Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: EJEMb10bsOf/JuSBsOKIzkKvEnARPONIl4puzHxpy7U=
Subject key identifier: B7:2D:BC:65:EC:EA:2B:A1:35:96:A2:D9:EE:C1:77:DC:51:62:7E:0B
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0197B6D79822608220623D3B4788474B6EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0B8E
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: OYNmCkUmNxaQZlV0/luc6QTKMEjNXHv7XbgJLZfpxzE=)
2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=)
3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:22:60:82:20:62:3d:3b:47:88:47:4b:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=b72dbc65ecea2ba13596a2d9eec177dc51627e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:99:f7:97:ca:8f:b3:eb:2f:3b:08:de:e5:
d6:06:00:83:86:65:17:14:c5:fb:73:37:99:8e:45:
1c:b0:7c:8d:3c:15:b5:d8:04:4b:ef:f2:27:2c:dc:
e5:67:da:4c:f5:af:ea:86:f5:9f:70:b8:6b:c0:ab:
65:7a:75:1f:d7:cd:bd:82:03:5a:dd:3c:e4:f3:f3:
c5:a7:0e:71:c8:8a:b6:0b:55:d6:b3:01:d3:d1:99:
ce:b3:91:b9:e6:9f:47:4a:a3:9c:d6:08:df:a1:41:
40:77:38:11:28:72:27:9e:c5:e8:5b:05:6e:fd:86:
87:b7:ea:68:47:50:a5:20:ac:44:3a:ab:1a:87:a6:
e8:f6:5a:18:66:8b:cb:4b:80:b9:b3:7e:f4:7c:35:
51:29:00:19:0d:48:5d:8b:05:ad:72:27:b4:24:cc:
58:ba:be:af:22:1c:dd:84:50:11:97:02:18:b6:e4:
98:22:0e:23:b9:54:46:76:4d:74:d7:66:76:93:c7:
12:70:5c:82:2f:12:50:f6:5a:06:90:40:61:65:52:
1b:32:f8:ab:b1:9c:26:e7:95:3d:ce:e7:5f:3f:f3:
71:bd:b0:bb:ba:c4:04:b7:38:c6:71:c5:32:d1:42:
06:ae:31:ea:67:22:ae:fe:1d:9f:bc:00:b2:f4:87:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:BC:65:EC:EA:2B:A1:35:96:A2:D9:EE:C1:77:DC:51:62:7E:0B
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:cd:cc:87:63:a4:cc:39:72:a4:e7:1d:df:14:13:97:88:
84:c1:cd:b0:6b:d3:25:85:cf:6f:aa:0f:f8:39:f0:23:b8:c9:
d4:09:7b:8d:57:51:ce:24:84:a2:7b:d2:04:5c:ab:80:42:49:
1e:34:e5:48:06:ce:42:38:2d:8e:75:46:e3:48:26:c6:6c:75:
94:5e:cb:3a:1f:37:17:21:ee:e4:a8:2d:49:72:6d:8c:aa:38:
e3:a3:b1:cc:4e:ff:6a:36:79:d9:d8:28:79:c9:43:19:84:bf:
f1:fc:74:7d:95:1d:fe:8e:ac:ac:41:c4:6f:56:97:c5:21:7b:
27:1d:b5:85:e9:a9:96:28:39:1a:55:98:e8:3e:93:b6:a3:72:
b9:ec:47:e8:82:44:0e:e1:e1:9f:d4:10:99:34:91:d4:f5:65:
0e:00:10:67:9b:88:be:68:60:62:b8:ac:f1:ed:e1:6d:35:78:
eb:54:11:72:7a:7d:4f:90:1c:64:15:78:cf:9e:01:b0:1a:fe:
13:a0:55:43:24:be:88:01:85:d4:d5:77:3d:bb:bf:bb:6c:54:
42:ab:56:36:59:ea:e5:1f:03:ea:da:05:a4:a8:02:82:ea:a0:
5a:86:88:7a:65:9c:70:59:20:9b:93:3d:f2:f8:f1:d1:c8:e5:
23:29:e9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe215giYIIgYj07R4hHS26yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz
YmUyNjcwHhcNMjUwNjI4MTQwMTExWhcNMjUwNjI5MTQwMTExWjAzMTEwLwYDVQQD
EyhiNzJkYmM2NWVjZWEyYmExMzU5NmEyZDllZWMxNzdkYzUxNjI3ZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ6Z95fKj7PrLzsI3uXWBgCDhmUX
FMX7czeZjkUcsHyNPBW12ARL7/InLNzlZ9pM9a/qhvWfcLhrwKtlenUf1829ggNa
3Tzk8/PFpw5xyIq2C1XWswHT0ZnOs5G55p9HSqOc1gjfoUFAdzgRKHInnsXoWwVu
/YaHt+poR1ClIKxEOqsah6bo9loYZovLS4C5s370fDVRKQAZDUhdiwWtcie0JMxY
ur6vIhzdhFARlwIYtuSYIg4juVRGdk1012Z2k8cScFyCLxJQ9loGkEBhZVIbMvir
sZwm55U9zudfP/NxvbC7usQEtzjGccUy0UIGrjHqZyKu/h2fvACy9Ie75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLctvGXs6iuhNZai2e7Bd9xRYn4LMB8GA1UdIwQY
MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDXNzIdj
pMw5cqTnHd8UE5eIhMHNsGvTJYXPb6oP+DnwI7jJ1Al7jVdRziSEonvSBFyrgEJJ
HjTlSAbOQjgtjnVG40gmxmx1lF7LOh83FyHu5KgtSXJtjKo446OxzE7/ajZ52dgo
eclDGYS/8fx0fZUd/o6srEHEb1aXxSF7Jx21hemplig5GlWY6D6TtqNyuexH6IJE
DuHhn9QQmTSR1PVlDgAQZ5uIvmhgYris8e3hbTV461QRcnp9T5AcZBV4z54BsBr+
E6BVQyS+iAGF1NV3Pbu/u2xUQqtWNlnq5R8D6toFpKgCguqgWoaIemWccFkgm5M9
8vjx0cjlIynp5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:53 2025 by rpki-client