Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: +Wl0q4Crs03Qdsz8AcweJLjz/RKBoKF695fJ8g7jk6c=
Subject key identifier: D6:5A:18:C8:B8:4A:93:89:A2:F1:5C:62:E0:09:36:AE:A1:26:FB:21
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 0197B70EAE55D8AE2B047813209D70CEB2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 120C
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: IGRqfnXCc7s7ImR07QsjWvCRm0/dDzEFtT5oMzeSH6k=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:55:d8:ae:2b:04:78:13:20:9d:70:ce:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=d65a18c8b84a9389a2f15c62e00936aea126fb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:fe:de:b8:a0:8d:a5:00:fc:b1:f8:45:b2:
4a:45:96:f6:18:5d:5a:ad:aa:46:a2:fd:8e:62:ef:
24:ba:fb:48:3e:d3:7b:87:59:12:31:a9:a9:f7:b5:
ba:ef:9f:c1:e0:10:b5:f5:d5:74:73:3d:2a:32:96:
76:6a:1c:24:b0:75:ca:46:4a:01:11:52:22:88:5c:
50:12:3a:3b:9b:8b:54:c5:cf:2a:f7:d9:d3:79:11:
a0:e9:76:a0:eb:2f:b2:79:5d:5f:a0:67:fc:99:2c:
f3:bd:a9:82:15:56:4d:1b:8a:5c:68:79:b4:ea:bf:
86:b7:8b:3d:50:dd:cb:5d:c3:e6:ff:82:5b:c5:eb:
ae:c1:20:5a:58:0b:2a:da:41:9b:2f:c0:15:f1:01:
a9:22:a3:3e:c3:52:0b:0f:95:4a:ef:33:98:87:d0:
35:a9:9f:9c:2c:97:7f:7c:9b:60:6b:93:51:1f:11:
ad:54:6f:fd:85:90:be:ba:6d:26:df:a6:83:75:17:
1a:1f:3a:86:a8:fa:26:8a:40:08:64:5d:0b:7d:f1:
7c:d7:8c:43:55:5b:6e:1e:91:09:91:79:92:cc:73:
6a:bf:2f:40:27:ca:56:02:81:f6:bc:cd:0e:1a:76:
44:b7:8c:99:7f:6e:1c:5f:a5:dc:2e:7f:cb:ce:4c:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:18:C8:B8:4A:93:89:A2:F1:5C:62:E0:09:36:AE:A1:26:FB:21
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:a3:eb:8f:49:8c:62:bc:b4:5e:eb:1b:44:c6:26:90:c2:
48:83:b5:98:3c:a1:ad:71:7c:66:48:be:1c:8b:b7:4c:84:27:
ec:a8:d6:ac:e6:3f:6b:72:b9:21:d1:94:a1:82:98:2e:32:df:
19:f0:49:14:38:3a:a4:18:76:96:7c:1e:86:e4:3b:2f:88:a3:
77:89:c3:07:f1:95:7e:92:d7:ca:5d:f6:f3:43:41:c2:34:bb:
4e:b8:f3:ce:a7:39:33:32:94:ba:80:1b:17:f4:ac:71:ee:58:
a3:5f:3f:6d:26:5d:0f:8d:62:b1:99:7d:66:79:98:83:fe:52:
78:f5:b9:e2:c2:14:f9:05:31:c0:e6:40:04:a4:75:55:b1:c9:
4b:ff:b4:f2:50:55:c4:a4:3f:cc:60:17:fe:c0:68:78:9b:a2:
d2:7c:fa:17:e1:a7:97:5f:59:87:a9:4c:58:8a:6b:a4:c7:aa:
2d:b5:fe:84:4c:0f:29:a9:59:e1:10:73:86:b5:ad:6e:5c:5f:
4e:ad:9a:77:86:7d:94:c1:5a:02:6f:98:b2:ef:2e:68:bd:77:
85:27:09:11:88:15:b0:a8:c8:fa:c9:fc:08:78:54:e0:87:9b:
4e:98:cd:8a:6c:52:b6:40:dd:a8:8d:cc:ca:02:ba:45:1c:85:
fb:f7:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:17 2025 by rpki-client