Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: vGq49WpTVXhT/RQLvZ9YQdCZEb99amgK9YrG0ks/1sk=
Subject key identifier: 1B:B8:4D:70:97:62:92:CD:12:EE:40:A5:4D:31:5B:8A:97:2D:65:17
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 01976C61EBA6DB6508B0CCF17F844395EEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 028E
Signing time: Sat 14 Jun 2025 03:00:45 +0000
Manifest this update: Sat 14 Jun 2025 03:00:45 +0000
Manifest next update: Sun 15 Jun 2025 03:00:45 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: E3iFbv2vx6+G0i6VzMxHconnFD9+/AuviBtrjQ+ycyA=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:eb:a6:db:65:08:b0:cc:f1:7f:84:43:95:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Jun 14 03:00:45 2025 GMT
Not After : Jun 15 03:00:45 2025 GMT
Subject: CN=1bb84d70976292cd12ee40a54d315b8a972d6517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:47:88:5a:01:11:40:2f:c7:71:76:50:21:
57:d3:0b:7d:b0:02:dd:4f:7f:2e:25:a8:8c:a1:4e:
9d:f0:45:4a:89:28:0b:87:69:2d:f5:80:67:cb:d5:
88:3d:7b:62:46:4f:ae:77:0e:6b:4a:2a:89:2b:9f:
3a:0f:93:b9:9c:0d:55:37:ce:17:09:ae:f4:48:43:
d3:71:75:4c:25:af:ef:a2:6e:2c:36:e7:16:0d:06:
c3:2d:2d:e2:5a:8a:ff:e3:6b:76:b6:94:fb:ed:76:
e4:4c:68:81:c1:c5:6d:08:df:57:31:db:24:6f:49:
6b:20:7f:5c:67:bd:f2:14:64:2c:36:56:4f:a8:b7:
25:99:39:f9:eb:fd:aa:d1:5e:c9:9f:e8:a3:94:c3:
98:3b:96:e4:0d:54:49:60:35:e4:72:2f:f5:c3:48:
5d:23:2f:10:01:06:93:82:74:35:95:55:6c:9d:50:
36:53:8d:c6:cb:f3:63:6e:4c:42:90:5b:3d:94:e9:
1a:37:67:a8:1f:e3:ba:33:28:c5:46:ed:8d:e6:2d:
bc:a7:4b:e8:7b:0e:b7:57:b8:ce:b5:fd:c0:bb:a1:
52:40:0a:2f:75:c7:f9:47:f5:d7:ec:20:bd:ca:01:
df:4f:72:46:17:39:41:6f:33:7a:2b:37:11:65:d1:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:4D:70:97:62:92:CD:12:EE:40:A5:4D:31:5B:8A:97:2D:65:17
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:79:74:85:7c:da:61:65:86:89:45:66:23:e5:cf:55:61:06:
c1:06:79:94:2c:cf:d2:a9:e5:51:5b:69:56:1d:92:af:b8:42:
b4:a7:fa:5c:61:57:01:b5:bf:03:c1:92:fc:4e:f5:d4:2f:49:
39:34:de:02:05:95:46:96:11:29:e5:62:d2:bf:69:b7:f6:60:
d1:74:82:42:e0:d9:0a:80:a4:5f:0b:4b:43:0f:53:07:ed:83:
ca:10:90:09:62:57:8c:9b:9c:be:e2:73:09:01:d3:58:a5:d2:
4d:c4:eb:40:f3:84:f6:87:0d:d5:a6:6c:6a:dc:a6:97:64:73:
5e:00:56:e2:e8:61:4c:ea:ad:4f:fd:b9:18:0d:d8:ea:f9:2a:
c9:7c:54:60:dc:50:98:29:70:1d:1c:a4:4c:47:81:4b:8f:73:
a6:10:c7:fb:08:be:07:b9:2f:dd:fc:27:f7:a1:3f:db:98:fc:
03:8f:54:54:0b:7b:6b:3b:42:93:31:42:09:b1:39:84:ea:da:
59:5a:f3:8b:ce:e3:d6:f8:a9:fa:73:2f:a8:89:13:1b:c0:d0:
f4:19:41:21:ad:e1:a6:42:bb:e6:23:0d:5b:b0:01:35:67:35:
b7:e5:03:98:ba:c7:e9:ae:46:5f:c9:cc:c9:0e:36:b3:28:72:
db:bc:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:02 2025 by rpki-client