Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: 7eAbZghneEfCgdlhuXSGT/VA5RxUghimPCyF/eO+lZw=
Subject key identifier: 83:09:18:3C:B6:83:78:D0:F8:C9:7A:C6:AD:2F:98:89:58:8E:67:F6
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0197B6A11B104DF0B4D891636CC3892758C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 0223
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: vQwKYfK6JdohMzTDTJxp6vctEexj7G2VDL7LI11bxuk=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1b:10:4d:f0:b4:d8:91:63:6c:c3:89:27:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=8309183cb68378d0f8c97ac6ad2f9889588e67f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:c6:ff:66:7a:ae:da:7f:dd:18:cf:64:c9:
f6:70:b2:3f:73:52:5f:96:12:07:60:80:0e:68:17:
61:97:ef:88:cd:85:9a:7a:2e:38:b7:4e:b0:6b:47:
c3:05:62:68:6a:dd:d8:e9:a6:a7:c7:33:19:f5:24:
a9:ef:60:f8:85:4d:70:a8:39:a4:3f:fc:9f:67:ef:
5f:db:6a:71:54:f0:df:cc:5d:b6:d6:49:76:ba:d0:
10:15:f9:bf:98:c0:f0:10:4e:2e:b7:ba:14:9c:73:
56:35:ed:c3:47:9e:67:f9:80:60:92:8a:b2:f2:d5:
c2:7a:a5:2d:ec:d7:0a:ae:51:3a:1d:22:4c:1a:71:
21:68:3d:ad:8b:60:fc:b0:17:6d:8e:b6:ee:f1:6d:
a7:9e:6b:13:ac:3e:b1:97:fc:62:db:24:e8:fb:0e:
5b:d2:7a:fb:50:af:c5:34:dc:62:c6:60:7c:20:17:
ff:08:3b:30:9c:a0:fa:f2:3a:39:0f:8b:3a:e3:a4:
dc:37:f1:aa:b6:f2:b1:79:35:81:cc:c0:2a:9f:8c:
b1:52:f3:28:7d:62:1a:73:5e:a2:62:19:48:a9:03:
df:5b:8d:0b:6d:32:c9:fe:96:db:99:c4:1f:12:1e:
87:c6:8e:87:c8:6d:b8:06:c7:d1:78:6d:55:95:60:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:18:3C:B6:83:78:D0:F8:C9:7A:C6:AD:2F:98:89:58:8E:67:F6
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:15:cc:7a:dc:df:65:37:24:46:e3:9a:18:0c:7b:c1:0a:
b6:c0:2f:a1:de:e9:e6:ed:ff:bc:25:28:c8:d1:ce:f3:80:67:
35:f9:1d:cb:65:1b:f5:71:53:3a:05:10:04:b6:9e:4a:da:4d:
21:be:2f:78:10:48:7d:4c:e5:96:65:e5:ed:bd:c0:56:d7:80:
3b:03:47:78:0c:06:a1:04:14:7e:ab:44:34:72:97:16:c6:4f:
6a:ff:c8:ba:1d:b0:69:02:df:38:64:4e:89:9a:d3:dd:dd:04:
14:fe:44:0f:3d:7a:24:21:e8:6a:9f:8a:0f:e8:82:26:d0:8d:
ae:84:65:f3:42:23:e7:c4:51:74:79:27:cd:25:f1:6a:8e:fa:
b3:05:b7:41:7b:7b:e3:21:68:37:73:0d:06:9d:dd:48:da:a7:
85:3c:8e:87:0c:be:0f:99:77:4b:7f:6c:e2:27:3d:bc:f9:36:
80:a6:09:fe:78:46:e8:3f:a4:98:cb:12:4a:aa:fc:ce:48:29:
b9:5e:a8:69:2b:9f:f4:c3:62:51:c1:77:7f:7e:22:b1:e1:1a:
88:2c:a4:d9:59:96:b1:2c:b2:02:0a:aa:0b:f5:74:c5:71:de:
7c:31:5e:30:88:98:fd:b6:6c:2c:25:87:e8:fd:c1:48:af:5f:
79:a1:92:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRsQTfC02JFjbMOJJ1jIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz
OWEzNWUwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
Eyg4MzA5MTgzY2I2ODM3OGQwZjhjOTdhYzZhZDJmOTg4OTU4OGU2N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDzG/2Z6rtp/3RjPZMn2cLI/c1Jf
lhIHYIAOaBdhl++IzYWaei44t06wa0fDBWJoat3Y6aanxzMZ9SSp72D4hU1wqDmk
P/yfZ+9f22pxVPDfzF221kl2utAQFfm/mMDwEE4ut7oUnHNWNe3DR55n+YBgkoqy
8tXCeqUt7NcKrlE6HSJMGnEhaD2ti2D8sBdtjrbu8W2nnmsTrD6xl/xi2yTo+w5b
0nr7UK/FNNxixmB8IBf/CDswnKD68jo5D4s646TcN/GqtvKxeTWBzMAqn4yxUvMo
fWIac16iYhlIqQPfW40LbTLJ/pbbmcQfEh6Hxo6HyG24BsfReG1VlWCmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMJGDy2g3jQ+Ml6xq0vmIlYjmf2MB8GA1UdIwQY
MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt
NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4
LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdIVzHrc
32U3JEbjmhgMe8EKtsAvod7p5u3/vCUoyNHO84BnNfkdy2Ub9XFTOgUQBLaeStpN
Ib4veBBIfUzllmXl7b3AVteAOwNHeAwGoQQUfqtENHKXFsZPav/Iuh2waQLfOGRO
iZrT3d0EFP5EDz16JCHoap+KD+iCJtCNroRl80Ij58RRdHknzSXxao76swW3QXt7
4yFoN3MNBp3dSNqnhTyOhwy+D5l3S39s4ic9vPk2gKYJ/nhG6D+kmMsSSqr8zkgp
uV6oaSuf9MNiUcF3f34iseEaiCyk2VmWsSyyAgqqC/V0xXHefDFeMIiY/bZsLCWH
6P3BSK9feaGStg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:08 2025 by rpki-client