Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: asZc2WUlCCabCIRA7JgSm5xM4rUyJmozRhVCDqFD3E4=
Subject key identifier: E2:A0:58:D9:26:CA:9C:DC:42:2C:8F:AE:59:71:53:EA:2C:46:EC:F7
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 0197B7EA92DE4011F5307F317B5F4BF78EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 13DA
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: Uo5Y2ATsLp8+UR2bmxxX4Mjq/2AELMDvsvi7ciF4F9U=)
2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:de:40:11:f5:30:7f:31:7b:5f:4b:f7:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=e2a058d926ca9cdc422c8fae597153ea2c46ecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:fb:ca:cc:d6:11:a1:79:92:bb:ec:28:fb:
cd:2f:5a:62:57:94:49:c9:b5:b4:77:99:a1:72:72:
86:1d:2d:01:6d:41:31:22:36:cd:c1:58:fa:6f:6c:
f8:69:f7:8d:d3:b0:3a:38:65:ce:9a:db:84:95:5f:
36:a0:71:9d:41:36:65:9d:ce:31:5b:9d:ae:29:85:
55:1d:bf:65:1d:b4:2d:7f:1d:04:e4:bf:ef:f5:fa:
9c:6e:4b:89:a1:af:1c:f1:ac:bc:ad:a8:76:b7:1a:
87:cc:d7:17:97:b9:5f:a2:c4:81:88:8b:49:62:28:
73:87:12:27:4a:c8:a5:a5:df:7d:09:f1:b9:e3:3f:
81:35:ae:21:50:55:5c:a1:61:50:ac:c4:95:44:0c:
48:05:88:97:d8:54:ea:f8:7e:c6:c3:e3:ef:79:ea:
41:08:78:32:b2:73:82:4f:b5:bd:4b:4b:89:a6:40:
73:92:29:b0:a1:75:d7:b8:92:54:1d:97:be:2a:02:
12:e8:b9:37:39:a5:b2:f8:07:fb:f5:ea:28:62:93:
c1:dd:51:da:69:72:0e:34:92:77:c2:b4:ce:4b:95:
2d:6a:3d:f2:42:0f:1e:a2:48:9d:e1:b0:ad:8d:07:
2e:9c:c4:da:f7:26:8b:0f:6f:85:93:d6:1b:5d:5c:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:58:D9:26:CA:9C:DC:42:2C:8F:AE:59:71:53:EA:2C:46:EC:F7
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:66:12:20:d7:60:5a:91:b5:9d:62:a6:9f:7d:67:2f:c3:
17:56:57:8e:b0:c0:82:a4:06:5c:25:af:45:93:9b:2f:ea:71:
62:74:a2:ab:7b:bc:ce:cb:81:45:44:13:02:ac:63:97:91:5d:
2c:e5:b7:d4:6f:b9:9c:e2:3a:e2:64:b0:7f:33:c4:83:11:59:
db:8b:19:bb:4d:13:7e:0e:4b:6c:5f:a7:02:78:db:9e:b2:21:
d7:3d:27:0f:36:75:69:1d:5e:90:90:a1:43:29:1c:b1:8b:1d:
6d:34:44:81:cf:99:0c:a3:22:23:a2:12:0e:ef:35:1a:72:aa:
96:7e:8a:85:c8:ce:8e:71:7a:a4:e6:db:22:ba:f1:59:a7:31:
31:50:f4:23:44:c4:3f:b6:90:c2:4a:bd:fb:bc:d8:ed:8e:c9:
9a:de:62:f0:f1:c9:c8:54:6f:8c:45:77:27:d8:e4:97:74:05:
c4:71:a5:63:24:e3:98:b9:1a:35:46:75:30:1c:a6:9f:a6:81:
4e:d7:88:83:de:ef:d0:32:69:1d:22:19:fc:be:b7:99:5c:9e:
1c:f1:90:4e:f5:98:db:3d:5d:06:fc:24:f4:9a:01:f2:48:68:
0f:02:1b:eb:a7:d8:04:55:15:e6:fc:cb:d1:b7:6f:7e:a5:51:
a8:30:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:46 2025 by rpki-client