Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: hR32XmQsLgWWHUUtrbqlN0SQ1spt2Iu4ICjULEcWvNA=
Subject key identifier: 12:EB:C8:86:66:54:CB:BF:02:4F:E7:F3:5E:D2:9A:BD:B1:62:1B:5F
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 0196A68A7338382F108A051FDE23B5942818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 17:00:13 +0000
Manifest this update: Tue 06 May 2025 17:00:13 +0000
Manifest next update: Wed 07 May 2025 17:00:13 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: 18VOr9TCvKOy3vAjPKTWwMYrBX/8nA4qRbYQD4kc85Q=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:73:38:38:2f:10:8a:05:1f:de:23:b5:94:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: May 6 17:00:13 2025 GMT
Not After : May 7 17:00:13 2025 GMT
Subject: CN=12ebc8866654cbbf024fe7f35ed29abdb1621b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:7f:7c:33:bf:e6:75:b4:35:c0:ef:2d:30:
77:fd:13:e9:bc:36:ae:40:26:56:3b:63:7f:8e:6d:
b9:91:b2:53:a0:4c:db:33:1f:6b:4e:0f:b8:12:82:
b5:ed:40:58:fb:d2:0f:85:0d:a8:c3:ec:74:9d:66:
4f:49:49:48:8e:3b:3e:8d:3e:ec:12:e7:29:f9:52:
2a:3a:4d:dd:1d:e7:3a:75:33:44:f5:50:0a:d7:39:
6c:e6:f4:96:44:e2:65:fd:3e:d1:4b:f8:49:e8:00:
90:cf:fd:6e:d2:57:c8:16:d0:ad:d4:f7:48:f0:62:
68:7c:43:b9:28:78:08:70:33:7f:2b:c2:3d:fb:31:
a7:9d:83:9a:66:dc:3b:f6:1d:13:a9:e4:00:43:32:
40:f5:ec:d7:72:b7:5e:fa:0e:99:61:b9:f6:74:98:
31:7f:ce:8e:60:9c:23:c2:27:4d:3e:e7:1f:53:72:
c2:d4:b0:d2:72:16:b7:7b:1f:8c:28:ef:0f:43:dd:
51:b9:c0:ec:2b:49:d0:48:92:f4:31:0f:52:fc:a3:
36:ab:58:13:15:1a:15:8d:d9:35:03:dd:c4:36:1d:
9f:64:7f:6e:a7:e0:43:98:a5:0e:c5:c7:95:de:2b:
d7:15:55:28:ec:b0:dd:96:13:6d:1f:8b:48:f4:18:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:C8:86:66:54:CB:BF:02:4F:E7:F3:5E:D2:9A:BD:B1:62:1B:5F
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:1f:fe:22:43:6f:f5:13:8c:02:dd:20:af:cd:85:59:3c:
b6:e8:51:c3:32:d1:a7:a9:a8:25:28:09:0c:16:14:70:70:31:
d4:76:64:8a:2e:84:3c:02:65:de:2a:31:6f:f4:af:97:fb:99:
ce:e3:18:f0:ba:8f:84:bb:d3:14:26:68:a9:25:8e:73:cf:64:
d3:8f:b2:01:40:7d:2b:1b:e8:ce:f9:ed:f7:b4:74:16:f9:94:
6d:8e:b3:22:35:03:35:c8:af:21:fa:ee:6a:93:f0:1f:07:39:
bb:a0:f9:da:58:60:77:6f:53:92:ff:be:fe:27:95:e4:ee:3c:
ca:f4:98:c0:9c:91:1a:8a:22:9e:60:39:8d:7f:d8:71:ea:86:
21:8c:3d:01:8a:5b:e8:bd:0b:0b:be:ab:53:07:fd:69:ff:0c:
96:4b:30:9c:a4:19:84:4d:39:2f:8f:fe:51:32:75:48:9e:f6:
b8:a5:d9:1d:08:d9:42:4f:cc:58:b3:cf:23:d7:0a:ab:5b:71:
44:f2:3d:f7:0b:6e:70:bd:61:40:f9:6c:6d:07:8b:99:2e:6f:
a6:9e:43:97:ae:d2:24:90:57:f9:94:1a:93:16:cc:f0:a1:bb:
0b:8a:dc:3a:fa:59:bf:b5:cc:e1:48:19:2b:10:d6:76:ac:77:
38:e6:69:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaminM4OC8QigUf3iO1lCgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWVhOTU4N2U1ZWE0ZTk2M2FkN2FlN2YxMjU3NjFjMGUy
OTI1NjMwHhcNMjUwNTA2MTcwMDEzWhcNMjUwNTA3MTcwMDEzWjAzMTEwLwYDVQQD
EygxMmViYzg4NjY2NTRjYmJmMDI0ZmU3ZjM1ZWQyOWFiZGIxNjIxYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsZ/fDO/5nW0NcDvLTB3/RPpvDau
QCZWO2N/jm25kbJToEzbMx9rTg+4EoK17UBY+9IPhQ2ow+x0nWZPSUlIjjs+jT7s
Eucp+VIqOk3dHec6dTNE9VAK1zls5vSWROJl/T7RS/hJ6ACQz/1u0lfIFtCt1PdI
8GJofEO5KHgIcDN/K8I9+zGnnYOaZtw79h0TqeQAQzJA9ezXcrde+g6ZYbn2dJgx
f86OYJwjwidNPucfU3LC1LDScha3ex+MKO8PQ91RucDsK0nQSJL0MQ9S/KM2q1gT
FRoVjdk1A93ENh2fZH9up+BDmKUOxceV3ivXFVUo7LDdlhNtH4tI9BhjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLryIZmVMu/Ak/n817Smr2xYhtfMB8GA1UdIwQY
MBaAFNmeqVh+XqTpY6165/EldhwOKSVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUt
MDdkZjAxNmM0MWI4LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUtMDdkZjAxNmM0MWI4
LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQYf/iJD
b/UTjALdIK/NhVk8tuhRwzLRp6moJSgJDBYUcHAx1HZkii6EPAJl3ioxb/Svl/uZ
zuMY8LqPhLvTFCZoqSWOc89k04+yAUB9Kxvozvnt97R0FvmUbY6zIjUDNcivIfru
apPwHwc5u6D52lhgd29Tkv++/ieV5O48yvSYwJyRGooinmA5jX/YceqGIYw9AYpb
6L0LC76rUwf9af8MlkswnKQZhE05L4/+UTJ1SJ72uKXZHQjZQk/MWLPPI9cKq1tx
RPI99wtucL1hQPlsbQeLmS5vpp5Dl67SJJBX+ZQakxbM8KG7C4rcOvpZv7XM4UgZ
KxDWdqx3OOZpRw==
-----END CERTIFICATE-----
Generated at Tue May 6 19:31:24 2025 by rpki-client