Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: gcr++929thWAWfz1Z9mUxttjYhoAEp7eGl017A/du88=
Subject key identifier: F2:59:BF:5F:2A:E3:36:00:AE:2B:7E:E8:47:59:32:2F:A8:A7:4D:62
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 0197B70F42002A460B57E8E6B70BDC9DA58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: TaBuK6ywjvoC6L3jSxsB/atq0UId8AR4VxazyDv+1KM=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:42:00:2a:46:0b:57:e8:e6:b7:0b:dc:9d:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=f259bf5f2ae33600ae2b7ee84759322fa8a74d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:be:f5:f6:6a:46:01:ed:9b:c5:b1:3a:2d:
60:5b:f7:bf:04:a5:21:06:24:79:85:e5:9b:8e:0c:
7f:60:09:82:d6:ef:0b:ed:de:bc:2f:48:75:30:03:
e7:5e:f6:c1:bf:63:0d:64:e6:66:90:1b:7b:e9:f7:
4b:59:3a:72:e4:f6:77:56:70:ae:0c:1d:b2:96:6d:
7e:ae:bf:c1:27:f5:cd:86:08:08:98:3a:3d:a2:74:
0d:b2:44:4a:1a:41:3f:09:7c:03:b1:0d:82:3e:8d:
ce:1b:db:ba:d6:9a:54:f0:83:e0:06:d4:17:b4:32:
37:eb:c6:f8:c8:10:60:c3:02:f5:f5:80:1c:b3:24:
87:7b:8c:21:a5:0f:f6:b2:8a:f9:c5:07:a4:eb:89:
0f:0a:02:f8:cd:5a:8c:81:6a:14:e2:13:df:33:7f:
0a:96:d9:29:ad:90:05:24:bc:19:c0:f6:b4:ad:15:
b7:6b:f2:1e:0d:bb:4f:86:2c:b1:7e:93:e1:ec:97:
8a:99:a2:0d:b5:be:55:13:4b:70:49:3c:20:b4:84:
a2:20:b9:26:c9:85:29:2a:d7:eb:7e:c5:80:dc:93:
28:38:2f:f2:62:74:1f:e2:70:e1:e7:f8:83:6f:e8:
4f:4a:22:15:c1:58:16:00:ee:ae:25:b8:20:3c:e1:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:BF:5F:2A:E3:36:00:AE:2B:7E:E8:47:59:32:2F:A8:A7:4D:62
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d0:38:d3:0d:77:40:3c:e7:cd:89:02:e3:4d:49:50:80:a4:
54:32:04:e0:56:42:16:0a:08:2a:eb:25:f8:d6:3b:77:83:04:
b9:10:ec:8d:2f:32:c8:5b:b4:60:84:75:61:2f:8a:db:37:b6:
0a:1f:ec:a7:ea:35:60:7a:67:01:f2:e1:a9:fa:af:4c:c7:72:
eb:72:68:57:cb:70:0b:81:85:60:a7:8b:0f:37:e5:4a:41:3d:
5c:91:71:c9:25:a1:bf:30:16:33:05:fb:bc:4e:21:1a:a1:2a:
6d:0b:01:56:27:6a:9f:59:01:3d:ec:99:b5:9c:18:f5:95:b2:
83:85:2e:15:7c:c3:19:3b:89:65:cc:cc:22:0e:2d:3d:45:ac:
f0:b7:93:2c:c7:dc:9c:8c:6c:5c:97:92:b1:2f:7e:16:2c:78:
14:dc:40:29:ed:97:c5:22:88:33:6f:7d:52:da:43:ff:28:04:
f0:f3:b1:e6:9d:7a:3c:7a:f0:cf:9c:20:7f:69:aa:7c:ac:c8:
bb:14:dc:50:e7:a0:fc:69:d8:c0:fc:b9:11:5d:7e:5a:b4:bd:
d3:af:a3:33:f0:d9:21:2c:16:5a:6d:cb:07:78:6d:f2:a0:7f:
e0:46:ba:f6:22:cb:81:f7:aa:23:11:f0:63:b8:f1:55:a2:8d:
c1:f8:fe:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0IAKkYLV+jmtwvcnaWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
EyhmMjU5YmY1ZjJhZTMzNjAwYWUyYjdlZTg0NzU5MzIyZmE4YTc0ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp++9fZqRgHtm8WxOi1gW/e/BKUh
BiR5heWbjgx/YAmC1u8L7d68L0h1MAPnXvbBv2MNZOZmkBt76fdLWTpy5PZ3VnCu
DB2ylm1+rr/BJ/XNhggImDo9onQNskRKGkE/CXwDsQ2CPo3OG9u61ppU8IPgBtQX
tDI368b4yBBgwwL19YAcsySHe4whpQ/2sor5xQek64kPCgL4zVqMgWoU4hPfM38K
ltkprZAFJLwZwPa0rRW3a/IeDbtPhiyxfpPh7JeKmaINtb5VE0twSTwgtISiILkm
yYUpKtfrfsWA3JMoOC/yYnQf4nDh5/iDb+hPSiIVwVgWAO6uJbggPOGp+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJZv18q4zYArit+6EdZMi+op01iMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdA40w13
QDznzYkC401JUICkVDIE4FZCFgoIKusl+NY7d4MEuRDsjS8yyFu0YIR1YS+K2ze2
Ch/sp+o1YHpnAfLhqfqvTMdy63JoV8twC4GFYKeLDzflSkE9XJFxySWhvzAWMwX7
vE4hGqEqbQsBVidqn1kBPeyZtZwY9ZWyg4UuFXzDGTuJZczMIg4tPUWs8LeTLMfc
nIxsXJeSsS9+Fix4FNxAKe2XxSKIM299UtpD/ygE8POx5p16PHrwz5wgf2mqfKzI
uxTcUOeg/GnYwPy5EV1+WrS906+jM/DZISwWWm3LB3ht8qB/4Ea69iLLgfeqIxHw
Y7jxVaKNwfj+VA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:14 2025 by rpki-client