Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: 0kxebNZRbTF0/a1CYfV2P2W7OKrTffQRE0g4EO++iRA=
Subject key identifier: 2E:39:34:C7:AD:2E:42:C5:7F:DB:4C:76:30:DC:C2:93:A9:31:CF:00
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 0197B6A0CE356A7472085003F6A03051F6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0DD5
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: jtciEMxEiaZZ4FMtAmdgau5i2uErEkcAEYwVffizEdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ce:35:6a:74:72:08:50:03:f6:a0:30:51:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=2e3934c7ad2e42c57fdb4c7630dcc293a931cf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:15:3d:2c:d8:a7:35:02:b8:33:99:ca:1b:
1f:d7:c7:2e:97:d8:e4:f4:a8:3c:64:84:f8:75:f9:
6e:79:6d:5e:61:3f:c8:a7:fc:95:6c:b8:9a:95:50:
83:2a:45:c4:54:a4:8a:71:e1:4b:32:a3:a2:ab:13:
70:fb:a7:24:9d:a6:d0:fe:39:71:fd:56:fc:fc:5a:
d1:3f:1c:1d:c0:b4:51:c4:7c:d3:a1:16:ea:d3:e9:
44:68:c2:69:14:c1:d9:76:f1:12:89:ab:04:29:7b:
ad:5d:d8:8f:21:99:d5:dc:8c:9e:25:03:3e:d5:12:
b6:6c:d9:43:f5:10:43:2b:e6:13:71:45:67:cd:0b:
39:9b:f3:4a:92:29:20:a5:cb:67:6c:e7:2b:3b:cd:
a5:52:8c:9b:ba:18:7a:18:03:c7:08:5a:09:29:7d:
b9:fb:10:f4:b6:c7:54:58:84:a7:20:67:62:a8:b7:
1a:f2:9d:8a:03:ca:c3:cd:be:6d:ad:67:1b:84:d8:
91:06:c4:9b:ed:25:59:9e:4c:2f:8a:24:6a:6b:a2:
5d:54:77:be:00:21:12:8d:bf:2e:aa:86:af:f2:de:
87:6f:00:96:2f:0e:ed:a1:3e:a6:72:59:9a:e1:27:
a9:9f:69:bc:f5:a8:65:fd:7e:3b:b9:83:e1:e7:bc:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:34:C7:AD:2E:42:C5:7F:DB:4C:76:30:DC:C2:93:A9:31:CF:00
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:23:ec:0d:c8:c4:6c:e0:1a:1d:bc:32:8b:e6:44:a6:a0:
de:55:57:cc:5f:58:b5:e1:78:40:a4:30:8f:80:64:52:2f:f4:
67:39:56:5d:dd:09:9d:dd:68:86:2b:e2:60:d8:27:67:13:f3:
1f:13:62:9c:a2:c7:aa:0b:00:6d:74:7e:12:d8:72:38:52:75:
c9:27:bd:fd:33:09:eb:63:b0:12:c7:cb:a6:a8:22:0f:30:8f:
dd:3f:8b:60:17:6b:5c:71:74:62:b7:98:88:8a:11:99:f7:7c:
73:f7:b2:11:36:e6:65:66:e6:03:6e:68:6c:5d:8b:92:3c:c1:
15:33:85:a8:25:86:e9:d9:21:c0:ab:e9:fc:3f:d6:fc:bb:56:
6c:53:7c:0e:7b:98:bd:2a:84:be:3f:28:2c:77:6f:e2:c1:95:
ff:ea:6e:0b:1b:d3:d0:a9:c0:44:87:7b:51:ef:43:78:40:b2:
b1:f9:5c:73:56:df:47:b3:be:f3:bc:eb:4c:ed:80:33:01:5f:
4d:ee:d1:83:a2:98:ea:fe:49:e0:ac:76:a2:19:0f:ee:c6:a9:
4e:77:d2:dc:d4:9c:64:ac:e0:f0:e0:95:60:df:9a:4a:ff:b4:
6a:89:82:1f:dc:69:91:28:bb:a1:0b:42:9d:d8:8c:07:33:51:
d2:8a:19:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oM41anRyCFAD9qAwUfalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzE4YjVhZDNhMjVmMTE4YTgzYmIyZmZiYmU3OTVkNjY0
MzY2M2MwHhcNMjUwNjI4MTMwMTIxWhcNMjUwNjI5MTMwMTIxWjAzMTEwLwYDVQQD
EygyZTM5MzRjN2FkMmU0MmM1N2ZkYjRjNzYzMGRjYzI5M2E5MzFjZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns0VPSzYpzUCuDOZyhsf18cul9jk
9Kg8ZIT4dflueW1eYT/Ip/yVbLialVCDKkXEVKSKceFLMqOiqxNw+6cknabQ/jlx
/Vb8/FrRPxwdwLRRxHzToRbq0+lEaMJpFMHZdvESiasEKXutXdiPIZnV3IyeJQM+
1RK2bNlD9RBDK+YTcUVnzQs5m/NKkikgpctnbOcrO82lUoybuhh6GAPHCFoJKX25
+xD0tsdUWISnIGdiqLca8p2KA8rDzb5trWcbhNiRBsSb7SVZnkwviiRqa6JdVHe+
ACESjb8uqoav8t6HbwCWLw7toT6mclma4Sepn2m89ahl/X47uYPh57zQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC45NMetLkLFf9tMdjDcwpOpMc8AMB8GA1UdIwQY
MBaAFNjBi1rTol8RioO7L/u+eV1mQ2Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYt
ZDg3ZmI3NjdkOGJkLzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYtZDg3ZmI3NjdkOGJk
LzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjkj7A3I
xGzgGh28MovmRKag3lVXzF9YteF4QKQwj4BkUi/0ZzlWXd0Jnd1ohiviYNgnZxPz
HxNinKLHqgsAbXR+EthyOFJ1ySe9/TMJ62OwEsfLpqgiDzCP3T+LYBdrXHF0YreY
iIoRmfd8c/eyETbmZWbmA25obF2LkjzBFTOFqCWG6dkhwKvp/D/W/LtWbFN8DnuY
vSqEvj8oLHdv4sGV/+puCxvT0KnARId7Ue9DeECysflcc1bfR7O+87zrTO2AMwFf
Te7Rg6KY6v5J4Kx2ohkP7sapTnfS3NScZKzg8OCVYN+aSv+0aomCH9xpkSi7oQtC
ndiMBzNR0ooZrA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:44 2025 by rpki-client