Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: KSWVaxdaf5bqdTV64ohgGuza+kJPMYL7xvnOjXfj4gI=
Subject key identifier: 83:86:E9:2E:5B:8C:13:ED:2C:AD:95:67:35:B8:31:39:CA:C5:98:F6
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 0197B6D7A1E682D397761AB5FB3A1C02386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: awoGYaEbz8LNfG4FdrR52dK3/2UTuUciC6yyPW51aOg=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a1:e6:82:d3:97:76:1a:b5:fb:3a:1c:02:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=8386e92e5b8c13ed2cad956735b83139cac598f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:a3:8a:b7:cf:34:95:7d:6f:29:f7:9f:84:
bb:0d:5f:e2:66:53:9a:ed:35:0a:c4:48:b5:27:bd:
82:8e:3d:9e:ea:05:d6:98:66:bd:86:f5:41:88:f1:
5b:55:06:27:cf:91:04:cc:b9:2e:2a:15:23:44:e5:
f2:8d:a3:9d:b0:45:da:1c:01:28:9e:0f:20:18:4b:
96:40:00:04:22:ce:c2:87:c3:33:c4:54:32:6d:07:
c6:8c:e3:2e:ef:dd:5f:2a:75:5e:81:30:4e:8e:05:
07:40:58:39:2b:8a:17:d8:9e:c2:d3:bf:bb:91:86:
7d:53:14:ac:b5:b6:52:90:32:b2:11:34:53:9c:d8:
04:d1:2e:24:cd:96:c5:cc:63:49:10:ab:6a:48:bd:
51:d0:b2:df:be:e4:bd:30:bf:23:b2:62:a8:cc:bb:
3d:90:46:46:2a:d8:d2:9b:88:0e:7c:7d:78:7b:2d:
f4:4c:9c:a7:ea:2f:c2:3d:a0:0d:05:f7:e0:40:93:
07:7b:7d:2f:0f:0c:4a:18:64:b0:96:ee:87:f4:b5:
05:47:66:dc:ab:ac:98:ae:2a:22:93:df:01:6e:9e:
7e:33:b8:c9:31:3d:7e:a6:a2:1b:7a:40:d6:a8:6b:
6e:29:cf:a5:63:13:e1:59:b6:21:91:41:e3:c2:7e:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:E9:2E:5B:8C:13:ED:2C:AD:95:67:35:B8:31:39:CA:C5:98:F6
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:7b:db:29:57:49:0b:4d:62:cf:3d:83:13:9f:fa:c1:75:
32:30:4b:54:e6:12:6d:63:f6:70:09:bd:ad:cf:c7:2d:ef:dd:
a6:7a:ef:06:46:64:1e:95:8f:35:81:31:04:cd:df:0d:fd:46:
af:7c:95:8b:d8:be:fe:ea:8c:26:32:0a:b4:2c:da:7a:04:02:
6e:7d:a6:7a:7a:64:ab:58:5b:49:c8:ef:bc:fe:d9:d1:db:3e:
6e:76:c5:80:5a:0c:81:ff:f5:a6:1b:a2:4c:f1:2b:be:2d:02:
58:b1:52:50:09:0f:90:34:cc:57:27:00:3e:c2:df:18:f7:7a:
0b:a2:c6:7e:08:85:0f:38:38:8c:49:25:34:5f:20:69:47:9b:
aa:eb:e6:55:17:66:c0:75:20:57:e5:64:8f:ee:ad:be:5c:02:
3c:e9:80:44:1d:9c:33:71:1e:15:1d:82:c0:b1:27:5b:48:7b:
d1:5d:ed:c1:13:62:f1:88:b2:02:9b:63:cc:bc:1e:d0:77:0d:
69:5c:30:cd:99:09:d6:63:c1:fc:1c:55:ea:f2:4c:c0:3d:37:
63:f2:9a:50:03:63:a3:18:fe:1f:27:55:be:02:6f:72:2a:50:
44:d1:83:0b:48:5e:ab:9a:8a:30:28:f4:c5:30:4d:7f:46:7e:
eb:c1:bd:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216HmgtOXdhq1+zocAjhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWVhOTU4N2U1ZWE0ZTk2M2FkN2FlN2YxMjU3NjFjMGUy
OTI1NjMwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
Eyg4Mzg2ZTkyZTViOGMxM2VkMmNhZDk1NjczNWI4MzEzOWNhYzU5OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS2jirfPNJV9byn3n4S7DV/iZlOa
7TUKxEi1J72Cjj2e6gXWmGa9hvVBiPFbVQYnz5EEzLkuKhUjROXyjaOdsEXaHAEo
ng8gGEuWQAAEIs7Ch8MzxFQybQfGjOMu791fKnVegTBOjgUHQFg5K4oX2J7C07+7
kYZ9UxSstbZSkDKyETRTnNgE0S4kzZbFzGNJEKtqSL1R0LLfvuS9ML8jsmKozLs9
kEZGKtjSm4gOfH14ey30TJyn6i/CPaANBffgQJMHe30vDwxKGGSwlu6H9LUFR2bc
q6yYrioik98Bbp5+M7jJMT1+pqIbekDWqGtuKc+lYxPhWbYhkUHjwn7pAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOG6S5bjBPtLK2VZzW4MTnKxZj2MB8GA1UdIwQY
MBaAFNmeqVh+XqTpY6165/EldhwOKSVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUt
MDdkZjAxNmM0MWI4LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUtMDdkZjAxNmM0MWI4
LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXp72ylX
SQtNYs89gxOf+sF1MjBLVOYSbWP2cAm9rc/HLe/dpnrvBkZkHpWPNYExBM3fDf1G
r3yVi9i+/uqMJjIKtCzaegQCbn2menpkq1hbScjvvP7Z0ds+bnbFgFoMgf/1phui
TPErvi0CWLFSUAkPkDTMVycAPsLfGPd6C6LGfgiFDzg4jEklNF8gaUebquvmVRdm
wHUgV+Vkj+6tvlwCPOmARB2cM3EeFR2CwLEnW0h70V3twRNi8YiyAptjzLwe0HcN
aVwwzZkJ1mPB/BxV6vJMwD03Y/KaUANjoxj+HydVvgJvcipQRNGDC0heq5qKMCj0
xTBNf0Z+68G9Zw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:25 2025 by rpki-client