Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: 7tCm4RBlJjfbq5LEKZ0FmuzQcEmJQk/TcBcql6B2W7k=
Subject key identifier: 8B:43:31:4F:1E:3E:55:DC:2F:C2:D4:B6:58:68:DC:B2:21:C8:43:91
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0197B7EA4E35410B2D3911B03CCEBB3D75D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 067C
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: qYcpn61M13DfH4dpon1OYr0Xhps7Ls+QV/4u53zCEZs=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4e:35:41:0b:2d:39:11:b0:3c:ce:bb:3d:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=8b43314f1e3e55dc2fc2d4b65868dcb221c84391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:dc:60:67:4a:eb:63:da:14:72:28:d5:1c:
f0:e7:a8:d8:41:5c:f4:98:57:f6:d7:57:2f:86:e6:
5d:98:f7:d0:e0:46:2b:10:fe:1c:95:7f:94:34:1b:
4a:a8:2e:9c:6e:f2:93:ce:c0:65:ec:de:f9:bc:3c:
0b:84:d6:ef:a9:a3:fe:59:d4:f3:fd:69:86:7e:fe:
41:a1:82:44:24:7f:3d:c6:69:aa:d1:36:89:62:e6:
2e:30:4f:7e:c7:8a:c7:a9:86:48:7f:8d:b2:bb:72:
88:de:42:28:78:a8:eb:52:e5:75:e8:93:28:a4:79:
5c:a7:b8:36:13:55:21:69:3f:fe:42:77:38:f5:db:
44:a4:35:18:91:a9:81:c6:58:07:1a:ee:7c:d3:c9:
8e:f3:23:74:a9:be:9e:4e:c8:76:1c:95:42:33:7c:
4c:c8:69:ef:a6:e7:e5:22:26:58:46:72:da:ec:fd:
07:16:d8:d8:1d:8f:e6:cc:cd:c2:f2:f3:04:bb:a7:
7e:73:52:f0:45:d0:8b:92:51:58:fc:2a:05:25:44:
11:fe:b7:3e:cb:9a:e5:26:a3:91:08:f2:16:1b:ea:
b1:30:02:24:85:2a:43:dc:5d:90:58:0c:c5:8f:7a:
ee:6e:08:85:7e:60:bc:aa:1e:15:5d:b3:22:b6:9e:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:31:4F:1E:3E:55:DC:2F:C2:D4:B6:58:68:DC:B2:21:C8:43:91
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:fa:50:c7:41:b0:f1:2a:1a:fc:c7:9b:9e:d1:71:11:24:
3c:e5:c4:7d:77:83:5d:e9:c1:50:60:23:4f:e5:ed:22:33:80:
3c:11:af:60:6f:be:93:ba:a4:6b:f9:d8:9b:33:d1:3a:38:2d:
7d:95:74:45:cf:d6:5b:67:88:37:d8:04:f0:75:ef:d0:2b:d1:
6c:7f:c4:c6:05:d3:ea:dd:de:ee:e8:5c:70:ea:e7:cd:e4:7d:
c8:bb:27:e5:9a:6a:24:57:9d:02:e8:68:98:64:97:21:31:53:
c1:c7:03:c0:44:5a:c0:ee:e5:8e:10:7f:75:63:60:04:d5:59:
67:82:1c:7e:63:bd:ca:4f:32:04:d8:0a:73:00:ed:b4:f5:51:
4a:5b:f9:a1:e2:0a:0f:6b:2f:2a:2c:66:c7:50:09:39:76:5f:
3b:f1:df:91:67:0c:63:23:d8:e4:f9:fe:f2:19:1d:f1:05:f3:
6f:55:e4:dc:06:43:82:6e:89:5a:63:4f:e8:e8:59:da:d2:6d:
47:de:19:80:56:90:5a:46:f5:c2:f8:04:c3:ac:85:77:09:40:
72:06:a5:85:21:83:c6:c2:3b:1d:20:f4:19:7f:b1:70:ed:ce:
bf:fd:b0:20:44:e9:ea:ba:43:6e:42:64:4c:b5:b4:7c:bf:36:
ab:07:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:17 2025 by rpki-client