Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: BEtN4DiB4o/SYRXTw8WFOgDCS2qdqi6UM8KQPT8H/Iw=
Subject key identifier: 21:84:ED:AE:4E:CD:88:A0:60:FD:1A:2E:E0:FD:AB:15:9A:F4:9A:07
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0197B7EA2780FF48EC02FD5F723B8CB7BDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: QQkuDiYpYx2a4epnoQdmJrfJ2a2nqFeIT1gzOvuxqQk=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:27:80:ff:48:ec:02:fd:5f:72:3b:8c:b7:bd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=2184edae4ecd88a060fd1a2ee0fdab159af49a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:d7:44:d8:44:48:55:c9:a9:0e:05:03:3c:
e8:38:fa:9e:63:a4:51:06:d3:42:79:45:1d:f2:21:
1d:1f:e6:67:36:ea:39:e2:f3:89:ae:9f:d5:c2:51:
98:cd:19:9c:66:07:0d:a5:84:bf:0e:2d:ee:68:96:
21:17:cf:2d:a6:d9:2b:62:0b:51:c8:2b:0f:e4:d7:
bd:ad:08:c9:0a:8a:49:30:19:a0:2d:1f:3d:e5:c1:
8a:a4:6e:4d:c7:f1:e4:36:e1:33:8f:fa:81:60:c8:
a4:b8:cb:1a:2a:a9:27:dd:8f:39:be:66:20:b0:21:
89:44:a9:18:35:6d:45:20:6e:25:4a:ef:2c:c3:d9:
ac:4a:a8:e0:f6:79:d9:0c:d4:54:0f:8d:fa:bd:4b:
4c:87:fe:37:2d:5e:9f:b3:7e:fb:46:3a:f5:1b:f0:
8b:f9:b0:bd:e4:eb:27:e9:de:3a:53:03:18:e5:86:
2b:d5:ab:33:6a:66:18:70:bf:c5:2f:08:d4:65:d2:
e1:b8:0b:c5:24:c0:9d:3f:a7:6c:9e:54:55:87:84:
bb:8e:94:a2:bf:8e:07:98:51:4f:d7:5d:c3:55:e3:
78:2e:fc:f5:54:38:c2:48:ce:80:a6:c2:e8:06:cc:
8f:b9:df:d6:61:b8:0d:1d:d0:aa:72:ca:78:bb:8d:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:ED:AE:4E:CD:88:A0:60:FD:1A:2E:E0:FD:AB:15:9A:F4:9A:07
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:27:d9:24:27:32:3f:27:15:5d:33:a1:2e:83:19:2b:75:9b:
1b:74:05:2a:4d:70:9a:0b:f8:5c:24:47:4a:2b:1b:fd:47:15:
aa:77:6b:91:4b:19:0c:06:49:be:9a:db:c2:91:1c:f9:e0:16:
79:f7:33:88:d4:94:a8:88:41:0c:3b:0c:c3:35:cb:e7:4d:01:
a2:7e:96:aa:41:66:5c:32:6b:19:a8:e9:a0:68:61:88:8f:4a:
99:31:62:f4:86:ed:69:25:74:88:6a:53:b3:a9:d5:5e:ed:6e:
7e:3e:3c:32:46:cd:96:c5:4d:6b:89:42:90:8a:6d:80:19:48:
e5:99:f9:59:aa:92:cf:d6:2d:4a:50:40:9e:9f:13:a3:4a:b3:
81:d4:03:a7:ff:bb:db:0b:20:96:c1:9a:ea:01:43:1e:89:7c:
b0:d2:c4:6d:20:82:2a:24:81:80:40:e5:d3:88:13:b8:b3:73:
18:2a:e5:8e:07:1d:24:71:fb:06:da:89:18:00:8e:b4:c3:d4:
8b:64:ff:3b:9a:89:e4:a3:2d:6e:21:6a:34:2c:20:63:23:20:
2d:94:26:ff:fb:35:90:1a:07:dc:43:8f:1d:f8:33:ea:9e:fa:
4b:bd:ef:fc:29:5c:e3:9b:ea:e9:46:80:0f:81:4f:5c:70:23:
91:2b:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:32 2025 by rpki-client