Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: N7ovuAVWuD7DWirPN1BXKYjolRMPh6T8YueXAPQ3Zn0=
Subject key identifier: 70:DA:AB:ED:AE:89:B7:93:B5:61:82:C3:2B:18:8F:B2:65:F1:22:89
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 0197B745134713E27CDDBACF3F4129158759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 03C0
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: HLCQgTBPPnvg29m0wS7WkFIdimRPXwVLlOo4a+FNVk0=)
2: JNEydf2lKXnao8GrKqno19jXP6w.roa (hash: +0xX0M+yF7B+qU3xPS7RZz2tcDVRNPquvsVNbfH8B2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:47:13:e2:7c:dd:ba:cf:3f:41:29:15:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=70daabedae89b793b56182c32b188fb265f12289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:9b:06:35:57:59:27:75:ea:c4:fd:90:89:
c5:96:2f:a7:aa:75:a8:91:22:07:ce:84:b8:8f:84:
30:af:f4:fb:cd:92:e9:14:a2:59:b3:1d:94:9e:f3:
14:cc:4b:1d:a2:1b:0d:95:d2:f6:00:19:01:2a:1c:
d2:04:71:60:ce:64:b9:1c:e8:45:f5:e9:21:dc:e9:
af:8d:6f:77:94:91:0a:3a:ee:8f:08:f6:c3:fe:00:
ab:c6:e9:6e:98:3a:24:ee:8b:8f:65:6d:07:da:11:
0f:35:3c:fa:b5:ad:3c:84:15:e0:bf:24:66:8f:4f:
6d:2d:42:67:8b:88:19:dc:88:d6:79:dc:43:80:b1:
20:e2:7b:49:d5:73:db:88:e8:d4:c4:11:ba:f5:e6:
2b:2e:9e:4c:d9:03:ce:e7:e1:b3:31:64:e4:c0:16:
bf:a3:d6:64:44:63:ed:30:40:b4:ce:af:b5:4b:ed:
c4:06:67:ce:d7:18:21:01:bf:65:6f:c7:aa:36:42:
a5:89:72:65:08:4b:7f:6e:6d:df:d6:be:2d:7c:b0:
d5:25:06:5b:6c:99:e9:47:dc:91:32:0a:f5:ce:80:
78:07:da:49:69:a9:07:36:9b:a0:b7:b7:58:c0:d4:
79:9a:e9:34:33:d3:1f:b4:ee:de:af:fa:9f:50:19:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:AB:ED:AE:89:B7:93:B5:61:82:C3:2B:18:8F:B2:65:F1:22:89
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:1a:ac:8a:d3:9d:bf:2e:e8:3a:93:b5:c4:cc:b3:5b:ff:
e5:b9:c2:ae:10:a4:41:a1:34:a5:fe:aa:d5:ae:77:78:0e:09:
05:3b:b0:5b:11:fb:2d:b6:8b:7c:43:5e:a6:f9:74:15:42:36:
03:1e:cc:88:58:d7:28:d4:75:03:c3:ff:54:6d:ef:23:f8:74:
10:b7:66:a2:c9:28:a2:22:5c:a2:70:01:3e:a7:2c:3c:2a:e3:
4b:c3:2c:4a:7c:17:da:b0:d9:97:ec:b9:ec:e9:bf:d7:1a:45:
dd:a0:5e:be:88:dd:24:96:1b:26:7d:16:ac:d8:72:78:a9:68:
4a:e8:ed:ca:0e:06:72:84:8a:ed:9b:11:d5:61:93:bf:4c:c0:
a5:ae:8f:f4:d3:1b:17:17:00:69:ec:30:9d:de:f3:17:b3:37:
63:77:cc:f8:30:d2:09:b7:28:21:58:fc:3d:d4:4f:a9:b1:48:
af:c0:da:2a:b1:ce:97:cd:fc:6d:5d:d2:ef:f8:c5:42:ac:1c:
7e:07:c9:cd:5e:37:f7:80:45:8c:f1:b4:dc:98:39:70:95:2c:
5a:0d:04:71:8b:2a:4f:66:97:f7:24:10:e5:59:64:a8:52:4b:
81:92:f5:16:b9:15:bb:88:96:18:44:1f:73:ba:17:aa:1f:a2:
53:48:a2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRNHE+J83brPP0EpFYdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjUwNjI4MTYwMDQ2WhcNMjUwNjI5MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGRhYWJlZGFlODliNzkzYjU2MTgyYzMyYjE4OGZiMjY1ZjEyMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdmbBjVXWSd16sT9kInFli+nqnWo
kSIHzoS4j4Qwr/T7zZLpFKJZsx2UnvMUzEsdohsNldL2ABkBKhzSBHFgzmS5HOhF
9ekh3OmvjW93lJEKOu6PCPbD/gCrxulumDok7ouPZW0H2hEPNTz6ta08hBXgvyRm
j09tLUJni4gZ3IjWedxDgLEg4ntJ1XPbiOjUxBG69eYrLp5M2QPO5+GzMWTkwBa/
o9ZkRGPtMEC0zq+1S+3EBmfO1xghAb9lb8eqNkKliXJlCEt/bm3f1r4tfLDVJQZb
bJnpR9yRMgr1zoB4B9pJaakHNpugt7dYwNR5muk0M9MftO7er/qfUBm8xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDaq+2uibeTtWGCwysYj7Jl8SKJMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkoarIrT
nb8u6DqTtcTMs1v/5bnCrhCkQaE0pf6q1a53eA4JBTuwWxH7LbaLfENepvl0FUI2
Ax7MiFjXKNR1A8P/VG3vI/h0ELdmoskooiJconABPqcsPCrjS8MsSnwX2rDZl+y5
7Om/1xpF3aBevojdJJYbJn0WrNhyeKloSujtyg4GcoSK7ZsR1WGTv0zApa6P9NMb
FxcAaewwnd7zF7M3Y3fM+DDSCbcoIVj8PdRPqbFIr8DaKrHOl838bV3S7/jFQqwc
fgfJzV4394BFjPG03Jg5cJUsWg0EcYsqT2aX9yQQ5VlkqFJLgZL1FrkVu4iWGEQf
c7oXqh+iU0iiuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:11 2025 by rpki-client