Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: HCUOP8OGV4iYx3C5dGRmjTbkfq6L921Ln/O2/c+gAws=
Subject key identifier: EE:86:07:CE:5F:02:BD:4D:A8:01:93:BA:6A:AB:6A:10:4D:9C:D2:DD
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 0197B6A17FF11D7B60AD249D922B7FDAB099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 1389
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: OZltqBHpFKeU8l75CBPviVhzThAfQ5mZGb0IsqvE5i8=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7f:f1:1d:7b:60:ad:24:9d:92:2b:7f:da:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=ee8607ce5f02bd4da80193ba6aab6a104d9cd2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:df:7d:b1:50:14:93:c8:8a:41:74:88:c6:
8d:3a:cd:91:2a:55:e2:07:eb:33:c8:28:b0:87:0d:
85:72:3d:0e:74:3e:be:55:28:24:f7:04:0d:bb:3e:
0c:71:92:5f:ed:86:bd:1c:24:e9:e8:ae:aa:b9:dc:
f2:a2:74:68:6c:06:d0:af:55:7e:6a:e9:75:8f:40:
be:4b:ef:94:b3:fd:b9:bb:15:6f:2e:95:15:8d:54:
9f:d4:b3:b4:b9:0d:1a:29:e5:cc:cd:9b:c3:5f:b7:
53:6b:50:65:6d:91:6f:9d:67:86:50:f0:cb:ba:bc:
c8:de:53:bb:40:98:88:5e:03:91:c3:30:5a:d8:3c:
2d:de:21:a4:c6:2b:7a:dc:a0:f7:54:7f:6d:fc:8b:
c7:f8:e9:d4:0f:09:fa:c6:13:8d:55:9e:81:55:79:
29:4b:95:23:96:cd:0a:1f:7e:bb:ec:98:09:87:f3:
b4:f9:39:70:95:10:b5:06:a3:67:fb:17:1f:87:07:
d6:7c:6b:3a:3b:57:f9:6c:85:a7:e5:d7:54:38:bb:
c6:47:0e:ca:3c:af:d8:26:b7:dc:98:22:53:95:ba:
89:3f:0a:a3:69:52:42:ed:1a:f7:18:02:35:37:9c:
ab:88:67:f0:86:c0:37:a9:59:61:7e:0a:90:6d:d6:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:07:CE:5F:02:BD:4D:A8:01:93:BA:6A:AB:6A:10:4D:9C:D2:DD
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b9:c1:24:f6:58:e9:39:59:2f:c2:45:a8:62:14:24:3d:5a:
3d:89:9f:6b:c5:19:22:a3:5c:25:25:db:7d:18:b2:46:44:c8:
2d:cc:4c:20:73:3a:8c:5d:46:32:a9:91:41:9b:08:58:16:3d:
f6:a7:bb:c4:79:f5:6a:cd:c7:e3:97:ad:57:9d:89:a9:e0:c3:
1e:11:ec:bb:a4:ea:d2:82:d6:fd:47:cd:0d:6b:7a:35:ce:83:
c9:02:bc:53:39:d6:72:82:3a:7e:a7:e8:ed:d7:ff:36:1a:fd:
f6:90:9c:c8:1a:8d:3e:3f:77:d3:2a:b0:e9:dd:3d:73:4a:ee:
52:5f:b1:f9:65:f0:ce:3b:35:7e:93:c2:50:1c:5a:0a:7e:fb:
d3:ef:51:1a:49:38:8b:7c:28:c7:54:ef:54:56:3b:b7:52:c4:
ac:bc:41:f5:72:e8:15:fc:25:46:0d:0a:98:81:28:e0:7c:4c:
1c:f4:f5:74:03:6d:38:b3:93:b1:55:60:4d:f4:98:4e:88:32:
3a:d4:51:f6:d9:0e:d2:bd:ce:23:68:9e:1c:dc:03:a1:05:f0:
e3:e0:50:e7:dc:70:da:61:a9:80:dc:a5:5e:31:7f:e7:da:4c:
ff:97:07:47:b2:82:0d:e1:f3:62:51:75:99:18:14:d0:8d:0e:
eb:0c:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:55 2025 by rpki-client