Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: 1blqcbouBYReyqnZJuqcjlBlWNoI+HaNq0jRarBIX4Q=
Subject key identifier: 4F:B6:06:59:73:32:ED:36:68:7B:CB:1D:66:A1:C6:11:F9:3E:0D:16
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0197B6D733C46E44CCA60E16F978B811A123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 101A
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: 6sjpfNSP6CLRawWCf0q9JSzQ3eO7yuJPM9m4HGUOE/g=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:33:c4:6e:44:cc:a6:0e:16:f9:78:b8:11:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=4fb606597332ed36687bcb1d66a1c611f93e0d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:d6:6c:78:29:dd:2a:2d:6a:83:fa:96:91:
25:f7:4e:cc:e0:5a:89:43:00:96:c0:a5:3e:e3:7d:
ae:6c:dd:76:d4:4d:6c:36:35:05:b1:68:4c:c9:ba:
b9:b9:c8:79:51:53:4b:9b:75:9c:11:03:13:f6:3e:
10:ef:18:68:15:b5:3b:2b:5a:60:81:a2:6f:32:d4:
22:80:e2:f3:c1:32:97:cb:40:95:12:bc:e5:89:c4:
5d:86:f6:56:5b:e1:02:4c:98:25:58:f6:0e:aa:6a:
df:ec:e3:bd:7d:bf:21:54:27:01:1b:82:c3:cc:2e:
93:e0:3b:ff:65:40:ee:f4:5f:a6:0f:ce:64:0a:98:
04:04:d5:ab:89:9c:8f:82:11:e8:9a:f5:50:54:db:
ae:9b:a1:59:80:fd:f2:ad:56:98:41:1a:0a:83:dd:
21:f2:05:22:e7:71:f9:b4:ce:24:0b:f0:39:6b:7d:
b4:84:7c:69:bb:13:5b:64:c0:1e:32:a4:23:0b:9f:
aa:ad:d1:88:e2:60:d7:05:d0:be:d7:e6:52:30:b1:
b9:e4:53:5d:66:de:6c:83:be:70:43:b9:66:b7:49:
a0:97:43:f9:88:1d:8d:2b:cb:a1:0a:d8:b2:af:ff:
74:41:94:14:7f:dd:a6:67:f4:74:7d:58:52:c5:ce:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B6:06:59:73:32:ED:36:68:7B:CB:1D:66:A1:C6:11:F9:3E:0D:16
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:a5:ef:44:34:e2:dc:33:a7:68:d4:3c:a3:ff:8d:43:7b:
de:d3:4e:ab:1b:f2:b5:17:97:35:af:63:27:44:05:ef:1c:4f:
6c:bb:ad:bf:26:7d:6f:47:e6:99:c6:7f:e6:3d:58:c1:8e:00:
96:55:c6:a1:e4:a1:45:c5:14:8e:c4:f9:c8:61:2d:d4:48:ac:
80:20:42:09:64:d9:01:5f:58:67:b6:4e:62:4b:88:19:cf:8c:
bb:39:17:bc:f0:ee:d7:34:4c:de:6c:ef:01:86:9c:0a:ff:ed:
1b:06:f4:2b:08:87:64:23:9c:02:84:df:73:7c:91:da:5d:fd:
0c:13:ad:07:c4:b4:36:3a:60:03:58:52:5b:28:a2:aa:aa:dc:
fb:54:1a:36:2a:40:14:e6:ba:96:ae:43:81:65:ca:69:b2:c0:
47:ea:30:3c:80:95:81:bc:78:e5:3d:e7:44:7a:06:84:17:a6:
c1:b3:35:1a:ce:43:f1:16:56:fa:3f:62:e8:f7:22:8c:89:7f:
0a:84:c3:35:cd:16:1e:86:ca:32:d3:ee:f4:1f:41:d3:19:f7:
6b:2d:d6:3b:e8:f4:ff:59:b9:f0:ad:bd:e6:c6:66:64:74:37:
53:d5:cf:90:b1:6d:ae:68:c9:8a:73:4b:2e:ac:1b:fc:07:1f:
1d:c0:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:55 2025 by rpki-client