Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: nmogFn45yljzuHqRlkQwXSeMJRCEcJttBwPqRtrxV3E=
Subject key identifier: 19:97:FC:0A:D0:51:42:A1:22:75:DF:7D:F1:31:58:DD:47:1B:E7:B6
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0197711A775EFBB2B7FC437BE94E162D6357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 07CD
Signing time: Sun 15 Jun 2025 01:00:49 +0000
Manifest this update: Sun 15 Jun 2025 01:00:49 +0000
Manifest next update: Mon 16 Jun 2025 01:00:49 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: fMTDSuAzkRzeTNrESWwNdlcBooTTT/j9pIeQhqPuLT0=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:77:5e:fb:b2:b7:fc:43:7b:e9:4e:16:2d:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jun 15 01:00:49 2025 GMT
Not After : Jun 16 01:00:49 2025 GMT
Subject: CN=1997fc0ad05142a12275df7df13158dd471be7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:35:5e:73:0e:10:d3:c7:66:17:6b:ff:9a:
65:71:19:36:6f:6b:4b:4e:73:44:8c:07:9f:3a:52:
b0:10:d1:78:18:93:cc:f1:bf:4c:10:34:97:47:4f:
1e:7c:f7:f4:33:6b:a5:36:9e:fd:d9:7d:f1:e8:83:
e6:62:1a:03:c3:91:4b:99:b4:b0:3d:83:a8:2c:f7:
1c:66:6b:fd:c5:56:55:de:0c:be:19:54:5d:4f:46:
f6:ae:d6:b1:c9:34:f7:10:bd:03:be:c3:8a:f6:0e:
25:2d:b2:ac:85:2f:36:62:b0:5c:e7:6e:a5:54:6b:
e4:20:19:03:a1:76:f4:fe:80:cb:8a:ff:cb:e9:39:
98:8f:c6:e3:89:91:82:cb:cd:c4:a9:a9:ea:4c:27:
46:11:27:8a:e9:92:5c:43:57:a1:a0:5b:65:78:42:
a9:70:45:c2:c0:5f:eb:b7:ae:19:25:80:1d:b1:16:
46:40:b8:04:f4:2c:3c:cb:43:3e:76:ee:e8:9b:b3:
28:03:2f:bd:a8:90:da:a5:3b:5e:ed:09:48:9f:01:
4c:79:66:22:a2:41:82:ba:e4:59:7c:c2:14:2c:f4:
56:bf:76:f8:f4:4b:c3:21:2b:ea:78:33:ae:81:e2:
74:a5:3a:37:60:4f:8f:08:0a:e7:21:69:78:b9:b8:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:FC:0A:D0:51:42:A1:22:75:DF:7D:F1:31:58:DD:47:1B:E7:B6
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c9:e1:a1:14:30:4d:15:45:b3:34:5c:e1:e9:b1:a7:a6:ac:
1b:a5:18:fe:ff:77:d6:89:67:cd:c2:74:05:58:5b:52:dd:b6:
5f:a4:5c:25:37:a7:b1:bc:1a:ce:98:41:e2:b9:e8:ed:5a:15:
81:18:c3:ac:5d:b7:c8:81:c6:6f:14:af:82:d2:ba:58:a2:e6:
6a:5d:22:bf:15:4f:dc:b5:80:4e:91:fe:1b:89:2b:5b:8e:72:
db:69:cb:39:aa:df:27:b4:c6:61:a4:07:3d:1b:53:c3:5b:b9:
d2:4c:21:a8:22:b6:36:e7:b1:43:a4:bf:eb:c0:2d:68:cb:dc:
6e:b8:a7:79:2b:69:1e:ed:53:6d:0c:9f:86:c4:d0:19:b1:ef:
bd:0b:71:a4:b8:10:54:5d:3c:86:6f:1f:8f:1f:07:1e:2b:1f:
03:d9:03:d1:a0:d0:00:f1:58:bd:1c:28:66:f4:0e:2b:3b:a5:
91:58:83:1f:fa:45:5c:0e:27:1e:d3:90:3b:df:ff:42:f4:d0:
16:93:6f:61:bc:e8:d4:5a:48:4a:52:78:5b:98:3b:c8:8f:b4:
4b:c2:9f:e9:dd:b6:ac:75:54:68:6a:af:31:f3:ce:4e:ea:9f:
f0:1f:1e:a4:02:ef:02:d2:e5:bf:cb:c3:33:04:9a:33:50:0b:
03:6a:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:47 2025 by rpki-client