Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json)
Hash identifier: 1hohok3kBBrSEcGuVfapAEPlnWG6UlsbMdne+Ms1TZ0=
Subject key identifier: 62:0B:76:3A:61:5A:8F:07:54:20:D1:62:0F:9B:DA:54:CD:97:7A:32
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial: 0197B88F4E0F3057ADC2AC676D6F79166B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
Manifest number: 0B4F
Signing time: Sat 28 Jun 2025 22:01:28 +0000
Manifest this update: Sat 28 Jun 2025 22:01:28 +0000
Manifest next update: Sun 29 Jun 2025 22:01:28 +0000
Files and hashes: 1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: TcmrAne39t6SR/AZS1M108I21qjYM3RtqG07O8cwVeE=)
2: x6hLDer_XW1q_iEu4GXkzkZyC4s.roa (hash: WqVvea5/LNqbNIIZsdml33Mg9/QcNbUM12u8YdmaIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:4e:0f:30:57:ad:c2:ac:67:6d:6f:79:16:6b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Validity
Not Before: Jun 28 22:01:28 2025 GMT
Not After : Jun 29 22:01:28 2025 GMT
Subject: CN=620b763a615a8f075420d1620f9bda54cd977a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:83:01:18:83:e2:b9:34:e8:8c:71:ac:ce:
e3:64:c5:2a:01:78:67:17:f4:2f:a3:74:c1:fd:53:
f1:12:88:c2:58:b6:c6:12:68:aa:5e:4e:b9:de:86:
24:01:4d:05:1f:46:65:b5:aa:4c:a6:59:75:1d:75:
6a:dc:ed:30:ba:c5:a7:5a:e9:7f:dc:36:e2:6b:22:
ab:f0:8b:be:dd:77:f7:0e:ce:83:14:e1:07:9f:34:
3d:40:e4:a3:d0:d7:2e:0d:b9:e0:53:63:69:5a:26:
33:69:ca:1f:88:87:29:ad:97:54:74:c4:78:b7:2a:
3d:a3:4d:98:ac:32:9a:75:b3:36:4e:21:8f:ca:50:
f9:eb:63:3c:b1:b2:f5:cc:64:7a:d3:2b:f6:44:b8:
2d:e9:56:33:4a:8d:fa:b0:6c:52:6e:09:e7:1b:ec:
04:25:bc:1b:27:b9:f4:ac:9e:94:e7:6f:87:54:2d:
2c:7d:ae:29:5a:ff:b9:84:5b:b7:97:5c:f6:cb:bc:
b6:09:63:ac:0f:80:4d:8a:80:f9:ab:f3:4a:2e:be:
8c:e5:5f:fa:c5:c4:0f:a2:45:cc:8e:6f:75:55:c0:
86:22:6e:a5:eb:c8:da:52:2f:17:f3:59:a5:d8:b1:
01:e2:61:a7:ab:d4:b2:84:5e:7c:c8:71:ea:14:47:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:76:3A:61:5A:8F:07:54:20:D1:62:0F:9B:DA:54:CD:97:7A:32
X509v3 Authority Key Identifier:
keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:20:18:02:91:60:c0:19:c6:81:0e:cf:f4:44:e6:a8:1a:
91:0f:f2:4a:26:ca:ff:4d:24:6f:33:bf:ca:eb:b9:49:34:c1:
37:ed:fc:88:e1:03:4f:bc:0c:7d:ba:3d:9c:83:46:4b:a9:0e:
52:a8:47:0a:99:98:2d:5d:89:95:44:4b:f9:c1:47:31:b2:ab:
eb:a0:7f:aa:df:87:d1:79:cd:4d:49:c4:fa:c1:ac:11:a6:5f:
7f:69:12:58:be:df:f3:08:25:86:d6:d2:ed:3b:b2:f0:ef:e3:
74:10:21:21:d3:ef:d2:cc:de:37:ad:52:eb:51:5f:12:93:1b:
cd:fa:8b:fa:93:a3:36:d1:75:8b:c0:bc:26:87:d1:e1:3b:7d:
e1:36:6d:99:a6:47:a9:57:b3:a1:29:28:c9:64:c1:96:c6:28:
b0:a2:a4:5f:a6:b1:3e:49:43:af:78:82:dd:20:0a:21:7a:91:
01:a0:30:ab:e9:01:56:d6:74:d2:da:e8:47:73:f4:80:76:ae:
d7:1a:fe:60:a1:2c:2e:40:bf:43:bb:23:74:c6:2b:7d:75:6b:
eb:9a:c8:9e:ce:ba:7e:83:d4:b0:fd:66:c6:ed:db:da:a1:0e:
fa:7f:89:31:b2:2d:f4:1d:8e:49:5b:34:e6:0f:42:fc:71:f3:
76:a4:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:05 2025 by rpki-client