Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: gobFI6byPdME7WQI6TfsPoe1DAG+bugzHqerJdu6G/M=
Subject key identifier: F1:85:FC:22:5B:66:2A:67:F7:4B:62:33:96:8A:CC:FE:D9:8F:5A:35
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 0197B5C50B685C3CF3064ECDB7C7690DBC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 02B4
Signing time: Sat 28 Jun 2025 09:01:18 +0000
Manifest this update: Sat 28 Jun 2025 09:01:18 +0000
Manifest next update: Sun 29 Jun 2025 09:01:18 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: OTcNslzA9mclFGk16lFBzRCsblnEfNf1z2W7tyHi37s=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:0b:68:5c:3c:f3:06:4e:cd:b7:c7:69:0d:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Jun 28 09:01:18 2025 GMT
Not After : Jun 29 09:01:18 2025 GMT
Subject: CN=f185fc225b662a67f74b6233968accfed98f5a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bd:10:4a:6a:0a:25:28:ba:bc:98:1f:c2:35:
ba:b4:2e:03:6f:ba:84:e6:80:91:76:be:0d:5e:75:
7d:18:08:ba:b6:4b:78:59:ee:cb:31:20:15:da:1c:
11:36:b8:9e:dd:ac:a0:0c:60:71:9e:72:ee:f2:dc:
d9:2b:a2:83:e2:09:55:17:06:80:1e:e6:0c:6c:36:
5c:e8:84:63:61:52:83:c5:83:de:ac:33:dd:c5:94:
d1:2d:81:90:98:a7:19:26:25:1a:dd:86:b7:38:76:
98:b5:1e:08:5a:47:a1:37:06:5a:56:80:82:58:f8:
c1:e1:96:48:8d:ae:73:8a:5c:ae:72:94:5d:35:f4:
0a:5b:1c:15:8b:2d:de:3c:41:83:0e:72:a0:2b:4e:
48:a5:45:f4:0b:30:5b:49:d2:23:34:6e:02:e7:20:
d5:4d:1b:ef:c2:d8:71:8c:de:f2:5f:41:59:73:6f:
4d:05:f8:20:e1:fb:5e:d6:46:d8:59:9a:f4:b9:a2:
84:12:04:e2:bd:6d:2f:f1:93:32:ee:62:11:ac:aa:
a6:dd:99:6f:d0:1d:a3:ff:46:6b:34:be:41:14:d0:
25:3d:29:23:14:7b:8e:d3:3e:1a:46:0f:94:a4:eb:
47:eb:18:2d:54:0d:8b:c2:14:55:b7:18:02:1f:dd:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:FC:22:5B:66:2A:67:F7:4B:62:33:96:8A:CC:FE:D9:8F:5A:35
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:a8:6f:23:44:53:27:e3:e5:c3:47:a3:6d:94:05:50:89:
9c:44:82:bf:9a:2c:69:33:2f:b4:49:dc:58:ec:f7:d3:99:d9:
9c:ea:d0:8c:44:fe:e7:22:71:96:cf:2e:43:3c:52:ec:67:51:
b2:59:5f:b7:a6:c4:b9:77:73:6d:28:37:42:28:64:ce:8a:38:
9d:44:a0:a4:a0:00:11:45:44:d4:0a:b7:09:5e:3a:83:b3:f4:
fd:fd:33:59:05:a6:74:d3:ed:f3:e4:44:97:2c:9c:1d:33:50:
97:77:f5:e7:b1:6b:51:72:cc:bf:be:b8:3b:f4:09:40:13:85:
4d:9e:74:3f:a1:65:84:d7:1a:28:0c:82:e6:c7:e8:35:07:83:
a4:c5:78:77:b7:ae:9d:8d:5d:f5:9d:94:a2:48:34:55:32:08:
ec:e9:12:c5:6a:65:74:de:57:24:3e:50:4b:74:e4:ba:69:36:
c2:e2:0e:b9:48:86:56:6e:8e:78:0f:63:53:0f:b7:cd:00:96:
c9:6d:47:62:50:6e:eb:37:ea:ad:fe:93:a0:0f:96:16:75:a3:
5c:bc:c5:b0:1c:14:4e:a6:16:73:df:dc:bd:71:fe:2b:02:7d:
86:96:5b:75:2e:3e:3c:6e:f1:fb:ae:b2:1d:a7:94:82:3f:29:
9e:ad:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:06 2025 by rpki-client