Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: srmi2JvPSg1gKRRyhRKluE562JT/kl6juFREgZArmxc=
Subject key identifier: 9A:16:38:20:91:F8:1C:1F:4D:08:85:7C:11:3F:CC:A5:8F:A2:63:0A
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 0197B6A22BB076D5AE12FFDEBAC8B65703A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0537
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: UNPgiEBVxulzQJpyJdQEQZNgRusa/N/y2SiNbwBWLvM=)
2: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
3: zrWwYbMwUkgEq1zB-74An6Zgrao.roa (hash: 0ne8xPMwtTCJ/HLh2hHlmeoVFe/+GqB9X95WcDSMhFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2b:b0:76:d5:ae:12:ff:de:ba:c8:b6:57:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=9a16382091f81c1f4d08857c113fcca58fa2630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:cc:28:7b:83:58:78:4d:37:b1:e8:03:2c:
59:2d:52:bd:d7:64:3c:51:00:5c:42:9a:e3:06:b7:
43:81:91:a2:57:02:fc:d1:d0:5f:a3:bd:47:c5:b9:
c7:1a:ee:75:78:5e:ff:08:a9:33:b2:0c:bf:a1:81:
55:c5:29:8d:b9:bd:40:11:e5:0a:ca:9c:49:56:cf:
ec:27:a4:b8:0f:58:21:76:08:f9:6c:11:a1:8d:ac:
6c:cc:63:0d:37:1f:1a:77:15:b6:e2:73:0c:db:5c:
f3:2a:88:e1:59:d7:75:e4:40:11:f3:94:04:e5:a9:
48:9e:7b:1d:b1:03:9e:45:2a:47:73:65:a6:02:59:
ee:3d:a9:4f:eb:fe:c0:98:9e:06:73:1a:fe:66:6b:
9c:27:fc:b6:1c:2d:3f:5c:e5:25:6f:71:ee:7c:7b:
8c:44:c1:7e:89:26:e7:dc:d2:5b:52:24:11:6f:53:
7f:08:ff:97:96:65:f8:0f:c5:2a:2a:a4:07:b0:f6:
03:98:17:42:a4:fc:02:6e:e0:da:1c:00:0a:a1:50:
27:9f:3a:d6:c2:52:44:40:ef:53:1c:49:17:2b:5d:
87:69:02:93:af:a5:61:f6:16:32:65:d4:3d:99:0d:
52:0b:7c:dc:38:1a:c9:3a:ed:c6:74:2d:bf:a0:e3:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:38:20:91:F8:1C:1F:4D:08:85:7C:11:3F:CC:A5:8F:A2:63:0A
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:62:f4:48:5d:b9:c2:83:b9:c3:78:52:53:6f:6d:e5:24:
d6:86:36:61:69:0a:f0:42:42:6a:dc:1c:fc:81:17:3a:aa:28:
d7:5b:af:24:1a:dc:ee:94:26:e0:47:65:7a:73:6a:a7:b7:96:
db:fb:64:70:c2:b5:80:25:c9:ed:f2:db:a5:73:7a:73:25:58:
e4:ac:d4:9a:7d:d9:ef:94:48:a6:02:c3:58:72:bc:23:35:a8:
32:dd:09:31:f9:fd:a9:c3:af:95:5e:5f:d4:60:5e:8a:c1:ac:
ce:57:cd:5f:e6:94:c9:00:6a:d6:73:55:da:d6:6a:93:99:9d:
3f:02:c5:30:24:85:45:e1:dc:e3:a9:91:5d:05:69:76:e7:cd:
10:f7:87:91:5a:c9:82:7e:e4:d1:9b:51:0f:69:1d:ac:ea:d7:
c8:0f:e6:46:93:bc:1a:ad:b9:eb:db:5a:8e:1c:dd:f7:21:36:
48:62:7c:4d:2f:18:71:e5:b7:7b:d3:b7:16:3e:bf:83:d8:bf:
06:c2:dd:ca:a1:75:09:50:38:c4:2e:de:c5:b7:17:a7:15:a3:
3b:05:e2:a3:5e:4f:2f:33:dc:2e:01:33:73:a0:9d:c5:72:ea:
21:a4:4e:cf:13:50:2c:76:e8:b1:40:83:07:42:6f:61:d3:16:
74:f6:41:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oiuwdtWuEv/eusi2VwOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5
ZTQ3YTAwHhcNMjUwNjI4MTMwMjUwWhcNMjUwNjI5MTMwMjUwWjAzMTEwLwYDVQQD
Eyg5YTE2MzgyMDkxZjgxYzFmNGQwODg1N2MxMTNmY2NhNThmYTI2MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUfMKHuDWHhNN7HoAyxZLVK912Q8
UQBcQprjBrdDgZGiVwL80dBfo71HxbnHGu51eF7/CKkzsgy/oYFVxSmNub1AEeUK
ypxJVs/sJ6S4D1ghdgj5bBGhjaxszGMNNx8adxW24nMM21zzKojhWdd15EAR85QE
5alInnsdsQOeRSpHc2WmAlnuPalP6/7AmJ4Gcxr+ZmucJ/y2HC0/XOUlb3HufHuM
RMF+iSbn3NJbUiQRb1N/CP+XlmX4D8UqKqQHsPYDmBdCpPwCbuDaHAAKoVAnnzrW
wlJEQO9THEkXK12HaQKTr6Vh9hYyZdQ9mQ1SC3zcOBrJOu3GdC2/oOMG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoWOCCR+BwfTQiFfBE/zKWPomMKMB8GA1UdIwQY
MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt
MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2
LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOORi9Ehd
ucKDucN4UlNvbeUk1oY2YWkK8EJCatwc/IEXOqoo11uvJBrc7pQm4EdlenNqp7eW
2/tkcMK1gCXJ7fLbpXN6cyVY5KzUmn3Z75RIpgLDWHK8IzWoMt0JMfn9qcOvlV5f
1GBeisGszlfNX+aUyQBq1nNV2tZqk5mdPwLFMCSFReHc46mRXQVpdufNEPeHkVrJ
gn7k0ZtRD2kdrOrXyA/mRpO8Gq2569tajhzd9yE2SGJ8TS8YceW3e9O3Fj6/g9i/
BsLdyqF1CVA4xC7exbcXpxWjOwXio15PLzPcLgEzc6CdxXLqIaROzxNQLHbosUCD
B0JvYdMWdPZBKw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:04 2025 by rpki-client