Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: IVZBpG+DozQ46oDyCeSfpW08d7gqUJpg6V7+ZIoK4h0=
Subject key identifier: DE:FC:39:1D:2B:C8:6A:08:DB:82:7A:7E:ED:D9:70:81:32:79:D9:C0
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0197B70F427C07603CD2D09B9F14323C1FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: HWl5TutxuoB+vapfJdu0XnW+ETmNZGZ0RA1JGiPKyL4=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:42:7c:07:60:3c:d2:d0:9b:9f:14:32:3c:1f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=defc391d2bc86a08db827a7eedd970813279d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:05:17:94:5e:cc:10:64:71:77:20:b1:90:
5c:1e:7c:49:4b:66:3c:6d:de:3e:a6:e4:fb:63:34:
25:d9:e5:3f:9f:1d:fa:e7:4a:df:c1:9b:ba:72:95:
f3:a3:5c:a0:11:a2:d5:f7:55:c9:a1:f2:bb:a0:69:
a7:f2:80:db:94:e3:83:02:ae:63:16:4a:09:39:ff:
35:cb:d0:34:e3:4c:88:53:42:0c:d9:f7:df:05:65:
d9:30:e5:4d:0f:fe:1f:ab:8c:2a:f6:3d:d5:d5:69:
a4:0f:fc:60:15:76:e8:32:29:c8:29:f1:1b:fd:22:
4d:b7:64:b9:3c:97:1f:fa:52:9f:08:3b:ed:33:3d:
ea:11:d1:2b:a6:f8:06:95:96:10:ce:6a:75:84:35:
98:69:0c:d9:1c:6d:f5:76:b0:8e:b5:df:c8:1c:2f:
26:d4:78:ce:1b:b9:c8:0e:dd:6a:b2:1c:8b:b9:d8:
af:c7:ca:71:5c:b3:c9:b0:48:9c:8f:31:df:4c:10:
c4:b5:45:81:2b:dd:74:dd:03:34:7b:47:c6:00:4d:
02:b6:61:87:80:27:aa:43:4b:e5:d0:d6:9a:26:eb:
ad:d2:c0:00:4d:62:ef:12:5c:bf:33:b3:fc:22:6b:
7e:fa:d0:92:5a:bc:ca:37:eb:61:5d:d7:d2:1a:43:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:39:1D:2B:C8:6A:08:DB:82:7A:7E:ED:D9:70:81:32:79:D9:C0
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:66:a6:be:31:a1:14:95:7b:1e:a1:61:5a:5e:45:4d:2b:ad:
84:2c:6a:fa:1c:74:6d:c4:3b:e1:81:ef:43:50:25:f4:83:02:
be:63:c7:aa:13:a0:bd:a7:bd:4f:93:c7:17:bf:69:3e:ba:f2:
2f:e2:e5:03:17:2a:a2:87:60:f9:e7:36:b0:e4:5a:f9:84:fb:
4a:42:d9:d6:67:95:b7:52:c8:f2:f7:2f:1f:0b:81:f4:ca:2c:
e1:99:7d:cf:37:f5:95:15:ff:d0:6e:4c:d1:df:7b:6d:ca:97:
76:20:6c:be:67:05:cc:4d:68:ab:ec:f5:4f:a1:51:5c:24:7d:
65:ac:f2:13:32:87:b0:fe:87:5e:60:72:c6:3d:f8:f7:e5:47:
af:3f:ce:01:af:36:58:c9:c0:c6:60:84:f0:00:2f:ea:d2:df:
a7:38:96:bf:6e:bf:37:bb:43:cc:64:57:3a:b6:cb:8a:31:09:
a1:2b:3a:64:96:cd:04:83:86:ef:26:43:19:fd:59:67:2c:d9:
24:2a:4d:cd:df:16:e4:4b:a1:48:63:ac:4d:6e:8a:f2:3c:a7:
72:38:69:c7:3b:b2:12:14:75:67:eb:b8:39:60:a4:e6:9a:86:
59:38:65:a5:f6:cc:2a:c8:e6:0d:34:04:36:38:16:2a:97:ae:
66:1d:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:40 2025 by rpki-client