Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: mR60juxzKorYRfWk7b0Y5SBbTki5wJL+7RH4F89S9F0=
Subject key identifier: 53:B3:BD:A2:33:DC:2C:BA:68:9E:0F:7C:F3:51:FB:2A:E9:2C:51:1B
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 01976B865AFDAD920732E24ED6F24B3ECEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 23:00:56 +0000
Manifest this update: Fri 13 Jun 2025 23:00:56 +0000
Manifest next update: Sat 14 Jun 2025 23:00:56 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: sVMbiQyDzfrK04RCXYYm7Cg9BOOlTKR4Sswnpe4rYI0=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:5a:fd:ad:92:07:32:e2:4e:d6:f2:4b:3e:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Jun 13 23:00:56 2025 GMT
Not After : Jun 14 23:00:56 2025 GMT
Subject: CN=53b3bda233dc2cba689e0f7cf351fb2ae92c511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:ae:8e:54:cb:74:14:e7:29:61:b3:6e:80:
6b:29:11:c6:67:a3:84:dd:6b:72:24:ff:f3:df:7a:
56:19:44:be:74:5a:12:81:a2:e2:16:5e:e0:87:51:
44:f5:f6:ab:0d:0a:e1:b7:64:41:f8:ab:9e:ef:34:
66:bd:8f:dd:d9:56:20:7c:0c:74:9b:12:c9:97:24:
8d:a7:33:fe:7c:00:ff:92:7a:e7:5b:7d:db:74:d3:
84:b9:6c:28:6c:5e:37:b2:87:7c:4c:2b:98:39:21:
b4:75:ba:bf:f4:0a:5a:0c:82:8c:a5:6b:00:98:25:
02:c6:67:17:fb:89:72:d5:2f:65:d3:f7:b0:2b:69:
45:37:55:a1:06:1a:bd:a4:f4:5f:9b:e5:24:64:ce:
88:f3:b9:70:f5:6e:09:64:f6:00:98:2d:72:53:4e:
c0:43:46:64:11:e2:d1:83:50:59:71:b9:4a:35:63:
1d:51:d3:bb:89:14:03:0c:46:85:22:cb:fc:82:6a:
b9:e4:60:14:18:ae:c4:ea:4b:23:07:ee:42:93:fd:
d3:76:c1:de:38:b7:b7:3a:49:7d:43:7e:98:dc:1d:
88:57:d9:c2:78:25:63:78:29:1f:a7:5f:e9:2c:1e:
9d:75:6e:ce:d0:04:81:b5:7a:c0:20:b1:bd:a6:9f:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:BD:A2:33:DC:2C:BA:68:9E:0F:7C:F3:51:FB:2A:E9:2C:51:1B
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:52:72:4b:98:03:3d:68:6d:80:44:ee:0c:c9:29:22:4a:
4b:67:f0:27:42:86:96:d5:00:bc:5f:0c:7a:86:5c:12:af:79:
e5:9b:0d:a6:05:f0:7e:aa:cb:43:bd:6f:6c:b0:b2:5a:1b:ec:
67:68:e4:63:0b:91:22:9e:22:a6:56:cb:4d:10:f3:ac:f8:1c:
35:12:94:55:a2:c4:5a:44:ed:52:46:ee:01:6b:81:e0:de:a4:
7c:b1:4f:72:c6:85:2a:88:4c:81:4a:54:dc:89:fe:71:31:42:
d3:02:bf:ad:da:60:35:cf:a6:ff:79:ce:08:92:06:3a:ea:7b:
0e:3d:21:fa:7b:36:b8:2b:c8:aa:22:5a:41:ee:3e:4e:61:4e:
37:94:36:55:2d:90:8f:7c:91:ca:3b:36:f3:7d:5a:99:ce:46:
f1:9d:21:f7:ce:a0:67:37:d7:af:d6:83:68:d6:cb:a6:90:a0:
1d:ea:c1:5b:82:eb:e5:b6:e2:5f:19:22:5a:03:e9:9a:45:42:
d0:e6:b1:2b:8b:31:44:2d:22:99:fa:fc:0b:ab:f7:53:fd:43:
a6:c6:6b:d4:32:26:9a:30:1d:90:67:ec:93:a7:37:ab:04:25:
2a:49:54:4f:93:e1:29:b1:d6:c6:0c:a8:0f:94:01:33:89:b4:
d8:0a:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:58 2025 by rpki-client