Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: q82I/aLwZsGu4dDLT6562RLKqGvazA9THWf563ZC5U4=
Subject key identifier: AC:93:19:91:66:5C:FA:91:06:8D:73:77:04:A6:D1:B6:1B:52:AB:B4
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0197684DCC05A5199C2779C1EF7DACF2F5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 107D
Signing time: Fri 13 Jun 2025 08:00:18 +0000
Manifest this update: Fri 13 Jun 2025 08:00:18 +0000
Manifest next update: Sat 14 Jun 2025 08:00:18 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: W3d99DkMDVW/djywaUVPWnhTAsxvOw4d6mzU+aPli/U=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:cc:05:a5:19:9c:27:79:c1:ef:7d:ac:f2:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jun 13 08:00:18 2025 GMT
Not After : Jun 14 08:00:18 2025 GMT
Subject: CN=ac931991665cfa91068d737704a6d1b61b52abb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:d9:97:78:e3:55:7c:48:15:1f:ab:f1:14:
ba:f3:33:01:76:34:af:4c:56:d5:a6:49:fa:31:40:
ee:ed:b1:61:03:40:84:6f:1b:2c:da:5e:34:02:40:
59:05:e2:32:3b:6c:30:8a:f1:2c:6c:a4:41:2b:ed:
75:44:9b:48:39:75:9f:59:ca:96:87:f1:67:15:be:
6c:8c:74:4b:66:f9:49:94:db:1b:e2:94:e3:98:2c:
dc:c5:12:dd:f7:96:41:a3:2c:10:3f:e6:96:1a:5a:
a9:e8:94:0c:30:7c:83:d1:75:62:7e:d2:9f:6b:de:
8a:1d:08:0a:65:21:ed:94:07:7b:ca:b9:c5:37:9e:
44:fa:4a:df:1c:fc:da:1b:a9:a5:4a:de:ce:04:42:
2f:91:3f:1c:06:0e:e2:e8:1b:99:f1:59:3f:e2:cc:
62:48:7d:18:17:ff:f8:13:a9:10:86:44:56:54:46:
3e:13:cf:70:5a:30:39:95:df:a0:e3:41:ae:a8:3e:
03:db:90:1d:5c:fa:1b:28:05:88:22:07:e8:91:da:
3f:9c:ae:f2:4e:ac:25:0c:28:f6:07:fb:76:b2:c7:
a2:72:98:9e:f7:da:f4:2b:93:ea:07:d1:16:69:10:
5d:30:b7:bc:82:0d:1a:7a:6b:a1:1e:04:39:e6:75:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:93:19:91:66:5C:FA:91:06:8D:73:77:04:A6:D1:B6:1B:52:AB:B4
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:d0:e6:9a:ef:6f:ab:15:1c:e1:58:72:cb:9b:e5:71:65:
d6:ff:9c:eb:2f:29:f2:14:4a:2a:50:ca:86:08:82:3e:60:05:
f4:9a:06:84:8e:39:42:b8:75:e4:9a:32:f1:5e:52:9e:f6:0e:
e7:a6:2b:8c:7b:71:fd:d2:cc:53:9e:42:8d:03:aa:01:54:df:
e6:e3:12:e7:44:8b:dc:55:5b:b6:71:f4:1a:d8:ec:b3:44:63:
93:df:5f:b0:e2:d7:ed:26:0a:ea:af:6a:bc:0c:82:f6:65:c9:
7a:ab:13:87:90:a0:c8:f6:14:0a:f2:16:6c:a7:a9:83:48:ce:
1b:b1:68:ad:f2:75:e0:d8:85:0e:4c:38:39:2f:78:6d:4a:c9:
84:f6:6d:a7:8a:8b:33:ff:8b:5e:91:a8:d3:83:5f:26:f0:72:
3b:05:db:08:6f:0d:d4:0f:3a:47:68:af:a5:e3:0b:f9:f1:13:
17:e2:19:b4:02:56:bf:62:a2:0e:88:04:bc:a9:91:c9:87:5e:
67:ee:bd:64:4b:44:4a:9f:fd:d4:55:66:63:d4:f2:27:ca:6d:
49:78:15:b3:59:85:57:c9:80:c7:87:49:f0:af:e9:60:4b:0a:
e0:ab:3f:fd:19:b7:82:4c:8d:6b:53:16:dc:6a:a9:35:0e:e4:
7b:ec:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:58 2025 by rpki-client