Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: kwkNxLvcpKLYBOXqpZtY3p0I2cwG0Fkv9/OSTWfdUSg=
Subject key identifier: 97:43:DB:1A:4E:5C:34:F2:EC:C1:3F:69:BD:1F:45:21:36:11:55:05
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 01976997C22369363F65B3D047325F9567D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 14:00:42 +0000
Manifest this update: Fri 13 Jun 2025 14:00:42 +0000
Manifest next update: Sat 14 Jun 2025 14:00:42 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: PXjS2B41CE43JdSjA893fCzIfzzieoxWIK9m2aO4RIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:c2:23:69:36:3f:65:b3:d0:47:32:5f:95:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jun 13 14:00:42 2025 GMT
Not After : Jun 14 14:00:42 2025 GMT
Subject: CN=9743db1a4e5c34f2ecc13f69bd1f452136115505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:3f:51:87:89:1c:13:35:69:a9:1b:5c:1e:
86:00:d0:d2:00:68:7b:8d:4b:fa:65:e9:da:05:cd:
73:38:cd:f9:64:ef:a9:cc:df:b4:ef:2f:40:f8:5a:
e2:c7:53:98:23:88:73:c9:29:57:32:d6:84:8e:94:
24:99:f8:d6:28:cd:f2:ae:33:43:1a:1b:0d:bb:f6:
f4:9e:bc:6b:b8:20:6b:96:ea:d3:1c:7f:f1:3e:42:
2f:87:d3:ef:1c:34:f4:39:52:d8:08:bc:b0:ab:e5:
b3:5a:e1:56:01:0d:3c:15:38:c6:f7:b1:ab:3b:a6:
5c:98:15:f6:b9:85:99:72:b4:eb:ac:ff:6f:e9:e2:
7a:7d:a3:fc:e4:e2:12:c3:67:a3:bf:dd:96:7a:3e:
81:53:c6:5f:93:12:8d:84:fd:fa:35:5b:d7:7e:5b:
4a:44:93:be:8d:a6:31:61:61:e8:02:8d:24:78:5c:
24:a7:44:57:5b:f5:0f:1d:57:48:a7:3b:6a:46:19:
60:95:e6:f1:f0:de:98:67:89:02:2f:1f:2e:c5:68:
46:50:6b:c6:86:3d:8f:46:5f:2e:64:2b:b4:1d:b2:
31:db:0d:ce:b9:8a:42:da:11:d7:3c:2e:36:7e:17:
fc:e3:ad:b5:79:81:3b:c9:1c:5f:2c:24:22:a9:32:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:DB:1A:4E:5C:34:F2:EC:C1:3F:69:BD:1F:45:21:36:11:55:05
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:03:56:80:75:60:62:1c:a5:b8:2a:0f:5f:a5:79:f9:e5:c6:
af:57:31:a2:52:27:01:f7:67:14:3c:33:15:04:9f:ea:67:2a:
97:1e:db:2b:ed:14:09:1c:02:66:80:40:43:53:40:5d:9a:fd:
03:d3:b8:f5:0b:19:2a:e6:cc:01:bf:f1:db:6d:a6:7c:77:df:
bf:ac:a6:5e:af:4b:a8:d6:82:bc:49:b3:60:6c:e7:59:72:a4:
ee:52:be:76:be:10:ed:d1:b5:59:e4:0d:be:b8:d6:74:d6:b1:
5c:6f:ef:57:db:dc:41:50:53:5e:2b:0f:48:a3:5e:70:a0:d8:
4a:c9:20:14:1d:70:48:35:22:54:4b:88:ec:59:e0:cc:28:3d:
6f:d0:81:d3:9c:52:92:cc:9c:9b:bc:57:ce:50:af:d5:5b:e6:
25:14:23:4c:ec:18:f0:fa:87:26:61:f7:ee:97:1e:48:56:df:
9b:22:73:0d:e0:d4:79:8c:20:4d:1e:85:0d:29:bc:12:02:12:
da:73:ac:3b:b7:bd:53:b3:97:35:e0:df:71:0b:2e:92:bf:c8:
51:6d:c0:25:14:1a:94:55:98:0d:99:6c:08:d3:3e:28:d0:a4:
75:a8:3a:43:4f:e9:db:ad:a9:fd:a4:04:6c:cf:c3:74:e7:f0:
7e:ce:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:48 2025 by rpki-client