Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: OhQ2zzDFEK/D2UjcbQEeareGdyiKoargbqnEgXnCXOE=
Subject key identifier: 67:F3:1A:CD:83:FA:EF:17:D6:37:51:ED:E8:D7:AF:0C:4F:71:BC:F4
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019769CE5F3A494C985DE91BDC904E949217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 14E7
Signing time: Fri 13 Jun 2025 15:00:21 +0000
Manifest this update: Fri 13 Jun 2025 15:00:21 +0000
Manifest next update: Sat 14 Jun 2025 15:00:21 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: V+GXMU8sxrjENowyOmAjT6TjiGELJcP3PLRlQdXgm9Y=)
2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:5f:3a:49:4c:98:5d:e9:1b:dc:90:4e:94:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Jun 13 15:00:21 2025 GMT
Not After : Jun 14 15:00:21 2025 GMT
Subject: CN=67f31acd83faef17d63751ede8d7af0c4f71bcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:84:e0:25:a5:bd:7c:c4:d1:a6:e6:eb:08:
e6:9e:c8:de:af:ed:79:7a:71:98:c9:53:f7:c8:e3:
e6:3f:ca:4e:22:d0:86:66:43:16:03:42:91:e8:b3:
ac:15:cc:16:46:d2:0e:c0:87:6a:24:69:4b:4e:e5:
78:38:9b:0e:c8:04:83:fd:6e:99:0a:38:3d:a2:2b:
0a:e0:33:35:d2:13:f3:e7:fd:95:87:0f:9b:49:e7:
04:a8:98:45:9a:73:34:d4:ac:b1:37:08:55:ca:05:
ce:8a:f5:04:8c:f7:7f:cc:8e:1e:ba:48:d0:93:74:
a6:02:bc:45:1f:51:3f:28:d0:4a:d6:33:db:00:f4:
14:9d:0f:73:c4:5f:54:d0:05:25:f9:71:31:d8:2c:
e5:8f:b6:66:9c:f0:74:5f:ee:e9:fd:b9:0e:2a:71:
5d:98:64:74:74:69:13:60:af:14:2b:6b:df:01:fb:
6e:4c:f1:7b:ab:f6:c4:dc:0e:70:fc:72:79:59:10:
b7:fa:6b:1f:d2:d2:43:7c:cc:7a:b4:16:d6:17:c2:
a7:46:7b:71:0f:06:b8:dd:e5:6e:a4:6f:0b:18:4f:
58:67:18:17:af:2b:e2:9a:0d:57:2f:72:5d:00:7a:
ec:a9:7e:f0:36:bf:03:1e:16:98:33:24:68:26:c7:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:1A:CD:83:FA:EF:17:D6:37:51:ED:E8:D7:AF:0C:4F:71:BC:F4
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:71:16:d0:5e:3f:c0:cf:4a:f2:8e:41:e9:d1:43:00:6a:c7:
a4:29:eb:c0:4f:b9:c4:fb:ef:5c:f2:93:b0:91:d6:58:31:69:
67:4b:ff:89:e5:9d:14:22:a0:47:70:89:45:11:18:39:fb:84:
90:d2:50:cd:13:c5:21:a9:14:53:cd:0b:58:71:8a:98:db:a7:
d6:b1:d7:b0:52:7f:67:d5:24:a6:41:1a:20:06:11:34:35:fc:
de:c1:2d:88:17:c1:54:ea:67:ee:7f:26:73:97:dd:4d:80:a4:
8b:14:a8:a1:86:52:43:db:79:59:aa:a9:30:42:ce:fe:63:5e:
2e:15:76:d6:7c:2e:a0:54:83:2d:21:ea:9c:c4:61:b7:f4:b2:
f8:43:5c:78:42:bf:0b:68:d1:08:fe:54:50:08:9f:c7:4a:37:
ae:2c:c6:d3:13:ec:71:31:60:4b:3c:e9:89:0a:32:97:01:04:
dd:46:19:5b:ed:1b:67:b1:1a:6c:eb:c9:03:d6:0d:b1:98:80:
14:b2:9d:80:dd:a2:88:d3:c5:b3:fa:39:3b:66:f3:2f:0c:55:
1f:e3:e9:a9:57:6c:d8:c6:6e:c1:42:9f:76:96:76:c5:c1:e8:
de:3a:b6:4f:0a:07:bd:b4:9a:d5:75:aa:e0:02:c5:16:be:5f:
67:e6:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:41 2025 by rpki-client