Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: sVDPHl08z7JBZ1obJpCrsYNJD7ZywZX4LyHBa+0Qg+k=
Subject key identifier: 19:19:83:4F:D9:90:B4:8C:C0:4C:4E:75:A9:69:4E:F2:13:1B:61:B2
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 0197B6A20D6E221DCAAFF1B0018FA9801D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0D15
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: JWxSLBuZzBM/03O8xTTq/vuBWv5hZpp1gyv9DHDu6B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0d:6e:22:1d:ca:af:f1:b0:01:8f:a9:80:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=1919834fd990b48cc04c4e75a9694ef2131b61b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:db:a9:12:d4:25:a5:95:16:77:ad:f5:7b:
9f:c8:72:f3:a3:3e:eb:64:5e:9b:56:97:ec:a5:be:
72:69:00:6d:dd:d2:0c:ed:9a:47:7a:fb:e6:ca:50:
dc:6d:37:aa:58:18:37:b5:0c:6e:74:c8:bf:aa:32:
20:f4:17:7b:dc:06:04:76:8c:d2:8a:3f:fc:c7:22:
93:ff:e5:26:47:88:6d:5d:98:31:ec:3f:df:1d:be:
62:7a:20:1d:93:00:95:ea:14:d5:2a:28:6e:f9:fd:
82:be:bf:ae:b0:4e:f9:07:12:d9:ac:62:2e:eb:59:
88:9d:91:92:eb:96:f0:b5:1e:82:a4:5d:25:40:9a:
65:0a:18:11:3e:23:28:ef:06:e6:51:ee:b4:78:c4:
ab:f5:cb:a5:5c:69:73:68:a7:85:d0:2c:2e:bd:9d:
3a:7c:29:f0:e2:f2:34:d4:cd:8a:8e:d4:4f:ed:88:
3f:d5:e7:c1:29:84:5a:29:43:b6:60:ee:5d:fa:c5:
4e:1c:53:ba:f6:77:68:0a:ec:63:79:8a:d5:43:fe:
d7:a7:f7:e4:1e:45:97:bd:5f:f4:85:51:3a:53:84:
7c:f1:d1:3e:17:bf:ac:53:52:be:9e:72:a2:22:f2:
71:29:37:87:9c:d7:8b:59:8a:ef:b5:19:08:5c:7a:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:83:4F:D9:90:B4:8C:C0:4C:4E:75:A9:69:4E:F2:13:1B:61:B2
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c1:f6:21:c3:90:7c:48:6c:8f:11:14:3a:d4:7c:9c:ff:da:
8f:83:ef:42:7a:12:f9:5b:f6:da:ed:45:a1:f2:b4:f6:d5:5c:
25:76:4d:3e:f6:72:d0:50:83:99:78:45:3a:ff:4f:dc:a1:ac:
0e:de:eb:6d:49:f3:56:e7:7a:d5:72:49:fe:33:18:e0:84:61:
f0:53:52:4d:d6:d5:91:6b:69:99:e8:4a:8c:99:8a:3c:e8:09:
4f:93:53:61:02:61:e3:9e:79:47:89:bf:3f:1f:d7:c4:ce:74:
58:c4:fb:58:09:bc:76:0a:cd:62:35:1c:21:04:b9:03:0f:6c:
0a:3b:a4:79:e5:e6:cd:2f:14:10:6c:44:43:38:d1:f8:e2:f2:
74:b2:b3:1a:c7:17:1b:8e:48:3a:24:2a:c3:c4:a4:c7:48:b1:
73:9a:e6:36:d1:a3:a4:e2:11:66:78:71:d2:a1:9f:92:77:93:
81:c9:fa:e5:07:76:76:84:6c:b8:fd:c7:af:5e:12:33:04:8a:
83:08:23:e4:cd:87:9e:e4:11:ad:29:df:5a:ad:f0:44:94:0c:
57:65:40:2e:91:64:6e:f7:e1:21:82:68:55:02:8f:18:db:fb:
5a:7f:5a:5b:f4:e9:fb:ad:8a:d3:a1:72:36:3c:65:ad:78:78:
91:c0:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:19 2025 by rpki-client