Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: MSR0T89FW+H+++C0wbQ5X1WTm0WioaPqwXVfIcm3YiA=
Subject key identifier: 09:38:6A:CB:EE:6C:5B:4C:E9:2A:F7:85:E6:2B:ED:12:6E:8C:5F:C6
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 0197B7EA95AC15CF52818B65CD34E922BC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: o8mlJYfGEIeg0/FQU/BQp62Fww92Wt44jxVXbIz+LwE=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:ac:15:cf:52:81:8b:65:cd:34:e9:22:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=09386acbee6c5b4ce92af785e62bed126e8c5fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:bb:23:4c:a9:bd:fb:3c:2f:20:eb:61:da:
bc:f0:53:7e:bb:ad:8a:eb:e8:39:23:60:da:1d:da:
b2:7a:47:68:10:3d:33:15:c1:4b:91:e6:88:89:69:
96:4b:46:0c:2e:05:12:ef:fa:91:b1:3c:a7:80:02:
ea:92:6c:97:22:4e:c3:57:cc:de:fe:8f:c1:aa:0b:
5b:4d:ec:7a:c6:59:03:52:28:f6:a6:a7:b3:66:ee:
bd:f1:7d:24:8e:de:59:dc:bd:4c:e8:98:47:d1:1b:
27:80:d0:e8:74:f7:50:4e:a8:ff:89:32:95:f8:63:
2a:14:d0:9d:4c:96:0a:db:76:17:ed:eb:93:de:48:
7a:14:25:e7:be:2d:50:1c:bd:98:9b:09:d9:73:e2:
33:b2:07:4b:44:96:1a:a0:e7:4f:59:17:39:88:dc:
d2:1b:89:ab:95:90:ca:7f:b9:48:a6:d6:4c:b4:00:
d3:c6:4b:cf:eb:ee:84:3e:e2:8e:f8:14:e7:39:7d:
fd:c3:08:08:bf:2f:86:f3:19:c6:5a:5f:c9:18:71:
52:4e:3f:6b:0e:80:b1:11:ed:48:a1:ed:f0:24:00:
01:6f:e6:e8:cf:86:83:81:6f:66:55:10:c2:29:f9:
d0:4d:9b:30:4e:eb:bc:96:8d:6e:8e:0c:88:80:f6:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:6A:CB:EE:6C:5B:4C:E9:2A:F7:85:E6:2B:ED:12:6E:8C:5F:C6
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:89:54:b7:80:a0:34:55:48:e7:cd:f7:38:9e:f3:86:a6:c0:
cf:11:92:f2:a8:91:49:57:61:78:75:f2:c0:de:f0:91:09:d5:
c9:96:5a:7f:12:2d:f0:14:d2:d2:71:94:22:e6:16:71:c1:85:
df:73:e8:82:32:b9:ee:ad:64:4c:c6:c1:55:13:db:7d:6d:f7:
68:7d:b2:91:3b:34:37:5e:a6:88:84:63:a7:d1:c1:dd:d4:d5:
9c:cf:2d:ac:ec:75:3d:45:ec:5c:40:75:57:39:ff:43:3b:e6:
b0:ab:68:22:7d:04:91:40:39:9f:17:5a:b6:81:bb:cd:3c:10:
e9:45:5d:e0:a0:0b:e5:91:42:b0:82:78:c6:62:8a:be:09:26:
40:c8:96:f2:9b:4f:ff:59:ab:47:e0:ee:0a:d9:ce:10:c2:d9:
68:78:47:83:f9:b2:44:11:fb:5b:dc:f8:bb:54:85:03:8a:1b:
c5:25:9d:dc:5b:0e:ad:5c:35:fe:70:d4:51:52:c9:62:09:fd:
be:a1:0b:ca:a9:56:ce:d4:3f:22:d5:92:e8:cf:1c:2b:10:13:
e7:a7:d5:d3:aa:cf:a0:03:d8:44:44:63:ef:36:6c:34:08:1a:
25:f3:f5:10:bc:14:42:9a:54:23:c2:d0:c7:d4:1d:36:68:7c:
97:19:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:29 2025 by rpki-client