Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: Zzldt3Kthq1hnbv28Ob28bpnZobQq9QezK5dh+/5bws=
Subject key identifier: 4A:E2:25:43:E0:E6:08:B5:84:05:57:6D:B4:B3:A1:B8:71:61:96:47
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019768F2AD78E482BA35AA5B165E2AFDCEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0CD3
Signing time: Fri 13 Jun 2025 11:00:23 +0000
Manifest this update: Fri 13 Jun 2025 11:00:23 +0000
Manifest next update: Sat 14 Jun 2025 11:00:23 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: C901j52epA3npp7RCrk3ZTUpgmYPNNzrCZ5BbjsxOS8=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ad:78:e4:82:ba:35:aa:5b:16:5e:2a:fd:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jun 13 11:00:23 2025 GMT
Not After : Jun 14 11:00:23 2025 GMT
Subject: CN=4ae22543e0e608b58405576db4b3a1b871619647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:da:a7:c8:2b:0e:49:c3:d5:02:dd:84:0d:
44:97:c8:03:13:e2:d2:be:26:84:3d:d3:20:f1:c1:
49:a4:f8:69:66:2a:94:a1:99:be:33:cf:a1:04:59:
57:ca:5d:a9:74:66:80:3a:c0:c8:b6:97:5f:e2:9e:
d7:78:9e:16:60:8c:31:04:ba:58:34:2e:c3:ab:54:
21:36:bf:6b:e5:5e:9a:a5:2d:15:9a:1c:81:6e:19:
c1:8b:90:13:98:96:36:ef:7f:59:9a:95:ed:95:fb:
b0:eb:e4:99:7a:c2:34:9e:4f:8b:61:51:6f:0e:dd:
2c:0d:d3:a4:3a:f1:b2:99:73:c9:df:79:b1:dd:8f:
45:8e:df:52:73:e4:eb:65:21:62:7d:4a:9d:0b:54:
42:69:8a:b2:ea:a3:d7:e2:6d:dc:cd:bc:43:ad:9d:
75:43:87:75:47:4a:29:21:78:30:74:e4:90:de:73:
1d:c8:d0:a0:2b:72:67:22:4d:b5:a2:11:4a:1c:a3:
06:b0:24:02:73:ee:27:9e:54:8f:7d:24:15:9b:63:
72:8f:67:e7:15:67:4b:72:94:44:9f:be:ca:80:7b:
5d:11:56:41:51:ae:fa:27:34:12:92:a5:80:ea:36:
48:1b:28:61:18:c9:c7:9d:a2:94:16:1f:75:ab:58:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:25:43:E0:E6:08:B5:84:05:57:6D:B4:B3:A1:B8:71:61:96:47
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c4:86:94:c8:00:a0:ae:2d:07:a8:e7:ea:92:dc:0b:a2:0a:
ed:98:b0:90:e5:6b:0e:a6:71:5a:db:44:58:39:6c:4a:0c:6d:
3c:8b:79:c7:c0:3a:7a:8e:e6:bb:da:f2:6a:d4:69:1c:3f:2d:
28:0c:cf:90:a8:a3:3d:06:71:f6:96:54:61:f2:f7:f8:92:e0:
cb:f5:2a:cb:2c:9c:f9:94:79:35:1b:dc:2e:65:e6:c3:ae:7d:
16:bf:83:a8:e9:bf:5c:6c:c8:8d:a8:f6:15:e1:7f:d1:8f:81:
10:8e:5c:ac:91:31:81:46:d0:17:7c:63:46:5c:3a:d2:1d:98:
81:ed:92:82:7b:95:07:bf:0f:10:0d:27:6c:b7:d7:f5:cd:84:
96:cf:15:84:aa:8b:dc:b7:df:67:84:51:f3:1d:88:94:24:53:
6d:32:fc:10:00:dd:51:3a:f0:24:f1:c7:44:bd:80:f1:a5:4c:
6c:58:81:83:8c:1a:ed:46:9b:47:3b:c8:93:fa:75:b1:b7:d8:
1f:39:90:29:4c:ce:42:04:26:e0:00:f9:c4:be:cc:a9:f2:bc:
2c:30:73:c5:f7:ba:ed:5d:02:60:a0:b7:9b:7a:da:93:7e:93:
8d:94:f0:38:16:d2:0d:9c:8e:ae:05:1e:c2:a3:00:fa:43:71:
80:ae:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:23 2025 by rpki-client