Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: nELHJq9Md/QNDrTVB59EVC77Iif7w0x1URGMBwl7IK0=
Subject key identifier: 16:F7:79:DE:0F:48:A1:5B:27:A3:C9:E4:6F:A6:94:73:55:B7:A0:18
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 0197B74527C219B02498CE605AB828A05438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1091
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: A+IcJZO7fy1pXG2p6YO7kskhHF0VQeEKdUIODU0gBmo=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:27:c2:19:b0:24:98:ce:60:5a:b8:28:a0:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=16f779de0f48a15b27a3c9e46fa6947355b7a018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:23:d4:71:55:e4:94:a7:2f:14:c2:7e:75:
a7:ef:49:34:a2:38:68:31:91:8f:00:0f:a9:70:ad:
5e:82:97:b8:f9:36:8e:db:fb:b5:9a:5c:6f:6e:71:
e0:60:c9:af:e3:f6:b0:f8:d1:b0:49:dc:e2:ed:b4:
ce:e9:ba:9c:d7:d5:3e:83:47:5e:87:68:a0:0e:48:
30:5e:8d:6a:4a:b4:26:e8:2b:58:ef:0e:56:b5:4e:
8e:0d:ab:83:af:3e:f7:d1:de:60:9a:e1:d5:9d:db:
c3:41:2f:c2:69:c3:6d:3a:5b:62:2d:b9:9d:11:28:
af:54:8e:db:2f:a2:fc:c2:77:9c:1b:90:03:fc:fc:
85:be:66:8f:5b:a4:0f:fd:36:c9:6e:71:77:a1:f1:
fd:ec:e6:05:9b:3d:18:9c:8a:d2:41:8d:bb:31:dc:
db:7a:0f:b6:07:48:9e:d8:1b:28:0d:15:70:17:1f:
66:97:f4:39:8a:ac:a7:e4:53:91:0d:07:a4:a5:a0:
2b:8b:70:f3:86:3b:11:f2:a0:f5:b9:2d:71:3b:c0:
9e:79:d0:0d:9c:09:18:6d:d1:e1:cf:bf:0d:47:ca:
59:77:ad:df:55:68:d6:56:e7:0f:92:54:0e:ab:9f:
1c:51:d2:b6:91:91:c7:81:0a:e6:36:63:19:7b:66:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:79:DE:0F:48:A1:5B:27:A3:C9:E4:6F:A6:94:73:55:B7:A0:18
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:05:42:00:f8:0d:dc:7f:0a:cc:3a:8e:5f:02:2a:a0:7f:c1:
3a:23:bf:06:db:bf:ed:01:66:66:e5:b8:54:76:52:c2:27:9d:
e3:e8:22:99:35:e6:47:d1:69:93:f4:8f:e8:58:7e:5b:e1:ac:
c7:3d:6d:3e:e0:93:9c:e8:f8:07:9f:f3:91:12:f0:6b:bf:77:
f7:75:24:df:70:9b:f3:4c:73:f8:e5:63:af:47:14:af:37:3b:
d5:ee:53:86:10:6a:fd:1d:c7:bc:19:be:41:54:cb:46:e4:af:
82:ff:f9:26:44:0b:96:a6:0f:b8:27:41:9b:e5:04:22:8e:81:
a5:ca:0c:15:2b:9d:e0:c2:54:b1:33:1b:70:83:18:3f:24:b7:
dc:96:f9:ed:7f:bf:d0:78:fa:36:88:a7:18:0b:37:d3:3e:40:
8c:45:2e:66:c6:aa:45:2a:bb:1d:2a:16:58:bb:52:41:a0:48:
01:6d:2c:d7:7f:fe:9f:5c:00:69:22:59:a0:81:bf:bf:7b:fe:
28:86:90:9b:24:65:50:6d:bc:b7:52:46:a8:ec:84:88:9a:b0:
c1:3f:62:0d:0d:a5:45:07:ab:1e:38:e2:01:26:42:3d:53:0a:
2f:8d:2e:19:48:21:cd:b9:87:7e:59:a4:fc:26:a2:66:67:29:
66:8f:48:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSfCGbAkmM5gWrgooFQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
EygxNmY3NzlkZTBmNDhhMTViMjdhM2M5ZTQ2ZmE2OTQ3MzU1YjdhMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplAj1HFV5JSnLxTCfnWn70k0ojho
MZGPAA+pcK1egpe4+TaO2/u1mlxvbnHgYMmv4/aw+NGwSdzi7bTO6bqc19U+g0de
h2igDkgwXo1qSrQm6CtY7w5WtU6ODauDrz730d5gmuHVndvDQS/CacNtOltiLbmd
ESivVI7bL6L8wnecG5AD/PyFvmaPW6QP/TbJbnF3ofH97OYFmz0YnIrSQY27Mdzb
eg+2B0ie2BsoDRVwFx9ml/Q5iqyn5FORDQekpaAri3DzhjsR8qD1uS1xO8CeedAN
nAkYbdHhz78NR8pZd63fVWjWVucPklQOq58cUdK2kZHHgQrmNmMZe2b6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb3ed4PSKFbJ6PJ5G+mlHNVt6AYMB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQVCAPgN
3H8KzDqOXwIqoH/BOiO/Btu/7QFmZuW4VHZSwied4+gimTXmR9Fpk/SP6Fh+W+Gs
xz1tPuCTnOj4B5/zkRLwa79393Uk33Cb80xz+OVjr0cUrzc71e5ThhBq/R3HvBm+
QVTLRuSvgv/5JkQLlqYPuCdBm+UEIo6BpcoMFSud4MJUsTMbcIMYPyS33Jb57X+/
0Hj6NoinGAs30z5AjEUuZsaqRSq7HSoWWLtSQaBIAW0s13/+n1wAaSJZoIG/v3v+
KIaQmyRlUG28t1JGqOyEiJqwwT9iDQ2lRQerHjjiASZCPVMKL40uGUghzbmHflmk
/CaiZmcpZo9I8g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:13 2025 by rpki-client