Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: 4YxGjaJmvthoR6uK3XovgPaniAJo4UXgZ0qM9foKm7Y=
Subject key identifier: B3:DD:96:65:E9:28:DE:39:AC:F1:35:53:BB:8C:8E:45:45:C3:C1:9D
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01969F07F485EBFE4DB455C3465935E92DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 05BF
Signing time: Mon 05 May 2025 06:00:20 +0000
Manifest this update: Mon 05 May 2025 06:00:20 +0000
Manifest next update: Tue 06 May 2025 06:00:20 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: aMl7tV3/F7+xmeQZtDul8hZz6WBgruGV1iYkJ3ZlYTo=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:f4:85:eb:fe:4d:b4:55:c3:46:59:35:e9:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: May 5 06:00:20 2025 GMT
Not After : May 6 06:00:20 2025 GMT
Subject: CN=b3dd9665e928de39acf13553bb8c8e4545c3c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:05:2b:2c:5a:91:89:a7:23:1f:37:6a:b1:
fd:30:30:10:09:ec:44:b0:f7:e0:a7:f5:bd:c5:0e:
e7:e8:6b:a5:88:bf:cb:27:b1:47:a0:e2:42:06:73:
34:89:5b:be:b8:0a:80:f3:88:85:18:14:9a:5f:b6:
c1:5e:a7:71:8d:0e:46:36:40:68:bc:45:be:bf:1c:
b4:67:8e:44:2e:17:8a:45:52:55:44:09:8c:82:1b:
d4:a2:69:6c:59:02:af:f1:93:f2:ff:a3:9c:90:02:
01:2c:69:92:3c:07:ab:93:3c:1a:9b:80:c1:69:b0:
57:f9:ec:58:17:cc:c7:59:05:4a:12:f6:10:24:a1:
35:fc:09:a8:22:e4:e9:54:5a:83:4b:33:a2:74:c4:
a0:0c:3a:4a:d3:c2:c2:b7:68:b1:9e:fd:eb:65:03:
1b:ff:25:63:de:94:5f:b2:a9:25:64:00:28:35:77:
fe:1f:bc:87:b9:d3:e1:cb:46:d2:ac:71:53:b2:6b:
17:16:62:ab:bf:2f:8d:ea:89:0c:f6:04:0c:98:e7:
9c:7b:dc:27:1a:bf:c0:e4:da:5d:fc:cf:da:3b:ad:
05:b4:51:65:40:97:bf:a9:6c:7c:55:f9:2d:ee:7d:
4c:a4:4d:16:f3:2b:6a:c0:88:bd:ae:72:77:95:eb:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DD:96:65:E9:28:DE:39:AC:F1:35:53:BB:8C:8E:45:45:C3:C1:9D
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:ec:30:46:c2:cc:85:5b:e6:16:c0:cd:07:cd:09:ff:0a:
05:c7:49:73:62:f1:9d:e6:c5:f4:96:fb:f0:b8:49:ea:bd:57:
1f:5f:e6:65:07:27:6f:45:fa:34:92:f4:ef:d2:84:51:bc:26:
2f:cf:2a:3a:9e:ae:44:95:ba:28:15:15:ab:f1:20:61:f8:12:
d7:02:a8:18:cb:ee:b2:20:3a:c8:ee:07:3e:c8:d4:14:9d:49:
9e:bf:65:b4:0c:06:03:89:0d:4f:8d:e2:ff:71:35:9a:da:d1:
cb:ab:09:4e:c7:9c:73:b0:e0:5b:08:d5:2e:76:70:c3:d2:28:
69:2d:77:47:b6:9a:8d:ef:21:15:15:2e:db:c3:91:7a:e4:4f:
5d:3c:79:1e:a9:f3:af:1e:76:01:33:69:aa:77:66:2a:3e:0c:
27:37:db:d3:b8:66:b4:7a:39:9d:18:a6:4a:f3:06:8d:bc:a8:
fb:4d:1e:38:c5:27:c9:26:02:52:de:d9:e2:19:46:36:9a:4f:
94:0f:3c:68:cc:0d:a3:b4:23:a9:6b:7f:e0:7c:6f:cd:ee:9b:
a4:d0:3c:bf:06:b8:58:05:c9:39:d8:0f:33:6d:1f:09:c6:5f:
3b:5c:cf:d4:a8:4f:1c:f4:82:05:d4:c1:40:2a:a1:86:ff:c2:
2b:0d:a1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafB/SF6/5NtFXDRlk16S3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0
Mzk3NzMwHhcNMjUwNTA1MDYwMDIwWhcNMjUwNTA2MDYwMDIwWjAzMTEwLwYDVQQD
EyhiM2RkOTY2NWU5MjhkZTM5YWNmMTM1NTNiYjhjOGU0NTQ1YzNjMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbEFKyxakYmnIx83arH9MDAQCexE
sPfgp/W9xQ7n6GuliL/LJ7FHoOJCBnM0iVu+uAqA84iFGBSaX7bBXqdxjQ5GNkBo
vEW+vxy0Z45ELheKRVJVRAmMghvUomlsWQKv8ZPy/6OckAIBLGmSPAerkzwam4DB
abBX+exYF8zHWQVKEvYQJKE1/AmoIuTpVFqDSzOidMSgDDpK08LCt2ixnv3rZQMb
/yVj3pRfsqklZAAoNXf+H7yHudPhy0bSrHFTsmsXFmKrvy+N6okM9gQMmOece9wn
Gr/A5Npd/M/aO60FtFFlQJe/qWx8Vfkt7n1MpE0W8ytqwIi9rnJ3les+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPdlmXpKN45rPE1U7uMjkVFw8GdMB8GA1UdIwQY
MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct
OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5
LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyPsMEbC
zIVb5hbAzQfNCf8KBcdJc2LxnebF9Jb78LhJ6r1XH1/mZQcnb0X6NJL079KEUbwm
L88qOp6uRJW6KBUVq/EgYfgS1wKoGMvusiA6yO4HPsjUFJ1Jnr9ltAwGA4kNT43i
/3E1mtrRy6sJTsecc7DgWwjVLnZww9IoaS13R7aaje8hFRUu28OReuRPXTx5Hqnz
rx52ATNpqndmKj4MJzfb07hmtHo5nRimSvMGjbyo+00eOMUnySYCUt7Z4hlGNppP
lA88aMwNo7QjqWt/4Hxvze6bpNA8vwa4WAXJOdgPM20fCcZfO1zP1KhPHPSCBdTB
QCqhhv/CKw2h5w==
-----END CERTIFICATE-----
Generated at Mon May 5 10:50:17 2025 by rpki-client