Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: WL73xOVHAixoGO7lBJTyQlY1blbGaD8u2ei1vNbh3rA=
Subject key identifier: 68:71:88:4B:CB:21:B4:98:6B:51:39:6D:D6:9C:CD:F6:FB:C7:69:D4
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019768BBDA7103B1EF52B5DF0BE0E36E3B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 10:00:30 +0000
Manifest this update: Fri 13 Jun 2025 10:00:30 +0000
Manifest next update: Sat 14 Jun 2025 10:00:30 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: HRjXpYEcdG1M0SgR31hElEu7PteNO3MPTQP55OsB8HM=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:da:71:03:b1:ef:52:b5:df:0b:e0:e3:6e:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jun 13 10:00:30 2025 GMT
Not After : Jun 14 10:00:30 2025 GMT
Subject: CN=6871884bcb21b4986b51396dd69ccdf6fbc769d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:5b:15:ac:44:1c:c6:cb:84:05:10:fb:97:
a9:4f:29:a0:e0:55:7a:e3:bd:38:c7:9f:4e:33:93:
08:ea:ab:3b:65:28:c7:24:bf:c8:cc:aa:bb:6e:21:
8f:4b:e8:98:df:ec:d7:f4:dd:b2:5d:14:aa:3a:de:
c8:5b:04:d8:58:12:eb:93:7b:cb:62:ce:77:1a:fc:
44:f2:ce:d8:38:f9:81:fd:25:9e:66:52:98:77:d6:
43:4e:2b:ea:a9:86:5c:69:f0:0d:82:c5:76:d5:76:
e9:23:98:45:4d:c2:eb:22:16:de:25:1e:b7:e8:a4:
60:9d:04:84:50:0a:0d:4b:a5:25:f2:c6:77:3c:d0:
6c:c6:f8:c7:00:20:73:36:4d:da:ed:b8:01:3f:c3:
c0:66:84:0c:0c:f9:6a:9c:9a:c4:75:24:19:f7:2d:
59:5b:74:4b:2b:0b:ac:55:23:b9:0d:de:60:f7:7a:
a3:52:7f:0d:1a:aa:e6:22:c8:8a:05:6d:35:1e:05:
64:f9:8e:05:c6:7c:8c:a7:2b:25:4d:b1:e5:36:b9:
e4:e5:34:55:9d:7d:e1:b0:58:5f:7a:d5:e3:85:c6:
85:b0:84:16:66:09:e7:1d:88:c3:c8:74:93:06:35:
92:a0:f3:f5:cd:f2:04:0b:61:1b:4a:ce:94:27:1b:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:88:4B:CB:21:B4:98:6B:51:39:6D:D6:9C:CD:F6:FB:C7:69:D4
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:aa:65:72:96:4f:52:d2:38:0b:fa:42:12:e2:0d:cd:c1:31:
4a:86:ba:5f:2f:9d:61:81:66:c3:3f:2f:4d:65:15:56:9e:ad:
7e:67:f0:1b:4e:b6:5b:0e:7e:7b:ff:44:b9:ec:dc:77:db:f5:
4a:10:c9:68:e9:16:a9:d1:3d:c6:81:56:4f:ee:95:cb:42:6b:
ad:a6:ea:8b:08:4e:fa:b8:c0:e8:e5:88:4b:55:62:85:e3:07:
41:ed:81:97:0d:a6:0c:88:ec:c8:2d:9f:ab:12:ca:29:b1:51:
f7:b8:39:fd:89:b1:e3:bd:9e:99:4e:a0:f3:09:ee:86:47:e3:
67:e3:f3:6e:5d:48:34:05:7c:79:2d:04:dc:93:de:ed:8d:81:
83:a2:93:c3:78:db:44:18:eb:9b:f6:72:aa:7f:20:13:ff:fa:
61:1d:15:43:bb:aa:1a:0c:7d:e3:13:fc:53:b8:43:1c:27:2f:
a1:85:a7:b2:e7:bc:78:7e:ab:13:26:1e:0b:4a:2f:2d:b0:53:
30:6d:6e:6c:fb:54:5c:fd:a0:f7:6a:a7:66:f0:9f:2d:45:4f:
16:86:58:ad:75:dc:5f:27:d3:1f:38:ae:44:b8:f4:b9:4c:4c:
be:2b:6c:09:51:bd:c2:c7:9c:74:ab:25:79:e4:9e:49:d5:7a:
06:42:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:53 2025 by rpki-client