Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: RXm2mA7LRsmj1MCNCisZwWXIwvJj430SXPc+B2lqs/s=
Subject key identifier: AE:45:54:F1:9A:1D:41:CC:FE:AC:FA:5F:17:39:C4:0B:6B:AF:A7:F4
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0197B7B3325E52A2D3C3F24761DDA2FCE451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 1379
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: O5Ukt/JfHV4cOKli25WzyEtpk7qIiC4QAwqZ+nf7kZ0=)
2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:32:5e:52:a2:d3:c3:f2:47:61:dd:a2:fc:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=ae4554f19a1d41ccfeacfa5f1739c40b6bafa7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:a3:fb:f1:4f:13:af:c1:89:d8:a9:00:48:
f6:ec:c7:b5:04:37:d4:d8:46:bc:ab:e5:f1:a3:9e:
bf:91:d5:0e:6b:46:99:7b:84:8f:2b:2a:e2:8e:45:
86:03:81:be:13:5e:2d:73:7f:3b:75:b1:ea:78:cc:
6d:b4:87:5a:da:43:bd:cd:8d:6c:b9:65:77:0f:ca:
f8:fa:98:4f:bc:f9:b3:9d:f5:77:3d:14:fb:48:8c:
88:16:e2:2a:6f:69:a8:f6:55:a9:35:4f:02:2c:e6:
57:36:79:4a:cc:b1:8d:f6:6c:bc:72:2a:e9:4d:3b:
79:25:80:c4:0c:3d:5c:fa:16:51:54:93:ea:19:97:
c4:20:08:e6:f4:5c:28:d3:d6:b6:c4:cf:da:8b:0c:
42:e6:60:78:30:0a:e2:91:3e:17:3c:3d:57:f5:82:
b3:d9:a5:8a:86:5b:67:ab:de:6b:c5:f6:40:ea:ff:
1c:de:e3:85:20:37:da:6e:1c:58:1e:74:c9:2c:08:
82:8d:d7:ae:46:c5:36:97:52:38:e3:a1:1f:f0:9e:
90:a7:38:2b:06:25:89:5f:23:3f:56:f6:20:16:90:
81:c8:ec:ca:f7:8a:85:d3:d4:d4:f7:ba:3e:92:ac:
3b:42:ad:2e:69:16:86:c2:d6:af:42:58:16:24:52:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:54:F1:9A:1D:41:CC:FE:AC:FA:5F:17:39:C4:0B:6B:AF:A7:F4
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:95:8e:7a:7b:67:ad:f8:47:34:ae:be:1b:d6:60:6a:a5:
5e:3d:5d:89:b1:c3:e8:b7:17:4d:e5:15:49:7a:2f:04:e7:82:
67:fc:9e:25:01:e1:33:f5:e9:5b:ab:2e:fb:b0:b6:1c:43:3b:
af:ed:8c:83:69:ee:9b:aa:b8:a0:6b:f7:89:ee:c6:69:50:cc:
ee:90:c5:31:e3:ca:39:21:40:d4:33:85:95:d8:f5:61:e9:86:
62:31:13:ab:8c:77:a8:af:cf:13:74:57:ac:62:b0:04:b5:ac:
ab:2d:f4:ce:61:0c:89:ad:26:6f:5b:63:f4:74:5c:c5:95:5e:
7b:fe:a7:93:2a:f8:a2:42:eb:fe:de:b6:d9:ee:f0:1d:c0:03:
01:8c:39:dd:d6:f8:6e:70:77:5e:a0:fe:79:80:7a:dd:a3:ec:
ad:dc:75:47:90:f6:c3:cd:8c:3d:bc:6c:59:c2:3d:bb:1e:14:
77:aa:19:7d:7f:65:ff:ed:70:91:57:8d:47:6e:ba:75:6c:6c:
fc:5b:77:1f:b9:62:b3:0b:46:0b:5b:0b:db:a0:ab:ef:66:07:
f2:e9:32:f5:35:5a:f5:66:d0:c8:5b:bb:1f:37:98:dd:44:9c:
e1:9d:19:e8:79:35:94:88:7d:fd:bf:06:c9:74:68:27:ad:24:
de:1b:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:08 2025 by rpki-client