Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: HcKnB7rl/SjZJnJolEpiWUoixEvAh6T44NS5McFPMYU=
Subject key identifier: 5D:31:71:4E:74:C5:91:63:2B:E1:1D:8E:78:BD:64:61:0B:09:8C:BE
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 01977D8C87C6AC16F83C0A6A940BCB46BD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 145D
Signing time: Tue 17 Jun 2025 11:00:51 +0000
Manifest this update: Tue 17 Jun 2025 11:00:51 +0000
Manifest next update: Wed 18 Jun 2025 11:00:51 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: ZmteccZPnF3TcJif8fVMVhGvih04GG/QMGXp2RAaZwU=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:87:c6:ac:16:f8:3c:0a:6a:94:0b:cb:46:bd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jun 17 11:00:51 2025 GMT
Not After : Jun 18 11:00:51 2025 GMT
Subject: CN=5d31714e74c591632be11d8e78bd64610b098cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:c1:b1:2d:2f:80:4c:46:c2:ba:03:0a:ce:
97:55:ba:19:4c:bd:a1:04:64:6c:a3:55:17:1c:bc:
ee:2b:7d:6d:e2:fc:eb:b2:66:61:66:60:13:26:03:
09:89:2b:37:30:5e:a0:ad:23:51:90:48:1f:ec:0e:
63:d4:ce:31:93:71:74:c0:95:01:e2:eb:06:fe:06:
3d:e5:80:15:ed:86:6c:da:56:dd:cc:1f:ce:78:37:
5a:17:82:89:73:85:22:1b:b1:b6:eb:ed:6b:2e:18:
c3:48:2f:5d:77:44:5f:11:85:43:91:ea:5e:86:2c:
39:43:5e:1b:6c:5d:46:c9:cd:78:02:74:58:99:65:
64:7d:83:77:aa:c1:d2:2d:05:69:34:59:21:b6:9a:
bd:35:1e:4a:d5:13:d9:59:77:b9:c7:76:2f:eb:eb:
25:28:76:fb:88:05:e2:93:a2:42:d1:53:76:f5:fb:
f0:ad:3f:6a:d3:d2:b8:34:14:fe:ff:1b:e1:c3:db:
c7:24:1b:2c:db:2a:46:bf:5b:2c:b9:d4:5c:36:00:
a9:c2:94:ae:24:d1:dd:15:44:66:15:24:cf:e0:d2:
32:58:66:57:77:7b:19:e6:c5:0f:14:dc:f2:c8:f1:
3b:1c:37:46:48:f1:5b:9c:63:b2:54:21:b1:f9:49:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:71:4E:74:C5:91:63:2B:E1:1D:8E:78:BD:64:61:0B:09:8C:BE
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:68:a6:0c:8a:15:a0:eb:f2:18:3d:60:e1:db:35:1d:2a:c6:
5a:97:8c:24:eb:78:27:6d:cd:b5:e5:20:8b:fd:33:d8:6c:16:
64:f1:94:61:b7:96:58:5e:fc:88:2d:91:72:cc:9a:59:f4:0c:
56:a7:11:62:06:12:eb:71:20:c2:73:14:51:15:a2:27:ee:72:
1e:99:39:1e:69:be:7c:fa:b5:b4:ec:6b:7a:1a:6c:e2:17:c9:
5c:03:af:82:51:42:1e:54:f5:12:92:c9:da:7a:d7:21:07:81:
27:fe:a9:be:58:a6:d9:08:6f:e7:01:08:91:1b:a7:1d:c6:c1:
48:bf:a2:0d:89:24:5f:14:ad:cb:94:fc:2b:2c:e5:61:c6:a0:
44:ab:e3:cb:f1:3a:59:c8:5a:88:92:6e:bf:9a:e6:c9:6b:b4:
4c:9c:c2:7d:23:9b:9d:2e:88:69:16:aa:11:96:85:6f:45:74:
d0:ea:04:77:53:16:06:6e:ad:a0:d9:f6:76:e1:4d:b3:e1:06:
54:18:19:4b:7f:be:21:b2:67:58:8d:df:00:71:59:1c:3c:a9:
e3:87:ea:6f:0c:15:26:5f:37:f5:a5:3c:64:41:36:1c:e2:18:
d1:a7:54:d2:72:23:e9:b1:51:10:f4:2d:40:ed:11:38:3f:88:
2a:20:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:20:58 2025 by rpki-client