db:94:5a:4c:57:d2:ee:c1:b6:
c7:18:60:e3:d4:e6:1e:56:4c:94:48:39:4d:fc:2f:1a:de:24:
74:8a:df:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oXSW/7Uwo1TvB7v5Af62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2
NzVlZDUwHhcNMjUwNjI4MTMwMjAzWhcNMjUwNjI5MTMwMjAzWjAzMTEwLwYDVQQD
EyhhOTA0NmIzNWNmNTg5ODBmZmZhZjJhOGU1Mjg0ODU5NDcwODdmZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT3fxrTG/evaWAmGrCnoR/28GbRI
y9otE3hrcR+M8Eupt2srscVpCTYhATfYAAQXhDp7Sc7wO6/NFik3Ug6/l5FLKNfv
SP7/Ax0QWdgF8ddSqBHMzdn16oGCbJoEKwCz+zzq5sKvZ0yEjj+f89AGRTGeKyaw
w5ka020MWX8m9CyKvpYt2hq9GwduTR9ZYwsh6eCWk+z4+n2Vs68RLruTTLeNNfH/
ahl+DqmxE3GrHIZOghpIZhCgFL100xoLEgnT3WJlEhsTtRrfnageje9pHh1Nnw19
wza0vulKpn478LPpBp1nwPY5dxKhYjdi4wWeI3fMENe/G6agBB4O2A7+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkEazXPWJgP/68qjlKEhZRwh/3ZMB8GA1UdIwQY
MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt
NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1
LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYiWIC63
x6h5MjTCLaZMSoFguCgmo9bTLy10eeG9aiyRvCI/aTQ/nmxqwTe5Zj8sq10LsFVF
aNDqQRuEd3sASrPbzNTF75X8KvPd9Fi9SICRNnlxDjfO66lgS3Zm1oPZBYLp+rE3
f832T+PXNwg92Q2DtQljKPeJ9sC2c9sc49fIoBcSV3qqyoSq/5tb/8zjnQRz13de
RWiUrg1Hsyw/yy5EofT6lDHs8/YBQdSGJeYaiPh+diFQhQ/FRD+f8jJkRvbdGdft
lYWQqm6iEliZ2d/nPydzxilU82B41AekwELq25RaTFfS7sG2xxhg49TmHlZMlEg5
TfwvGt4kdIrf5A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:17 2025 by rpki-client