Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: q2XVi5Ru5+t5ceCmhWsTgtRpg9o9lrNy+S0dAke1IJ4=
Subject key identifier: 8E:B0:BA:97:39:F9:50:FD:6D:AE:F4:3F:58:6E:CE:6F:21:0F:56:5F
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0197B6A20D232FD4A6EF4D4269DB6AFFF201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0C20
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: BF/3Ki0wOYSdOV4PsS8GWWGNNbvHyBD+jJWRq0tm3EU=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0d:23:2f:d4:a6:ef:4d:42:69:db:6a:ff:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=8eb0ba9739f950fd6daef43f586ece6f210f565f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:bb:ed:08:a0:85:cb:c0:a8:5d:b0:ca:ae:
b7:5c:17:fd:1e:ca:f1:31:06:a8:0d:a4:89:53:fb:
4d:a2:d0:1a:46:51:0e:fc:32:a2:2a:2e:ac:38:be:
20:8a:06:1b:1d:f4:60:09:21:3d:0e:30:88:d9:32:
2b:71:37:52:90:0a:81:c5:41:8d:19:fa:a9:08:99:
d8:94:21:fd:6a:78:a7:8e:b1:7a:a1:90:d4:1c:ca:
68:bf:64:ad:e5:ca:f9:a0:be:3a:7b:53:cd:67:36:
2d:f3:e2:8c:74:18:1d:b6:64:2b:e5:a3:f3:3d:7a:
b4:3f:69:62:2e:53:6c:13:a5:57:c8:8e:a0:9f:45:
1f:80:47:73:a6:ce:b8:62:dd:fb:72:5b:eb:b2:cc:
51:81:2c:30:98:84:4d:ea:e2:cc:da:cb:70:a5:8a:
47:3f:86:1e:e7:aa:46:18:fc:c5:ca:28:39:99:4c:
ca:5c:24:60:43:ce:2a:88:70:76:c6:8a:6a:f5:00:
6d:02:00:b6:ff:c4:bc:ac:18:2d:37:d7:cc:95:fe:
3e:6e:a6:be:ec:42:59:2b:6e:1e:3f:2a:e5:28:e8:
3d:fa:60:bb:70:7f:39:66:b4:ff:22:c6:d6:f3:0d:
84:9b:b4:ca:79:1d:50:fc:b2:04:56:b3:54:99:ff:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:BA:97:39:F9:50:FD:6D:AE:F4:3F:58:6E:CE:6F:21:0F:56:5F
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b8:8d:92:bf:15:26:7a:ae:47:42:e5:71:67:23:37:3e:ac:
ce:88:6c:a9:f9:cb:c8:fd:87:53:22:ea:7a:9b:af:30:4c:f9:
f5:ad:12:32:3b:89:cf:3a:40:41:ce:0c:05:ab:fe:43:e2:ea:
28:fe:bf:17:07:c0:3f:6c:0e:a5:48:d9:bf:62:0a:5a:72:26:
de:84:05:c2:55:7e:90:6d:d7:35:d0:2d:be:8b:56:a5:b2:2b:
94:0c:a4:0f:37:5b:b7:87:84:d1:0f:c3:61:fc:06:e7:a1:5a:
35:f6:04:b3:e7:67:aa:4d:b3:3a:39:06:44:54:7f:7c:d0:c7:
c9:df:a6:5d:22:59:0a:66:c1:f5:29:d6:06:89:b0:a4:cd:93:
00:54:96:6a:f8:0e:df:ea:bf:24:b6:5b:20:15:1e:11:5b:5a:
ee:34:f6:eb:47:01:c1:74:3b:0a:b6:e6:91:e4:c3:be:ff:7d:
45:13:4c:3b:89:d9:1c:46:bc:ab:e7:d8:24:8c:08:08:41:26:
4d:49:ce:12:c8:34:41:31:16:e2:55:0a:8d:4c:a7:dd:8e:1d:
f0:d9:a2:63:fc:9b:25:88:f6:23:be:e3:71:33:3d:ec:2d:f9:
ce:48:40:4e:02:24:5f:03:eb:d0:ee:e2:96:3e:0e:0c:3b:16:
f3:2c:ec:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2og0jL9Sm701Cadtq//IBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjUwNjI4MTMwMjQyWhcNMjUwNjI5MTMwMjQyWjAzMTEwLwYDVQQD
Eyg4ZWIwYmE5NzM5Zjk1MGZkNmRhZWY0M2Y1ODZlY2U2ZjIxMGY1NjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBe77QighcvAqF2wyq63XBf9Hsrx
MQaoDaSJU/tNotAaRlEO/DKiKi6sOL4gigYbHfRgCSE9DjCI2TIrcTdSkAqBxUGN
GfqpCJnYlCH9aninjrF6oZDUHMpov2St5cr5oL46e1PNZzYt8+KMdBgdtmQr5aPz
PXq0P2liLlNsE6VXyI6gn0UfgEdzps64Yt37clvrssxRgSwwmIRN6uLM2stwpYpH
P4Ye56pGGPzFyig5mUzKXCRgQ84qiHB2xopq9QBtAgC2/8S8rBgtN9fMlf4+bqa+
7EJZK24ePyrlKOg9+mC7cH85ZrT/IsbW8w2Em7TKeR1Q/LIEVrNUmf+xjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6wupc5+VD9ba70P1huzm8hD1ZfMB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXriNkr8V
JnquR0LlcWcjNz6szohsqfnLyP2HUyLqepuvMEz59a0SMjuJzzpAQc4MBav+Q+Lq
KP6/FwfAP2wOpUjZv2IKWnIm3oQFwlV+kG3XNdAtvotWpbIrlAykDzdbt4eE0Q/D
YfwG56FaNfYEs+dnqk2zOjkGRFR/fNDHyd+mXSJZCmbB9SnWBomwpM2TAFSWavgO
3+q/JLZbIBUeEVta7jT260cBwXQ7CrbmkeTDvv99RRNMO4nZHEa8q+fYJIwICEEm
TUnOEsg0QTEW4lUKjUyn3Y4d8NmiY/ybJYj2I77jcTM97C35zkhATgIkXwPr0O7i
lj4ODDsW8yzspw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:40 2025 by rpki-client