Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: uCMTe+nIGBTVMiU69Ef3h1PZA7KbM7U2VM+7nL56HKg=
Subject key identifier: BF:3B:60:88:53:6C:90:7F:1B:33:99:AC:5A:C3:71:26:28:C5:0F:6C
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 0197B632881D1D66E91E387AB078B1BA84E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 06C4
Signing time: Sat 28 Jun 2025 11:00:54 +0000
Manifest this update: Sat 28 Jun 2025 11:00:54 +0000
Manifest next update: Sun 29 Jun 2025 11:00:54 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: pmGNrJrlKtLs03GhOePdh/gFCxx1bBcxm1gn6e+aBWI=)
2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:88:1d:1d:66:e9:1e:38:7a:b0:78:b1:ba:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jun 28 11:00:54 2025 GMT
Not After : Jun 29 11:00:54 2025 GMT
Subject: CN=bf3b6088536c907f1b3399ac5ac3712628c50f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:eb:cb:86:16:4d:96:8f:a4:89:6a:36:ca:
36:5d:d4:c6:60:1a:f4:fd:fe:c6:b5:e8:60:f4:13:
a6:bc:da:b3:de:7c:55:a8:94:bd:2f:ea:15:66:0c:
e3:eb:19:eb:57:2e:60:60:ae:d2:61:9d:85:3a:50:
27:86:98:7b:28:29:c9:c8:53:e0:a1:6f:d0:63:3e:
14:46:80:6d:dd:45:db:5d:ae:a8:6b:0c:ac:7a:5b:
b1:1c:87:58:8c:f5:df:1c:2e:cf:7a:d7:38:e7:3f:
09:40:a3:08:24:b5:f2:99:6e:e8:af:89:1d:84:0e:
5d:74:d4:cb:d6:fc:fc:6b:99:e4:da:c1:ef:fe:a9:
35:97:c0:65:13:c7:ef:2e:c7:40:22:3a:a8:c2:5b:
5e:bb:d1:10:a7:2a:76:fe:83:12:9a:5a:6c:ea:7d:
2c:af:29:31:17:fd:97:eb:13:f8:72:67:7a:33:13:
df:94:45:33:b3:f3:c4:2e:13:06:3c:f9:15:ba:6f:
a2:9c:5e:84:d0:b2:66:f9:dd:b2:6f:e1:0d:2b:0f:
7c:54:e6:a9:df:8c:f2:75:11:19:01:1e:18:4d:0b:
34:86:23:01:0e:31:56:2d:ea:9c:61:f2:cd:b3:38:
37:bf:19:eb:4b:a6:4e:d2:95:b6:f7:83:6a:68:d0:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:60:88:53:6C:90:7F:1B:33:99:AC:5A:C3:71:26:28:C5:0F:6C
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:6c:93:39:2b:24:e0:3e:f1:63:b8:84:83:6e:56:36:d2:
d1:b8:b3:68:40:f3:98:61:6f:a6:e2:51:56:ae:12:18:10:e6:
75:e5:d2:51:fd:77:50:13:78:3e:f4:61:10:e1:e3:c5:3b:4c:
e2:c8:e4:34:80:65:f0:b4:79:81:4e:d4:35:9c:fd:09:bf:00:
ca:78:d9:2e:f3:cc:2c:6b:51:7d:94:50:71:42:8b:47:fd:54:
12:0d:32:27:f0:e0:68:42:45:be:92:1c:7d:bf:1e:a0:3b:a0:
1f:cc:41:a4:11:00:43:d8:50:79:25:6c:60:bb:43:77:3b:75:
89:45:a0:8d:8c:d9:11:f2:cb:a0:b7:99:9c:06:50:8c:07:65:
83:28:ea:4a:46:31:6a:38:8e:b5:17:bb:8f:21:25:04:19:69:
57:1d:c6:17:b0:52:83:34:77:9f:d4:49:2a:ab:9c:46:91:0b:
08:0c:69:b8:ed:ee:01:a2:ac:b5:c1:d4:19:cb:22:54:4d:47:
9e:f8:8f:25:53:11:7f:5a:64:4a:13:8c:c3:e5:8a:2a:82:62:
ac:2a:e9:01:72:e1:32:bf:7c:81:1d:9e:96:59:57:61:81:35:
92:69:20:e9:22:d7:a5:95:81:7b:a5:00:2a:88:9a:51:38:2d:
31:d9:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:47 2025 by rpki-client