Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: Bvm1Ez6sqIl59qVGEfAw9WfggxYL0nVL+OtAEInmocQ=
Subject key identifier: 8C:61:DD:4A:FD:3C:28:FD:D3:A5:2A:6E:79:37:76:BC:33:17:48:C9
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 0197B77CBD72340EA34AC235A36DDC01DA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 019E
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: A0klg069dusbyrxTXEJ4v615oT3oh5ztTHeufQIB4/M=)
2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bd:72:34:0e:a3:4a:c2:35:a3:6d:dc:01:da:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=8c61dd4afd3c28fdd3a52a6e793776bc331748c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:37:75:6a:f8:60:34:b2:6c:b9:4b:d6:8c:
a1:53:3f:98:7e:23:d5:b4:a8:b1:e5:71:be:e7:fe:
db:dd:57:63:22:eb:64:2b:87:75:15:c8:cd:e8:30:
7c:8b:3c:cf:23:0b:0a:96:02:10:89:64:de:05:5d:
93:d3:35:31:d4:7d:b9:fa:fa:5d:5c:4b:5a:a5:a5:
c4:8c:0c:f1:65:a2:9c:ef:35:11:93:42:19:81:d6:
47:88:98:b8:b7:c5:25:ef:b2:6b:2f:a4:32:0c:ff:
79:6a:80:8d:45:5e:4c:d1:12:ad:5d:fc:e9:f6:2d:
59:66:e6:e5:a1:4f:7a:1f:e0:fe:f1:4b:ce:db:a6:
e6:87:1d:08:0a:22:60:8d:84:0a:35:7e:89:29:d3:
ef:f5:2a:fc:41:bc:7d:0a:24:9a:3c:c8:d3:10:05:
d3:3d:57:88:43:07:af:59:13:72:59:23:2b:7f:3e:
34:26:44:46:3b:2c:5b:78:41:ae:d5:38:85:98:f7:
aa:3f:e1:d9:c3:c1:f6:d8:0f:57:59:b6:17:9e:80:
44:f4:a7:3b:7d:f4:bf:f4:b7:91:a1:3f:23:54:73:
0a:2d:b0:b2:14:ec:f4:90:6e:af:85:18:cf:13:54:
b7:0d:a8:78:b0:df:9f:c9:3f:f5:e3:82:ff:d0:f8:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:DD:4A:FD:3C:28:FD:D3:A5:2A:6E:79:37:76:BC:33:17:48:C9
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:37:a3:a2:f3:97:28:e5:02:10:43:ae:21:ca:5b:55:42:
08:d3:5d:24:53:80:c5:3e:20:b3:72:b3:44:25:37:95:38:d9:
f5:11:9d:94:51:06:f3:d6:ed:07:f3:af:ab:78:92:b1:87:6e:
ca:09:7c:94:6b:bd:b6:3e:1c:cd:39:86:f6:07:64:4f:d9:e0:
bf:b7:1b:60:88:65:03:1a:be:b7:72:ae:05:5f:53:6a:29:ec:
01:06:75:be:41:60:2b:23:fe:a8:35:a4:31:91:3a:aa:69:8b:
37:91:98:fe:da:b6:b3:f1:94:44:f2:2a:4a:91:3d:8d:66:c9:
25:c0:4e:9d:f0:83:d1:5b:06:98:8e:19:46:bc:f1:62:c5:d8:
5d:9a:c6:5b:cd:d2:76:21:39:02:b8:6e:34:ae:14:7c:0a:0a:
01:82:ef:c6:0b:b2:29:c5:e8:74:65:5f:7e:ed:94:6d:49:f6:
ab:77:04:53:13:79:0a:2c:ca:5c:22:3a:ff:dc:96:fd:5b:75:
bb:45:37:81:ef:b0:b6:c3:ac:59:5a:7d:3c:8c:75:eb:da:93:
20:96:a8:5b:21:65:9a:10:73:85:94:38:5f:38:33:84:e2:8b:
b2:b0:c9:2c:69:12:fd:43:bd:c9:ad:c1:37:c1:6b:68:22:10:
42:91:39:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fL1yNA6jSsI1o23cAdqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4
ZDZmMjUwHhcNMjUwNjI4MTcwMTM0WhcNMjUwNjI5MTcwMTM0WjAzMTEwLwYDVQQD
Eyg4YzYxZGQ0YWZkM2MyOGZkZDNhNTJhNmU3OTM3NzZiYzMzMTc0OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyQ3dWr4YDSybLlL1oyhUz+YfiPV
tKix5XG+5/7b3VdjIutkK4d1FcjN6DB8izzPIwsKlgIQiWTeBV2T0zUx1H25+vpd
XEtapaXEjAzxZaKc7zURk0IZgdZHiJi4t8Ul77JrL6QyDP95aoCNRV5M0RKtXfzp
9i1ZZubloU96H+D+8UvO26bmhx0ICiJgjYQKNX6JKdPv9Sr8Qbx9CiSaPMjTEAXT
PVeIQwevWRNyWSMrfz40JkRGOyxbeEGu1TiFmPeqP+HZw8H22A9XWbYXnoBE9Kc7
ffS/9LeRoT8jVHMKLbCyFOz0kG6vhRjPE1S3Dah4sN+fyT/144L/0PjWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxh3Ur9PCj906Uqbnk3drwzF0jJMB8GA1UdIwQY
MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt
Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy
LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVU3o6Lz
lyjlAhBDriHKW1VCCNNdJFOAxT4gs3KzRCU3lTjZ9RGdlFEG89btB/Ovq3iSsYdu
ygl8lGu9tj4czTmG9gdkT9ngv7cbYIhlAxq+t3KuBV9TainsAQZ1vkFgKyP+qDWk
MZE6qmmLN5GY/tq2s/GURPIqSpE9jWbJJcBOnfCD0VsGmI4ZRrzxYsXYXZrGW83S
diE5ArhuNK4UfAoKAYLvxguyKcXodGVffu2UbUn2q3cEUxN5CizKXCI6/9yW/Vt1
u0U3ge+wtsOsWVp9PIx169qTIJaoWyFlmhBzhZQ4XzgzhOKLsrDJLGkS/UO9ya3B
N8FraCIQQpE5sA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:56 2025 by rpki-client