Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: bQ0Q3y4rE92QTfKnTHIH9ov7GKbayNAnA3c/UE1I6AI=
Subject key identifier: 5D:CA:34:D8:26:B3:7D:80:18:36:4C:5A:8E:6D:3A:87:64:D2:95:7F
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 0197B58E1BCCA9E58EE269821241F87AB06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 08FA
Signing time: Sat 28 Jun 2025 08:01:18 +0000
Manifest this update: Sat 28 Jun 2025 08:01:18 +0000
Manifest next update: Sun 29 Jun 2025 08:01:18 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: W16hC5+lyvs2KmX+14aJNMvpEU8Q1ygq+GEQTTbluSY=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:1b:cc:a9:e5:8e:e2:69:82:12:41:f8:7a:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jun 28 08:01:18 2025 GMT
Not After : Jun 29 08:01:18 2025 GMT
Subject: CN=5dca34d826b37d8018364c5a8e6d3a8764d2957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:1b:e0:a8:ac:ae:61:83:d8:59:35:20:02:
3e:b3:5b:b3:01:2e:69:26:d1:d1:15:cf:71:b0:6c:
2b:dc:9d:63:63:e1:2b:c3:0a:e1:25:ce:ad:af:ca:
af:48:e4:8d:69:98:32:4e:87:b4:80:e3:03:8f:bf:
03:11:69:e8:bf:27:d8:ea:e6:38:7f:12:bf:30:18:
c7:06:2a:23:bc:ae:50:f0:5c:7c:c0:45:a2:fa:43:
ab:b7:01:57:fc:c1:b1:de:68:a8:33:c6:65:6f:df:
6b:6f:02:ae:2d:dc:06:f2:f8:8b:7e:df:d1:06:e8:
ce:6d:d3:b5:b1:9a:be:5e:d5:13:62:c5:8b:79:55:
40:a3:a8:f5:f7:5e:ff:c3:aa:dd:a4:70:0f:a6:7f:
b0:cb:46:bb:3a:80:d2:28:3f:d8:42:38:f7:4c:e0:
e0:d9:4b:d0:38:cc:43:08:31:2a:68:08:92:fe:3f:
a6:b9:e5:e1:31:95:36:d8:ac:3c:5a:6d:5e:d2:2d:
d5:c1:6f:9c:14:1b:29:fa:13:f3:94:06:32:14:c6:
20:3a:17:e4:ac:6a:d8:fb:57:f9:6c:eb:27:e5:ff:
21:58:52:99:5d:a9:41:8b:0a:ae:fb:1b:37:cc:de:
42:c3:54:22:5c:c6:50:44:aa:9f:04:cf:23:5f:30:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:34:D8:26:B3:7D:80:18:36:4C:5A:8E:6D:3A:87:64:D2:95:7F
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:bc:c4:51:78:e8:57:81:a8:47:c9:58:2e:55:f8:33:c8:
78:3a:3b:f3:b8:2b:77:d2:2e:84:2c:78:2b:c7:dd:7f:88:9b:
e4:1c:89:be:dd:1c:30:3e:3a:58:30:d8:50:bc:41:48:f8:1d:
64:2a:d2:2f:32:81:7b:43:3b:62:9c:fd:b4:54:7b:81:3f:49:
87:5d:60:ad:cd:f9:6a:5e:cb:c6:86:ef:d1:3b:a5:04:3b:c9:
d5:79:da:c0:be:a1:77:58:b1:83:23:dc:6e:3c:2c:73:88:26:
2b:31:a9:83:5d:81:9c:5b:3b:6d:7d:aa:f0:e2:aa:11:c9:38:
9f:ac:33:8a:b0:e3:3a:dc:5b:ff:27:e0:32:00:dc:84:a7:2b:
3c:40:7a:2f:56:12:99:a9:6a:fa:11:08:2b:1b:d2:65:35:d9:
26:53:8f:22:3f:30:21:0c:1b:01:fa:54:7c:fb:73:33:2c:06:
50:7b:e7:15:10:e4:70:11:04:fa:95:0f:fd:2b:ef:63:0e:85:
92:f8:1c:84:64:35:56:25:21:88:b4:37:84:83:d3:8a:39:2f:
40:4f:2d:bb:7b:55:53:7c:48:84:84:d5:38:ac:4f:37:6b:b3:
e1:76:73:f1:c6:ad:be:59:1d:1f:ee:b7:bc:d7:6d:be:d9:35:
08:1b:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:56 2025 by rpki-client