Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: /VIdcymQ0FZ8/S0grwNnRAImezzlNCGRhx4ANS1Gct8=
Subject key identifier: 9D:86:5C:10:A8:68:FF:C6:3C:44:5F:1A:D8:44:9B:F6:6A:BD:F6:03
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 0197B6A1D5EAE9EB36BB87C3986B65FBACF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 1091
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: LUVCUr0ePuh21nceFNITcK42a3NQa0CDt+rrHHt4AOo=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d5:ea:e9:eb:36:bb:87:c3:98:6b:65:fb:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=9d865c10a868ffc63c445f1ad8449bf66abdf603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:93:6f:13:02:47:b9:f0:7d:b1:80:8e:c6:
9f:1e:69:4e:5c:47:71:fe:db:78:f2:53:a0:e9:8c:
c7:23:82:fe:09:fa:40:27:49:34:8a:c5:dc:18:9f:
48:4f:62:ca:af:ce:81:e4:af:63:24:07:06:e7:87:
79:8a:55:bb:eb:b6:a7:da:29:09:33:d3:84:08:48:
fa:46:64:2f:00:02:21:21:f4:79:b9:31:77:3c:ab:
a3:f0:89:ec:5c:0d:22:03:74:4f:a9:e3:84:ba:a7:
86:8b:13:d1:7f:ca:a3:0a:bd:93:2a:0c:ce:6e:1c:
56:67:af:7c:bc:4a:63:7d:69:94:81:38:ab:2a:b0:
c0:ca:c6:14:78:16:45:8f:45:47:88:8f:ed:fa:ea:
7a:80:e1:4e:12:74:40:c2:45:d2:8c:c8:11:53:9d:
d3:1f:6a:1b:88:80:fc:77:e5:b3:cb:eb:a4:aa:49:
0e:b4:f3:e9:d9:51:a7:bc:76:86:7e:a0:46:4a:e1:
1f:e3:5f:a9:5c:cb:38:43:69:76:86:4b:8d:df:52:
22:56:38:da:e6:a8:39:33:da:f9:8e:1f:9e:18:ca:
93:99:45:b1:b5:6b:99:18:c2:ab:21:86:af:86:95:
ab:33:d8:fa:9e:78:40:f2:5e:5d:e2:9b:e4:ea:85:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:5C:10:A8:68:FF:C6:3C:44:5F:1A:D8:44:9B:F6:6A:BD:F6:03
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3e:8e:48:96:c1:b8:92:88:29:3e:28:3d:8b:aa:f5:70:c8:
9b:91:83:10:a1:66:fd:8f:4b:ee:65:61:41:36:a8:57:1d:68:
24:75:1f:af:2e:69:2f:40:09:54:42:64:8d:f7:d9:d6:d0:1b:
82:0a:58:13:73:d5:ce:11:e3:1e:e9:c1:0f:ac:c5:b8:e8:cb:
37:ae:31:ae:97:2d:7a:6a:fe:d9:12:04:69:f9:8a:fb:67:06:
2c:37:31:fa:05:2a:3b:16:3c:72:38:45:24:d6:7b:ab:ab:03:
2b:7c:f0:3d:d3:8d:e8:ee:f1:ae:92:68:aa:69:2b:29:c2:b9:
34:44:99:c6:da:db:89:f3:b1:3f:bc:5a:5e:77:28:47:a1:86:
5b:1c:d6:e4:0b:c6:3d:33:4e:23:0e:40:54:1a:8c:0d:91:fa:
51:20:50:98:8b:fe:37:00:fc:40:e5:84:e1:00:58:85:f9:c7:
ed:cd:68:8a:37:13:3e:12:7e:7c:b1:4d:95:23:6e:66:ee:29:
bf:dd:d3:50:28:af:68:0d:df:6a:a2:ef:98:e1:f0:28:70:3a:
3a:d7:1b:ec:f3:8e:90:74:90:17:78:2f:05:2b:d8:4f:d7:b8:
28:e8:11:71:9d:db:87:46:5c:8c:5b:87:14:e7:1c:d0:ba:0c:
29:4d:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:37 2025 by rpki-client