Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 6wNSIRM5DE+hHpmk5lwHDK9TrRn6V62XpG4nLdND3Us=
Subject key identifier: 73:3A:A3:14:8F:03:BD:9F:6C:0A:09:27:15:80:00:AD:56:6D:5E:1B
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 01976F2C89AAEC3B95706821EA1B0DCD45B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 04C5
Signing time: Sat 14 Jun 2025 16:01:19 +0000
Manifest this update: Sat 14 Jun 2025 16:01:19 +0000
Manifest next update: Sun 15 Jun 2025 16:01:19 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: 7XBvjATA6nCjMJGGXPUYitSD1LXOF7hH7lZ73nqxLq4=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:89:aa:ec:3b:95:70:68:21:ea:1b:0d:cd:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Jun 14 16:01:19 2025 GMT
Not After : Jun 15 16:01:19 2025 GMT
Subject: CN=733aa3148f03bd9f6c0a0927158000ad566d5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:48:ed:67:42:a3:77:a9:44:29:63:51:e0:
43:e4:c1:a6:75:18:ab:53:93:34:c3:4e:95:37:c2:
1f:3e:4a:d4:40:a0:1c:72:50:34:37:73:be:66:94:
6c:0c:1b:14:34:d3:e8:af:60:d4:ad:aa:83:5a:74:
9f:6e:43:4d:bf:71:4c:87:8f:8c:c2:2b:72:cc:81:
3f:8a:38:51:2d:73:e1:46:b4:38:18:26:15:e9:bf:
78:b3:f2:b7:0e:a2:1a:b0:64:c3:9c:43:9e:4c:6b:
69:bc:44:df:8f:8c:93:79:3f:9f:e1:0f:d1:ec:86:
fe:12:24:27:49:81:f4:6a:f1:d3:13:fe:bc:51:72:
c7:c5:33:ec:81:19:b0:58:f3:1a:3f:2b:59:5a:fe:
c8:5b:40:87:60:69:19:8d:35:93:cc:6e:ef:c4:30:
03:43:52:59:82:34:91:4c:b2:a6:d9:0f:1f:22:20:
51:62:56:21:30:7d:bd:8e:04:15:af:32:74:1f:3f:
d4:2b:63:dd:12:70:c6:c3:35:2e:14:d8:66:b1:31:
cb:33:a5:4e:79:c1:00:14:03:0c:fd:f8:f3:52:d6:
a2:22:7c:5e:d5:5d:11:ef:16:08:a4:56:1b:d3:8f:
7a:1d:b1:42:67:86:9d:92:98:13:34:76:3b:d8:84:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:A3:14:8F:03:BD:9F:6C:0A:09:27:15:80:00:AD:56:6D:5E:1B
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3f:48:17:ca:a9:7a:3e:d0:e1:b6:bc:fe:2b:bd:5f:b1:2d:
21:cd:1b:d0:42:c1:cc:3d:12:7c:6d:1c:24:a5:3e:9a:f8:0c:
e6:1c:04:04:9b:55:24:ce:d8:88:57:e5:17:19:1b:0f:c3:8b:
5d:b3:54:ef:69:81:3f:ea:12:85:d3:0d:b8:29:6c:40:81:5c:
dc:0f:3e:ba:91:f3:fb:30:67:02:fd:3f:6c:45:92:d4:5a:7c:
43:39:da:9e:4a:73:05:04:ca:d3:39:37:dc:19:18:dd:d8:5b:
48:8a:5a:cf:d0:10:3f:d3:b2:83:59:77:5d:8b:02:73:2b:55:
17:8b:30:f7:e6:19:7a:32:90:cb:4b:86:27:e1:bb:a0:2b:bf:
fa:9d:84:2a:e2:62:1f:e8:22:e2:9e:54:fb:34:8e:3e:3e:22:
76:ae:0b:95:b2:c5:60:cf:95:a7:92:a3:90:6f:68:a1:e5:60:
d6:ab:e1:32:a2:37:dc:25:63:94:44:ea:aa:ae:17:b2:b4:82:
1d:82:55:fd:bd:42:ba:44:32:95:21:b3:73:4d:a6:09:8d:b5:
c3:cb:d3:da:c9:11:d3:5b:8d:2d:4d:90:50:df:84:4f:3f:41:
bc:3e:4e:a7:91:65:d2:14:1e:07:90:2f:72:04:d5:f1:52:91:
59:4f:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:36 2025 by rpki-client