Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: XojnGjBzvrIpbD01tvFHx2Hk6xxG1j5sOthqE91f2C4=
Subject key identifier: BA:2E:10:D6:DC:19:4C:FF:F7:28:2C:8A:2D:40:DC:23:37:E4:9F:27
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 0197B5FBC68C9F4431E79E267EB5CC6B4293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 10:01:05 +0000
Manifest this update: Sat 28 Jun 2025 10:01:05 +0000
Manifest next update: Sun 29 Jun 2025 10:01:05 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: T9OvhF3FW0im6y8n2Wy3AkB36aypnk0KactDBL6MsHI=)
2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:c6:8c:9f:44:31:e7:9e:26:7e:b5:cc:6b:42:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Jun 28 10:01:05 2025 GMT
Not After : Jun 29 10:01:05 2025 GMT
Subject: CN=ba2e10d6dc194cfff7282c8a2d40dc2337e49f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:eb:e1:d5:3a:6b:5e:d9:af:2d:f8:11:df:
d7:46:00:2b:d4:ab:b6:05:9d:7a:7a:03:ae:fd:7d:
85:2d:86:ad:91:89:b6:52:c0:98:32:42:b8:86:8a:
b7:6b:a8:eb:57:f7:28:28:11:d3:9e:71:76:a6:28:
0a:16:8f:94:c8:7e:43:b4:7d:6c:36:08:05:30:a0:
51:8d:b7:9d:93:8d:cc:e4:f0:1e:d5:bc:87:98:f4:
e8:cd:90:06:b6:a1:71:1c:7d:c1:1b:57:3b:66:fc:
fc:0a:fe:bc:8e:86:01:9e:03:f7:bf:48:2e:b2:37:
bd:61:4b:73:66:2c:21:52:66:af:b1:ce:90:f2:e8:
0f:92:7f:70:03:b2:18:d2:8b:bf:20:e5:1e:47:0f:
c6:30:c0:4a:f6:0e:13:e2:1e:04:6f:b3:12:a9:0f:
d0:67:a4:b6:82:b4:d8:b5:73:eb:05:52:38:65:b8:
3d:27:fd:78:9e:0a:88:4c:d4:2b:b5:9e:6e:2c:8e:
f6:93:e0:a2:58:b3:16:33:98:ba:f2:4d:87:46:95:
80:80:6e:23:c0:37:56:91:ed:ea:25:8d:d6:b8:96:
4e:aa:ca:1f:ba:c6:c5:2f:77:1f:3e:32:8c:33:9b:
8c:df:eb:18:73:88:6f:0a:6a:3d:18:a6:eb:69:d5:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:10:D6:DC:19:4C:FF:F7:28:2C:8A:2D:40:DC:23:37:E4:9F:27
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:b6:2e:a2:4f:be:0a:aa:f0:6f:d1:5a:ca:f7:63:50:4a:
30:a5:94:e8:35:9a:93:69:1f:40:c1:91:9d:35:cb:78:57:52:
95:33:a9:8f:a1:6e:41:99:f2:2e:64:f1:b1:18:c8:4d:7f:44:
61:cb:43:31:b3:ab:ea:1c:5c:0c:87:1b:be:52:2f:30:18:8b:
70:82:8f:09:b3:fa:9e:90:3a:69:53:c0:9e:40:14:f0:1b:f6:
40:ea:61:af:50:e4:58:2e:9f:30:2e:b8:99:64:a3:3c:71:91:
5c:06:b7:06:a3:30:7b:11:37:00:75:3e:73:7c:ce:be:d1:3c:
13:5b:91:91:9d:84:46:fd:3b:ee:44:e3:86:f4:b1:24:0a:c5:
e0:e4:25:1e:1d:d0:2a:ba:b8:0b:3d:7a:55:0d:f8:0d:05:14:
d3:cf:0d:41:68:2c:d5:ba:c0:06:20:54:c5:12:5a:3b:e8:e3:
a2:53:bd:30:27:14:62:20:2f:8e:18:bf:e0:ce:e8:e9:b6:40:
c7:92:97:ca:12:06:4b:bc:a3:ee:89:b5:e3:ea:f6:c8:df:33:
8c:68:f0:61:45:71:cd:bb:e2:07:93:8d:3a:2f:89:d5:6e:06:
12:a0:b5:ec:bf:ec:18:75:b0:c7:6f:3a:99:ba:5c:e2:8c:fb:
91:bb:ca:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+8aMn0Qx554mfrXMa0KTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1
MjRkZWMwHhcNMjUwNjI4MTAwMTA1WhcNMjUwNjI5MTAwMTA1WjAzMTEwLwYDVQQD
EyhiYTJlMTBkNmRjMTk0Y2ZmZjcyODJjOGEyZDQwZGMyMzM3ZTQ5ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsrr4dU6a17Zry34Ed/XRgAr1Ku2
BZ16egOu/X2FLYatkYm2UsCYMkK4hoq3a6jrV/coKBHTnnF2pigKFo+UyH5DtH1s
NggFMKBRjbedk43M5PAe1byHmPTozZAGtqFxHH3BG1c7Zvz8Cv68joYBngP3v0gu
sje9YUtzZiwhUmavsc6Q8ugPkn9wA7IY0ou/IOUeRw/GMMBK9g4T4h4Eb7MSqQ/Q
Z6S2grTYtXPrBVI4Zbg9J/14ngqITNQrtZ5uLI72k+CiWLMWM5i68k2HRpWAgG4j
wDdWke3qJY3WuJZOqsofusbFL3cfPjKMM5uM3+sYc4hvCmo9GKbradVLowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLouENbcGUz/9ygsii1A3CM35J8nMB8GA1UdIwQY
MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt
MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi
LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQC2LqJP
vgqq8G/RWsr3Y1BKMKWU6DWak2kfQMGRnTXLeFdSlTOpj6FuQZnyLmTxsRjITX9E
YctDMbOr6hxcDIcbvlIvMBiLcIKPCbP6npA6aVPAnkAU8Bv2QOphr1DkWC6fMC64
mWSjPHGRXAa3BqMwexE3AHU+c3zOvtE8E1uRkZ2ERv077kTjhvSxJArF4OQlHh3Q
Krq4Cz16VQ34DQUU088NQWgs1brABiBUxRJaO+jjolO9MCcUYiAvjhi/4M7o6bZA
x5KXyhIGS7yj7om14+r2yN8zjGjwYUVxzbviB5ONOi+J1W4GEqC17L/sGHWwx286
mbpc4oz7kbvKEg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:05 2025 by rpki-client