Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: csrGjQl59lAydKN7mbG8YkZmZKTIPwnX9mMBUo5A4hM=
Subject key identifier: 58:1C:B3:94:46:F6:22:F3:BC:B7:03:92:7E:80:11:47:9B:67:CC:FF
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 0197B6A0884C10076036BF213FE82C91DF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 0FD0
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: l2yPfGZDccuIV5f1xDB9ednFtsT3+dP4jai123lMsVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:88:4c:10:07:60:36:bf:21:3f:e8:2c:91:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=581cb39446f622f3bcb703927e8011479b67ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:60:9c:40:ce:e7:78:57:d7:3e:4d:3b:ca:
8c:20:e5:08:31:38:e6:7b:79:8c:0f:f6:34:d4:b5:
b9:21:03:bf:bc:01:df:4d:27:89:ff:e9:44:c7:7b:
1b:c5:f1:21:56:b9:e7:85:b6:5c:d6:0c:98:1e:fd:
da:f8:68:92:27:73:80:7a:49:81:e7:cd:15:d1:97:
c1:35:a7:9c:15:d6:8b:ee:52:6d:a3:31:d3:29:a8:
3a:38:74:40:6d:f4:ca:80:56:ae:03:0f:14:69:19:
4f:e8:df:67:ae:c1:4f:3a:16:bb:4f:28:b3:33:8e:
43:43:eb:72:e5:ef:eb:30:38:0e:c8:3a:f7:af:31:
69:76:93:cc:4b:01:ff:db:c0:05:b9:ff:b9:6e:de:
6a:b0:7b:e3:80:2d:be:23:7a:a9:65:c0:e4:61:61:
47:4d:f9:90:93:ed:bb:f1:be:bc:69:df:d0:03:32:
36:6a:69:9a:55:8e:02:17:6d:42:96:81:fc:26:99:
98:8b:0f:71:c4:7f:aa:e4:8f:ef:68:7d:74:36:04:
2f:33:ff:d0:a2:5f:8f:f9:dd:e2:e3:3f:6f:25:84:
73:cb:9d:c6:83:f8:35:b4:bb:5f:3e:01:41:3f:b1:
fa:40:11:f3:01:af:da:be:c9:07:63:55:d7:24:67:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:B3:94:46:F6:22:F3:BC:B7:03:92:7E:80:11:47:9B:67:CC:FF
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:45:9f:3a:f2:06:98:1d:05:b2:3a:9e:b4:07:e8:6c:5b:
97:f4:1a:ce:31:07:d0:8d:f8:85:02:97:02:37:01:02:d6:a1:
ea:8a:cd:4c:3e:6c:85:f7:9a:72:b2:1e:80:4e:90:92:f1:6a:
df:6a:4e:89:ca:93:15:9a:74:75:ce:fa:97:0e:d4:65:4c:da:
2c:47:9d:a2:fb:ab:e5:cb:a4:44:b6:32:e5:e6:20:d6:48:00:
5c:e6:78:f3:ea:e7:29:d7:e6:9c:5d:57:4c:28:f0:71:16:f9:
03:03:1f:cb:07:5d:8f:12:5b:d6:4b:05:d8:99:40:35:56:08:
4c:ea:29:f0:c7:ad:5f:55:c9:65:0e:6a:77:af:88:1d:1a:14:
9d:6f:b4:e3:b6:25:b6:28:51:1f:81:37:27:8a:cc:e3:cd:23:
b9:e3:2b:02:b0:ac:70:b3:e3:4e:d1:7d:d8:be:17:f1:27:c8:
1e:60:81:d7:40:6e:be:f6:b5:bf:b9:22:a0:9e:aa:48:41:d6:
1b:0d:3f:90:83:13:73:4e:1e:fb:31:81:ec:4c:3b:e0:c7:9f:
a6:e4:5a:05:17:40:c9:e0:4f:a9:98:22:05:e6:4d:8d:23:37:
c2:bd:a7:d0:b5:8f:95:e5:12:84:a7:99:76:c3:32:9e:fd:20:
d2:25:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:11 2025 by rpki-client