Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: /L4owlTnuKXRYFOxH8cHKUD0IGHAjyQQAZmsZ4RP7zI=
Subject key identifier: 8F:9D:7B:04:63:3C:43:9D:12:6B:98:F8:A3:42:BF:56:03:71:D5:21
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 0197BA0FA5545D949CA51E6055BA6B2D8181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 0515
Signing time: Sun 29 Jun 2025 05:01:16 +0000
Manifest this update: Sun 29 Jun 2025 05:01:16 +0000
Manifest next update: Mon 30 Jun 2025 05:01:16 +0000
Files and hashes: 1: 2uqD5zGZ2YzBCLr29oUkHyxLaOg.roa (hash: Rlx38ri/UsUpqTWWjiQxvpWbwT4B1nvpj+Qj3oYHyJI=)
2: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: jQz+LRZYNOrXLV1IVYysth7rTjKkzoZEjkEZ3BmZbw8=)
3: 8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa (hash: oJIUnSFr4nxPfIklC3jgxHnAbm0kguG5fFIKoWMYD0A=)
4: VjqdrxGTRj_HInStkdep02mDb9Q.roa (hash: FNpVRLOkWoRmhAFzENCKzeCXF5FLB71OdgzjA3hm4XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:a5:54:5d:94:9c:a5:1e:60:55:ba:6b:2d:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Jun 29 05:01:16 2025 GMT
Not After : Jun 30 05:01:16 2025 GMT
Subject: CN=8f9d7b04633c439d126b98f8a342bf560371d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:a1:ad:33:21:e1:ac:95:ca:c4:26:6f:0f:
77:83:5a:67:06:f0:6d:39:a4:57:70:b6:61:a8:e0:
ad:92:e1:ed:04:da:f8:32:4b:44:48:cd:41:a5:c8:
c0:02:81:01:02:b5:fb:c9:c5:af:9c:df:46:94:60:
2e:e5:b2:c1:68:a2:24:14:2e:f5:b9:08:b4:56:b6:
8a:9f:0e:4b:64:f1:ab:fd:0a:83:7b:b2:10:98:76:
02:38:34:82:6d:3a:52:8e:19:43:41:9b:b5:d5:f8:
d8:88:da:ea:b2:59:f3:18:96:74:56:13:43:6e:da:
77:0e:c2:fb:67:8a:b0:b8:4d:f7:4e:ee:b0:bf:ea:
55:12:4d:1c:aa:65:34:4f:46:2f:11:9b:6f:25:f2:
64:02:4e:4a:be:6e:0a:05:b4:7b:43:1f:8e:85:01:
8b:d8:c7:4f:b2:7f:fa:4a:9b:7e:f5:5b:27:68:16:
1e:fe:06:c8:92:b0:64:cb:db:1a:15:8c:7c:2f:a6:
59:61:eb:e5:b2:12:6a:16:e3:9f:f7:d6:86:e3:11:
56:4e:f9:65:73:b8:ee:9c:fd:11:3f:fc:91:15:d4:
21:c2:7b:8d:0e:7f:d1:a7:b6:ae:8f:db:73:b8:7b:
c7:aa:0e:48:ba:4c:e5:e7:5e:23:22:f9:84:93:64:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:7B:04:63:3C:43:9D:12:6B:98:F8:A3:42:BF:56:03:71:D5:21
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e9:e2:d5:b3:d0:b3:38:e4:93:4e:fe:99:9c:57:97:5e:28:
23:97:a6:c2:cb:59:5c:e0:50:d3:61:94:4f:59:b5:0a:9d:34:
ac:a6:84:74:ff:7b:e9:ea:43:96:3e:d5:ad:4e:b9:2c:3d:85:
76:42:33:11:7e:16:8d:d3:94:96:07:c4:ea:d3:98:aa:78:9a:
6c:e3:de:5c:18:5e:6f:9b:04:2e:22:bc:8d:af:e8:f8:e5:cc:
78:fb:71:91:1a:c1:45:b5:c6:07:64:4a:ba:d2:b2:e5:22:2b:
81:11:f3:c7:ec:7a:fe:f0:8b:5d:9c:78:b5:6d:93:b7:d9:87:
20:a1:1d:7f:fc:b4:80:70:ca:89:8c:58:61:f7:9c:3b:9f:4f:
19:fd:9b:f9:f3:18:d9:c5:9c:ee:b9:98:58:67:00:d9:f2:a0:
26:4e:1f:6d:5b:87:5b:73:3c:70:dc:5f:58:de:2b:2b:4f:9e:
9a:09:7a:7b:df:ff:17:2e:71:d9:56:9e:41:1b:13:0c:8f:7a:
5d:a5:9a:aa:61:18:5b:8f:25:4a:a2:79:6a:37:94:5b:96:c9:
e0:3a:3f:cb:16:7e:5f:ce:27:c4:e0:81:a4:a5:b3:19:58:0a:
17:df:16:8f:e2:f1:cc:d9:18:4d:3f:59:47:18:70:07:99:64:
bb:11:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:22 2025 by rpki-client