Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: ReaQFURW68PrRXfzVrVoe1VyvIFvBxb6ABZG62VkGlg=
Subject key identifier: 7A:B2:72:35:F5:0B:C3:79:1D:A9:99:5A:D5:6F:D4:6B:E2:B9:BE:CB
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0197B70F3658FF5A4AE274819FA007AE973D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 07BA
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: hHxBq870ZJSrc8ArbQ77t6TLjKuJ4hOMwmkYFuefnsQ=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:36:58:ff:5a:4a:e2:74:81:9f:a0:07:ae:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=7ab27235f50bc3791da9995ad56fd46be2b9becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:bd:3e:ca:42:92:b1:3c:79:62:9c:7f:49:
cb:a5:10:2f:ad:42:36:13:55:4d:45:21:57:35:b2:
3c:0c:41:bf:54:22:4f:2b:ac:4d:82:4e:aa:51:11:
67:61:5f:fa:f8:d8:97:65:20:bf:51:c5:d2:28:da:
63:8f:f8:04:ba:36:d4:92:eb:66:cb:a5:58:97:ad:
5d:7b:63:dc:ed:2d:68:bf:6c:25:87:cf:5a:8e:26:
05:4d:52:67:8d:1b:c2:30:a8:fa:01:98:f0:34:7c:
2f:ca:34:7b:49:a6:ec:66:2c:ad:c4:2f:0c:35:c1:
6d:87:93:a5:0e:24:68:30:59:61:a4:3f:2a:45:0e:
89:47:68:6a:70:1d:69:3b:5f:16:47:a7:99:37:98:
d2:a5:fc:3a:0a:0b:93:da:00:02:0b:39:4b:4c:e6:
e9:4b:a7:09:d9:72:3b:c5:2b:09:42:a1:f5:2e:9e:
b8:64:f8:4a:c5:34:6b:e5:8a:fa:bc:51:9e:94:89:
4e:aa:dc:a0:50:1e:50:75:66:18:7a:d0:e6:6d:44:
da:ea:38:0a:e2:c1:a8:29:41:67:40:dd:63:63:e7:
8b:ef:0d:f7:43:f6:06:b2:18:dc:d0:dc:44:7d:38:
a6:37:a9:02:f9:33:53:a8:54:40:26:99:5d:03:62:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:72:35:F5:0B:C3:79:1D:A9:99:5A:D5:6F:D4:6B:E2:B9:BE:CB
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a3:a7:38:08:54:ca:e1:35:43:f6:c8:2d:d3:28:af:6a:79:
4a:8a:bc:97:e5:e3:96:73:8f:f1:8e:50:ae:6c:ff:51:c2:d7:
d7:e1:29:e7:f9:0b:e9:2c:74:f1:89:a6:23:49:db:aa:cb:d3:
5f:82:b8:97:ac:42:46:51:a2:13:80:61:6a:c8:b3:90:67:37:
0a:3c:46:6f:17:f9:a4:e6:30:7e:d1:de:45:b9:d2:46:af:08:
51:6f:96:fe:be:bc:07:04:9e:4a:74:77:88:88:da:fb:fb:9c:
54:71:d2:9a:e0:d8:38:be:52:f7:ac:30:42:c9:4d:46:ca:e7:
21:bb:86:dd:11:1b:05:44:38:81:a2:d8:b3:85:27:6d:47:db:
91:64:0d:73:48:1d:99:2a:43:60:55:7c:38:92:a5:5f:58:c0:
12:fb:a3:c1:6f:3f:cb:a5:e3:13:a6:b1:e7:04:d4:ad:d1:7f:
17:4b:ce:82:33:58:0c:d9:d1:13:7e:86:ab:2a:64:64:fe:17:
44:d3:3a:ec:bb:01:e4:bb:8d:1b:5e:05:32:43:fb:19:89:f9:
a2:4c:3b:f2:b7:73:82:eb:44:17:9e:11:fc:0e:4f:a1:ab:89:
f6:c9:69:6a:1d:f3:f9:7e:76:05:f5:24:34:2b:86:2c:17:a9:
c8:17:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:55 2025 by rpki-client