Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: RGzRSYb+jFWOIDVsq4SGIj0v038wIr2BdzUbS6azum4=
Subject key identifier: 1D:D9:7C:1C:A5:6A:B7:CF:CE:3F:0F:64:28:BD:22:76:1D:6D:71:96
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0197CB3A091BEB9C2956C441A055C0B8A0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 13:01:07 +0000
Manifest this update: Wed 02 Jul 2025 13:01:07 +0000
Manifest next update: Thu 03 Jul 2025 13:01:07 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: wUp/YbK8vaTsIiuwhFtJySaoZhFpTtPtRdCn91jStXo=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:09:1b:eb:9c:29:56:c4:41:a0:55:c0:b8:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jul 2 13:01:07 2025 GMT
Not After : Jul 3 13:01:07 2025 GMT
Subject: CN=1dd97c1ca56ab7cfce3f0f6428bd22761d6d7196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:76:78:6d:80:64:f0:48:b8:b7:3c:bf:8e:92:
5c:7d:c3:ed:76:98:ef:89:58:ef:8c:2e:b3:70:88:
0c:1d:5a:5d:a4:b2:b9:13:dc:6a:8f:9b:82:00:17:
f5:a3:5e:b3:4b:14:5d:b8:25:e3:56:6c:e7:94:84:
dc:2a:5d:bf:06:fd:77:61:43:e4:82:d3:c0:4b:6d:
4d:44:5f:14:95:83:d2:7d:3e:3b:b7:ac:7f:e0:a2:
d1:59:82:40:4a:b5:9f:cc:ef:ee:0f:2a:b5:79:7c:
c0:a8:b8:51:c7:5b:f6:44:b5:3a:a4:7c:0a:60:78:
58:cf:18:31:cc:b2:6a:5d:91:67:f0:8a:cc:e5:6f:
72:c8:56:71:55:05:ee:76:09:ad:ac:db:f8:b1:ab:
36:a1:04:d2:85:0a:5a:b6:c6:8a:82:ab:dc:ba:f6:
26:ec:ab:84:1d:7e:3b:ee:e4:e3:20:19:ec:f8:08:
62:1c:d7:66:73:52:8e:f2:42:b8:f6:3e:40:cc:69:
12:1f:c1:3d:37:db:8c:7f:fd:fc:45:c1:fa:f3:7d:
9a:30:af:6b:d5:dd:9d:b0:bf:d0:f7:c8:71:34:8d:
47:a7:41:92:8a:db:ce:08:c0:33:56:5a:d8:7a:dc:
6f:fa:42:6a:3e:e8:81:70:68:cd:86:f4:cc:fe:f5:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:7C:1C:A5:6A:B7:CF:CE:3F:0F:64:28:BD:22:76:1D:6D:71:96
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:f9:9b:a4:4d:32:38:91:72:43:e5:cd:10:e1:1c:0c:82:
70:ab:3a:01:54:6c:19:b9:bc:5b:e1:29:3a:e2:33:34:8e:0b:
3c:fc:05:71:bc:31:af:80:01:d2:88:43:0e:4a:73:08:d4:3c:
2f:d4:b2:94:19:bb:cb:90:31:03:8e:c0:30:81:4c:ee:08:7e:
f8:cc:3a:ee:52:bc:ba:6f:45:ee:3d:ec:b0:29:1c:69:8d:38:
38:5b:ce:02:be:92:22:79:a3:73:75:68:65:f7:f7:87:c4:15:
4e:23:0c:8c:79:85:e7:7b:21:f9:8c:17:34:88:7d:22:81:5d:
43:d5:e3:54:4e:3b:c0:26:88:1a:16:47:24:6f:ba:12:ca:61:
77:97:4a:2d:d3:14:d7:32:02:19:a0:7b:50:85:a4:4e:96:47:
11:78:b6:4c:3e:72:c4:4c:85:a8:59:12:1f:14:c5:ca:16:3c:
4e:5d:af:8c:1b:82:34:df:e6:f0:86:1e:06:1a:63:c6:e0:4c:
84:47:3e:c6:93:12:c4:d1:09:11:e0:3b:70:59:8c:bf:ca:09:
b5:3e:98:69:62:1c:14:dc:8a:85:fb:5a:fc:93:5a:92:9b:dd:
38:96:0a:64:9e:e7:8f:d0:8f:ea:84:33:19:7d:c0:a6:32:3f:
e9:06:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:19:27 2025 by rpki-client