Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: E6oYyN1OzBdRpXZ6/N+gV1bWACAmmf6bnWwJTGoq3bo=
Subject key identifier: 35:ED:02:99:7E:F5:F7:9E:01:97:24:D5:75:DD:D0:C1:E8:6B:7B:A6
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 0197B6A08CCE5715950BFBA1599CAE8D8DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 121C
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: oFc4blhESS+ZqZM63CbaKmW04zBQxnprRiPbWfzVZQY=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8c:ce:57:15:95:0b:fb:a1:59:9c:ae:8d:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=35ed02997ef5f79e019724d575ddd0c1e86b7ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:a9:14:c1:5f:06:10:da:8e:01:e1:8c:11:
e7:f0:e3:5c:a8:f8:0e:97:47:13:67:21:8f:d9:04:
0d:3e:0c:d3:0b:6e:b6:74:5d:8f:54:cd:b3:ae:36:
86:95:b4:a2:24:41:6e:f1:7c:39:2f:f1:8c:aa:e0:
2a:d0:10:ad:19:3b:ac:45:3f:08:92:85:85:bf:f8:
bc:d8:34:a6:05:b3:aa:94:c1:d3:93:56:3e:69:4b:
d1:0a:e9:3d:86:4f:0e:60:e3:cc:70:5f:67:d2:41:
53:77:c5:f3:13:dd:ea:a1:57:06:36:86:af:3d:df:
a7:e6:cb:5f:a1:b2:81:37:7a:33:8b:b2:ec:50:93:
e1:76:4d:a9:cf:b4:a9:bf:dc:e0:ad:74:9b:b9:77:
85:f9:13:c5:3a:e3:b3:d6:ea:34:0c:0d:14:d7:1a:
fc:30:ef:74:d1:54:8d:2a:3f:d1:0f:00:c4:dc:71:
dc:b8:64:1b:05:5f:b1:3b:f0:7a:7b:7c:7e:b9:23:
f3:9f:16:b9:49:4b:4f:14:3b:bc:3f:c4:41:58:07:
68:4e:54:d1:7c:31:2e:08:a0:68:50:46:80:88:8c:
30:98:33:4d:79:63:9a:d8:30:b3:9b:0b:9b:67:a4:
3a:be:66:33:f8:84:6c:d8:3f:1a:4e:dc:ff:c0:d6:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:02:99:7E:F5:F7:9E:01:97:24:D5:75:DD:D0:C1:E8:6B:7B:A6
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d1:02:6b:0a:d2:52:6b:bf:a8:6d:79:9c:af:0b:d7:9b:d3:
9e:34:f7:47:dd:5e:b3:26:e4:66:f1:0a:87:1b:6d:11:df:dd:
e0:ad:3b:2b:0c:c1:e9:eb:b2:19:aa:81:83:af:e1:55:70:8a:
32:ef:ba:3d:66:0c:73:db:bf:cb:ad:28:94:ba:73:2f:be:77:
94:7a:c2:79:c3:58:56:19:9c:23:b6:41:c9:f1:06:55:79:a0:
29:fe:b8:70:ab:47:c8:66:2b:df:22:69:a1:81:e3:57:8a:16:
55:05:90:27:65:af:6d:68:58:41:40:2d:e4:24:97:b9:45:ad:
61:07:02:ed:ce:ef:fd:59:31:c3:1a:da:d2:56:46:7e:a3:ec:
23:b6:fc:50:4f:92:58:5c:be:7e:05:1e:e1:cc:5b:f3:4c:0b:
96:32:31:fd:be:ef:9a:7c:4f:d6:52:59:f7:fb:95:86:58:02:
f8:2e:b0:98:bb:56:6f:f2:c1:b8:06:5a:4f:5b:c1:8e:ff:a5:
7f:b2:e8:91:ba:52:18:b3:32:f5:2a:3f:1c:fe:92:d9:d5:c5:
9c:a1:90:a4:6e:44:13:aa:40:c9:07:ed:11:49:c5:d0:35:90:
a5:27:7e:40:22:4c:66:43:70:b6:ce:9d:77:52:c9:e4:e1:f9:
25:46:ef:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIzOVxWVC/uhWZyujY3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZGRkMWI2MzZmZTNkZjFkZjNkODExZjY0NDU4MzMxMmE2
NTEzMzcwHhcNMjUwNjI4MTMwMTA0WhcNMjUwNjI5MTMwMTA0WjAzMTEwLwYDVQQD
EygzNWVkMDI5OTdlZjVmNzllMDE5NzI0ZDU3NWRkZDBjMWU4NmI3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP6pFMFfBhDajgHhjBHn8ONcqPgO
l0cTZyGP2QQNPgzTC262dF2PVM2zrjaGlbSiJEFu8Xw5L/GMquAq0BCtGTusRT8I
koWFv/i82DSmBbOqlMHTk1Y+aUvRCuk9hk8OYOPMcF9n0kFTd8XzE93qoVcGNoav
Pd+n5stfobKBN3ozi7LsUJPhdk2pz7Spv9zgrXSbuXeF+RPFOuOz1uo0DA0U1xr8
MO900VSNKj/RDwDE3HHcuGQbBV+xO/B6e3x+uSPznxa5SUtPFDu8P8RBWAdoTlTR
fDEuCKBoUEaAiIwwmDNNeWOa2DCzmwubZ6Q6vmYz+IRs2D8aTtz/wNZdaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXtApl+9feeAZck1XXd0MHoa3umMB8GA1UdIwQY
MBaAFNrd0bY2/j3x3z2BH2RFgzEqZRM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUt
NjMyY2U2N2MwODVhLzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUtNjMyY2U2N2MwODVh
LzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatECawrS
Umu/qG15nK8L15vTnjT3R91esybkZvEKhxttEd/d4K07KwzB6euyGaqBg6/hVXCK
Mu+6PWYMc9u/y60olLpzL753lHrCecNYVhmcI7ZByfEGVXmgKf64cKtHyGYr3yJp
oYHjV4oWVQWQJ2WvbWhYQUAt5CSXuUWtYQcC7c7v/Vkxwxra0lZGfqPsI7b8UE+S
WFy+fgUe4cxb80wLljIx/b7vmnxP1lJZ9/uVhlgC+C6wmLtWb/LBuAZaT1vBjv+l
f7LokbpSGLMy9So/HP6S2dXFnKGQpG5EE6pAyQftEUnF0DWQpSd+QCJMZkNwts6d
d1LJ5OH5JUbvtA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:37 2025 by rpki-client