Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: o/nlG/ikuJladr/OYEe/6YvekSbAaOrowEEkQeq1ygE=
Subject key identifier: E0:1B:CA:44:D4:2D:AC:A4:D2:66:84:90:6B:30:68:D3:BB:16:9D:B9
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01977D1E9BFABDE93044956B08711B68FF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 09:00:47 +0000
Manifest this update: Tue 17 Jun 2025 09:00:47 +0000
Manifest next update: Wed 18 Jun 2025 09:00:47 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: jVKWUjXe9O5RyQzPDCjOBze7sOALv3kH189j9VYsAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:9b:fa:bd:e9:30:44:95:6b:08:71:1b:68:ff:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jun 17 09:00:47 2025 GMT
Not After : Jun 18 09:00:47 2025 GMT
Subject: CN=e01bca44d42daca4d26684906b3068d3bb169db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:b7:d5:c5:9f:f2:2b:21:77:c9:74:d4:10:
05:14:0c:1e:7b:5a:b6:d9:a1:55:0e:5c:e2:16:8c:
ef:8e:b1:97:b8:b2:fa:89:b6:6a:ac:98:3e:5d:71:
12:36:4f:54:bb:a2:2e:74:22:62:79:b7:14:f4:30:
15:b7:bb:0c:b3:dd:3a:5d:f5:d1:83:97:d1:09:da:
c0:4b:53:5f:38:70:9f:bf:72:1b:f3:4e:a0:39:81:
bb:36:d4:bb:67:a5:e6:21:67:86:2f:e7:1c:f3:f6:
ac:b2:18:16:bc:b0:4c:c0:2e:e0:12:9e:6d:da:7f:
d4:ed:e4:6a:57:31:c3:d9:9a:31:a5:64:6f:ba:fc:
88:3d:9b:a6:58:63:cc:5d:2e:89:13:db:52:51:3d:
9a:22:be:dc:24:77:2e:4a:86:e4:cd:8a:96:eb:bb:
28:54:20:4d:1f:ec:94:e3:6c:ac:a0:53:ed:db:a1:
cc:64:5f:77:30:78:28:f9:b6:40:de:17:fd:27:de:
23:29:ca:87:5b:c9:a4:12:ae:9e:1d:f9:8d:f9:c6:
79:16:d7:f6:42:7c:8c:73:a3:c6:18:0f:39:e3:a1:
b4:47:9f:9a:2b:19:30:31:f4:24:62:22:7e:28:d8:
c8:73:26:34:f1:43:3d:02:cb:54:b5:b4:50:cf:c5:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:CA:44:D4:2D:AC:A4:D2:66:84:90:6B:30:68:D3:BB:16:9D:B9
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2c:5c:cb:13:ec:44:27:21:e2:dd:90:25:68:e8:d2:80:4a:
e1:6b:22:6c:8d:f4:ec:f4:f4:05:44:7a:5d:84:55:81:8c:47:
49:2e:16:7b:c6:ab:16:f4:a8:ce:b7:cf:e4:b0:93:ce:47:e0:
e1:90:5f:a3:16:b9:7f:30:01:7f:3a:c9:fa:fa:fa:bd:b4:d2:
1e:e3:19:6f:e0:33:f1:18:29:98:e4:16:3d:2a:64:f2:0f:be:
5c:d0:8f:27:96:53:0e:d0:0b:18:a4:f4:fa:a7:1b:61:80:dd:
71:f8:f4:2c:86:4e:79:db:a7:65:7e:b4:0a:3b:73:c7:18:30:
c9:f1:b5:a9:d5:7f:79:ed:a6:61:a5:db:06:ce:a7:d0:a4:bb:
45:b1:4a:b7:7c:2e:13:53:ad:74:7c:34:2e:01:8b:84:8e:6b:
6c:dc:c2:54:9a:12:c3:64:80:42:81:3d:aa:81:ec:b2:66:80:
e8:0e:3c:df:bd:45:54:9f:05:05:e0:75:09:98:5a:80:8e:20:
e0:10:73:6c:5f:e2:a8:3a:f8:91:28:fd:64:0d:93:a5:d1:a7:
9b:75:be:1c:d9:a3:f9:95:02:f0:a0:98:36:9c:27:82:95:21:
3f:16:87:f4:63:2a:f2:06:8d:96:cf:6e:39:2b:70:27:7e:1e:
1e:e6:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:53:38 2025 by rpki-client