Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: s6HpLt6ddmM20/dLnEmS5Dg1Je/yOOWyXuhcPFUjcLM=
Subject key identifier: 9F:7C:42:00:D5:0C:0E:21:29:82:8B:F7:17:95:F8:CD:48:4E:B8:81
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 0197C68186C7D00384319F65721B3FD3D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 154D
Signing time: Tue 01 Jul 2025 15:01:06 +0000
Manifest this update: Tue 01 Jul 2025 15:01:06 +0000
Manifest next update: Wed 02 Jul 2025 15:01:06 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: JM69uzJEBa2dI6EBYcdv6Okw3BTJH8zgIWJEtKhSj3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:86:c7:d0:03:84:31:9f:65:72:1b:3f:d3:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Jul 1 15:01:06 2025 GMT
Not After : Jul 2 15:01:06 2025 GMT
Subject: CN=9f7c4200d50c0e2129828bf71795f8cd484eb881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:ae:96:fb:f9:f3:6a:fb:0f:d5:ff:4d:ee:
c9:ef:ec:bc:7f:1b:d0:16:9e:11:73:c9:03:88:04:
45:78:d0:17:94:28:22:0f:d7:79:dd:36:e0:fd:52:
d6:ed:25:9b:b2:dd:ca:dc:f9:1e:97:b2:eb:75:bb:
58:35:77:be:66:93:81:00:f4:1b:8d:ee:9a:3f:e9:
da:9d:44:64:11:a8:8e:38:c8:68:9e:a5:de:1d:52:
19:31:8f:40:a8:77:da:9e:53:fb:02:b9:cd:74:a1:
ba:18:2a:30:a3:ce:ef:5d:5d:88:33:e7:09:88:e8:
a7:d8:d8:17:11:85:a9:32:02:f0:85:4a:fa:f3:5e:
2e:af:e4:3b:4d:71:f8:b4:3b:6f:0f:29:69:dd:5c:
66:2e:79:6b:83:65:49:7a:20:fa:e7:ec:43:63:1a:
7a:1d:20:3f:05:5a:42:c7:73:d8:f3:c7:1c:8b:c7:
da:63:f3:42:79:51:7f:42:56:bb:02:0e:ad:59:8f:
84:c9:46:2f:23:75:c0:75:f3:d8:f3:f3:74:2a:ff:
7b:36:fd:d7:a4:68:d6:a9:4d:f4:f5:b0:f8:0f:8c:
cd:94:e5:01:36:43:a8:96:79:7c:ff:6b:07:38:f4:
8c:de:55:a6:d8:b8:a5:81:64:cf:8a:7c:c4:e1:bb:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:42:00:D5:0C:0E:21:29:82:8B:F7:17:95:F8:CD:48:4E:B8:81
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:90:aa:07:c9:a3:3b:72:df:91:c5:a4:42:2f:68:04:65:82:
d8:51:18:b0:32:41:7c:d7:3c:59:66:28:58:8f:2d:42:c2:e4:
81:e5:c5:d5:ea:ed:0c:e7:b6:a7:11:e9:5d:b7:55:6b:a1:90:
3d:d3:07:4e:56:26:90:b3:9e:45:eb:b6:d0:96:58:e7:9f:1c:
00:8e:fe:cd:95:e7:75:00:1f:dd:ca:6d:73:0b:14:ac:aa:c2:
0b:b3:ab:d8:c1:bb:2d:3e:83:85:a9:6b:8e:f1:de:b5:93:c7:
76:86:e8:a6:93:20:89:31:2a:68:96:08:7b:85:93:bb:a7:78:
b3:c5:31:a8:80:b2:f3:d7:28:84:a4:c4:ce:62:b4:f7:54:84:
4f:2f:7f:be:0e:09:8d:6a:13:31:ab:f4:bf:73:37:2d:2d:c0:
19:97:4a:ab:e2:4f:c9:a5:ac:23:5a:ac:38:b1:83:3a:e3:84:
db:9f:c4:32:0e:7d:ae:29:a3:54:98:da:2a:a0:b4:8f:ad:86:
19:e1:dc:cf:b7:c8:a8:76:c5:ac:98:55:58:bd:40:f6:90:f1:
2f:ab:c3:73:71:be:97:dc:a9:72:b7:56:26:02:88:b5:38:08:
92:da:17:29:a7:ea:17:b3:41:e1:30:2a:9c:46:d0:d3:7a:f8:
56:fc:a3:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGgYbH0AOEMZ9lchs/09N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQ2ZjQ4NDUzMGU1N2NjNjBlM2E4NjVhNjk1OTQ4NDc2
YzQxM2YwHhcNMjUwNzAxMTUwMTA2WhcNMjUwNzAyMTUwMTA2WjAzMTEwLwYDVQQD
Eyg5ZjdjNDIwMGQ1MGMwZTIxMjk4MjhiZjcxNzk1ZjhjZDQ4NGViODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2ulvv582r7D9X/Te7J7+y8fxvQ
Fp4Rc8kDiARFeNAXlCgiD9d53Tbg/VLW7SWbst3K3Pkel7LrdbtYNXe+ZpOBAPQb
je6aP+nanURkEaiOOMhonqXeHVIZMY9AqHfanlP7ArnNdKG6GCowo87vXV2IM+cJ
iOin2NgXEYWpMgLwhUr6814ur+Q7TXH4tDtvDylp3VxmLnlrg2VJeiD65+xDYxp6
HSA/BVpCx3PY88cci8faY/NCeVF/Qla7Ag6tWY+EyUYvI3XAdfPY8/N0Kv97Nv3X
pGjWqU309bD4D4zNlOUBNkOolnl8/2sHOPSM3lWm2LilgWTPinzE4bt0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ98QgDVDA4hKYKL9xeV+M1ITriBMB8GA1UdIwQY
MBaAFNmtb0hFMOV8xg46hlppWUhHbEE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUt
ZDE4MWQxZjc2MTI4LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUtZDE4MWQxZjc2MTI4
LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZCqB8mj
O3LfkcWkQi9oBGWC2FEYsDJBfNc8WWYoWI8tQsLkgeXF1ertDOe2pxHpXbdVa6GQ
PdMHTlYmkLOeReu20JZY558cAI7+zZXndQAf3cptcwsUrKrCC7Or2MG7LT6Dhalr
jvHetZPHdoboppMgiTEqaJYIe4WTu6d4s8UxqICy89cohKTEzmK091SETy9/vg4J
jWoTMav0v3M3LS3AGZdKq+JPyaWsI1qsOLGDOuOE25/EMg59rimjVJjaKqC0j62G
GeHcz7fIqHbFrJhVWL1A9pDxL6vDc3G+l9ypcrdWJgKItTgIktoXKafqF7NB4TAq
nEbQ03r4VvyjiQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:58:52 2025 by rpki-client