Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: xn8rOKleBtDlvEALJyKZZVlrRtPB8uGAHTr9Stpun9Q=
Subject key identifier: FF:DA:11:56:C9:D9:F1:29:41:67:57:C2:4E:EA:AB:EB:F0:84:00:BE
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 0197B88F22EB87A72A8FA794B9D1E8054D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0F5A
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: 7KF4U7CMdriUXkfQnOmKF4ym9etxKjAzh6HzUIwGjvI=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:22:eb:87:a7:2a:8f:a7:94:b9:d1:e8:05:4d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=ffda1156c9d9f129416757c24eeaabebf08400be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:2e:bc:bf:18:56:55:3b:e7:24:34:3a:6f:
b5:f0:97:de:97:db:e9:28:ac:f5:51:da:2c:ac:30:
d7:8b:52:14:85:e5:2e:06:94:55:14:5b:de:2b:f7:
de:5b:3a:f7:b8:ad:6a:d2:70:59:80:3a:0f:ed:69:
71:39:a6:3a:1a:31:94:15:75:b1:a8:01:4d:31:79:
90:46:a0:b3:cc:0b:4a:44:df:2f:e7:e2:68:82:ec:
a7:6a:09:57:f5:6a:1a:20:65:ea:3a:4c:f0:27:95:
90:d4:af:a5:67:1a:37:12:a6:bf:84:08:ce:9c:2e:
65:fb:fc:91:9b:65:56:4c:44:14:d3:b7:a3:89:bb:
c2:09:4e:05:4a:1c:81:42:52:54:eb:e8:9f:01:3e:
21:31:6b:13:ae:bd:d4:ed:ac:be:8d:bb:0a:ad:a3:
d6:61:bc:31:45:07:78:7c:b8:76:25:93:04:11:32:
31:a8:c5:b4:14:e7:41:57:21:8d:58:62:38:5e:dd:
f0:70:dc:4d:4a:0c:13:85:07:dd:fb:aa:4e:18:b4:
d0:c1:dd:ca:95:6a:b4:79:18:8b:96:56:97:77:03:
d2:dc:c2:19:1c:94:51:66:6b:f1:30:fb:5a:7b:20:
35:81:a9:f2:d9:5c:ff:d6:f1:b4:6f:1d:49:28:a8:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DA:11:56:C9:D9:F1:29:41:67:57:C2:4E:EA:AB:EB:F0:84:00:BE
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fb:8f:15:9f:a3:57:0b:e4:90:5c:d0:21:30:4b:65:5a:ca:
3c:6f:9b:a6:54:82:9f:cf:69:b0:a5:d4:38:bb:d9:af:a5:c1:
c6:fc:06:c8:11:a7:30:fa:10:8b:fb:42:3c:13:31:45:b0:e1:
eb:4d:34:96:c5:0a:bd:ce:b3:0f:d3:85:3b:16:50:19:8d:b4:
3c:ef:2b:7f:7f:ec:a5:5a:e8:90:8e:f8:cc:78:d9:a5:48:b3:
26:f6:6f:d3:fc:1c:8f:8f:7b:12:da:cc:86:0c:e0:d3:28:2d:
cb:c3:01:9e:05:d3:22:03:2c:31:6a:b5:9e:80:79:e7:78:c1:
85:2a:08:18:67:4a:4c:9e:47:8b:c3:de:6a:9a:01:f5:ac:6d:
c5:fe:cc:fc:19:bd:53:84:da:b4:0e:7d:d4:b1:bf:a9:bb:fb:
a9:e0:23:18:77:0f:6c:b3:75:20:6b:0e:78:cf:33:2e:b7:39:
74:04:45:4e:bd:ec:2d:cc:22:03:01:cd:4a:26:1b:3c:00:16:
44:97:57:3a:03:30:6b:05:2b:a8:2b:0f:79:34:e4:05:57:47:
5c:4c:7d:04:26:c7:ee:ab:47:37:05:66:f0:e0:0b:c0:62:ee:
4a:7e:0a:c2:4c:a6:8f:d7:3b:24:ad:7f:9f:92:a1:f9:db:37:
09:76:a0:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jyLrh6cqj6eUudHoBU1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjUwNjI4MjIwMTE3WhcNMjUwNjI5MjIwMTE3WjAzMTEwLwYDVQQD
EyhmZmRhMTE1NmM5ZDlmMTI5NDE2NzU3YzI0ZWVhYWJlYmYwODQwMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C4uvL8YVlU75yQ0Om+18Jfel9vp
KKz1UdosrDDXi1IUheUuBpRVFFveK/feWzr3uK1q0nBZgDoP7WlxOaY6GjGUFXWx
qAFNMXmQRqCzzAtKRN8v5+JoguynaglX9WoaIGXqOkzwJ5WQ1K+lZxo3Eqa/hAjO
nC5l+/yRm2VWTEQU07ejibvCCU4FShyBQlJU6+ifAT4hMWsTrr3U7ay+jbsKraPW
YbwxRQd4fLh2JZMEETIxqMW0FOdBVyGNWGI4Xt3wcNxNSgwThQfd+6pOGLTQwd3K
lWq0eRiLllaXdwPS3MIZHJRRZmvxMPtaeyA1gany2Vz/1vG0bx1JKKhc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/aEVbJ2fEpQWdXwk7qq+vwhAC+MB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvuPFZ+j
VwvkkFzQITBLZVrKPG+bplSCn89psKXUOLvZr6XBxvwGyBGnMPoQi/tCPBMxRbDh
6000lsUKvc6zD9OFOxZQGY20PO8rf3/spVrokI74zHjZpUizJvZv0/wcj497EtrM
hgzg0ygty8MBngXTIgMsMWq1noB553jBhSoIGGdKTJ5Hi8PeapoB9axtxf7M/Bm9
U4TatA591LG/qbv7qeAjGHcPbLN1IGsOeM8zLrc5dARFTr3sLcwiAwHNSiYbPAAW
RJdXOgMwawUrqCsPeTTkBVdHXEx9BCbH7qtHNwVm8OALwGLuSn4Kwkymj9c7JK1/
n5Kh+ds3CXagtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:25 2025 by rpki-client