Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: PKRdUJYnCqSGWOin3t3zMujNlGql3DNv6ti3MjfrPCE=
Subject key identifier: BF:85:0B:98:82:01:7F:A8:F4:21:CC:1F:A8:C3:A0:10:09:5D:D1:D9
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0197B88FBC5FFCE1F3B0C32721B86D384C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 0370
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: lyDVbwFskxigT4DILGL9dgT8owhygLfZdLtDOQfSl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:bc:5f:fc:e1:f3:b0:c3:27:21:b8:6d:38:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=bf850b9882017fa8f421cc1fa8c3a010095dd1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e4:b3:d3:e9:2a:d3:01:0e:cc:69:51:2f:65:
dc:b9:d4:01:c5:83:dd:33:9a:16:29:e9:3a:b7:80:
b9:9f:5d:0b:46:f2:d3:f5:cd:d3:8c:22:0a:d9:89:
2e:7e:8f:6e:ae:4d:f4:9e:3a:6e:dc:84:a3:35:46:
e1:15:0c:44:cd:44:2b:fd:c9:33:a3:3a:c0:33:2b:
43:30:99:24:ba:2d:08:c7:6a:9d:aa:b6:a5:48:8c:
e5:d3:cf:b1:92:5d:5e:f8:82:e4:50:60:ed:6a:9f:
14:d9:19:dc:1b:1c:0b:5a:ae:ad:ab:a9:9b:04:b5:
37:a0:e6:a0:43:c8:39:4a:a8:dd:5a:63:8a:83:b0:
ec:43:28:b9:07:90:c0:79:03:e1:db:c7:0e:be:79:
98:0e:7d:a6:e1:a9:d8:05:da:c3:a3:06:a7:a3:3d:
b0:9a:f2:a4:ee:56:8c:1f:30:48:6b:fa:e6:8c:be:
e5:bf:62:9f:e8:65:1d:d1:b0:0a:b2:d9:07:f1:75:
b3:60:3c:b6:2e:bf:c8:5e:46:a1:a7:d4:cf:e6:cf:
e8:3b:96:09:09:ae:1e:2a:6e:ca:5e:aa:1c:85:38:
05:d9:36:76:c1:62:5e:ca:22:03:e9:dc:34:28:0d:
39:f5:6f:64:83:7b:ef:0d:73:92:65:2f:6f:71:4c:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:0B:98:82:01:7F:A8:F4:21:CC:1F:A8:C3:A0:10:09:5D:D1:D9
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:d9:c2:20:cc:b5:61:56:b1:26:db:52:04:96:86:17:5e:
dd:98:7f:ac:5a:0f:bc:d8:c5:84:d3:fc:7b:9e:c5:4c:6c:64:
65:8e:04:1c:2b:92:c9:26:6d:2a:57:75:61:fa:76:54:f3:2e:
98:fa:88:6b:e4:6a:8d:f7:7d:72:93:61:81:03:ae:27:ff:a2:
76:d7:0d:09:02:b1:0b:a9:89:ec:26:e3:86:db:b9:61:b4:82:
d2:1a:e2:87:9b:4a:62:48:9a:d0:f8:75:2b:8d:36:0b:4a:21:
e6:de:56:e5:0f:2f:c8:3d:d9:40:52:a7:15:23:b5:26:4e:30:
fe:9e:3c:0c:27:6e:cf:a0:75:12:3d:ea:ed:d9:03:77:ce:3f:
36:3f:5c:28:82:9d:a5:56:6e:db:c4:75:f8:8b:d3:39:0c:60:
60:97:4e:86:85:6b:e1:8f:9d:4f:50:4b:32:83:1e:5b:6b:81:
58:47:81:9a:2a:71:b6:36:df:b4:64:7f:03:b3:60:da:d7:4a:
41:91:ee:1a:7d:b8:27:e9:e2:f5:c4:1a:42:fc:ba:aa:10:b5:
52:5b:b1:82:9e:08:24:ed:37:d2:6e:ba:55:f3:c8:6a:1d:cd:
5b:4f:4c:5a:02:f0:70:30:e0:88:c8:41:60:80:45:dc:ef:fc:
a0:1e:bc:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j7xf/OHzsMMnIbhtOExYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzI1YzNhOWM1Y2Q4NjY2Zjg2YjA3YTgwOGYxMzJlMDkx
MTE5OWUwHhcNMjUwNjI4MjIwMTU2WhcNMjUwNjI5MjIwMTU2WjAzMTEwLwYDVQQD
EyhiZjg1MGI5ODgyMDE3ZmE4ZjQyMWNjMWZhOGMzYTAxMDA5NWRkMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OSz0+kq0wEOzGlRL2XcudQBxYPd
M5oWKek6t4C5n10LRvLT9c3TjCIK2Ykufo9urk30njpu3ISjNUbhFQxEzUQr/ckz
ozrAMytDMJkkui0Ix2qdqralSIzl08+xkl1e+ILkUGDtap8U2RncGxwLWq6tq6mb
BLU3oOagQ8g5SqjdWmOKg7DsQyi5B5DAeQPh28cOvnmYDn2m4anYBdrDowanoz2w
mvKk7laMHzBIa/rmjL7lv2Kf6GUd0bAKstkH8XWzYDy2Lr/IXkahp9TP5s/oO5YJ
Ca4eKm7KXqochTgF2TZ2wWJeyiID6dw0KA059W9kg3vvDXOSZS9vcUxScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+FC5iCAX+o9CHMH6jDoBAJXdHZMB8GA1UdIwQY
MBaAFNpyXDqcXNhmb4aweoCPEy4JERmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUt
M2ZkMTgwMzQxY2JiLzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUtM2ZkMTgwMzQxY2Ji
LzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOzZwiDM
tWFWsSbbUgSWhhde3Zh/rFoPvNjFhNP8e57FTGxkZY4EHCuSySZtKld1Yfp2VPMu
mPqIa+Rqjfd9cpNhgQOuJ/+idtcNCQKxC6mJ7Cbjhtu5YbSC0hrih5tKYkia0Ph1
K402C0oh5t5W5Q8vyD3ZQFKnFSO1Jk4w/p48DCduz6B1Ej3q7dkDd84/Nj9cKIKd
pVZu28R1+IvTOQxgYJdOhoVr4Y+dT1BLMoMeW2uBWEeBmipxtjbftGR/A7Ng2tdK
QZHuGn24J+ni9cQaQvy6qhC1Uluxgp4IJO030m66VfPIah3NW09MWgLwcDDgiMhB
YIBF3O/8oB68JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:56 2025 by rpki-client