Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: 2ugfcgR8AJ6KiFv78sWbWy8rL8crrrQq6ntcyIFYXPc=
Subject key identifier: 00:70:AD:87:81:CF:A9:84:69:DC:4D:96:39:DB:37:85:06:B4:CC:1D
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 0197B5FC89B093E73F0DCD282EE7D41ACD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 03F3
Signing time: Sat 28 Jun 2025 10:01:55 +0000
Manifest this update: Sat 28 Jun 2025 10:01:55 +0000
Manifest next update: Sun 29 Jun 2025 10:01:55 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: quVz3v9wZD8gWRmJb1ozhMinsLu/6WaEwmUaaBYulOE=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:89:b0:93:e7:3f:0d:cd:28:2e:e7:d4:1a:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jun 28 10:01:55 2025 GMT
Not After : Jun 29 10:01:55 2025 GMT
Subject: CN=0070ad8781cfa98469dc4d9639db378506b4cc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:fb:29:42:4e:39:87:fc:ae:d9:ea:65:1f:
ae:ac:1b:6c:4c:d0:5f:35:8c:a9:b3:15:7a:28:f5:
bc:f1:fe:86:ad:6b:ce:07:99:51:8f:2d:16:4d:69:
d3:08:81:2c:27:f9:f7:62:96:eb:04:eb:fc:27:f9:
03:a7:b7:9e:32:0e:fe:7d:a6:29:b8:11:00:d4:7d:
39:38:26:01:cd:ce:0e:38:bb:9c:5e:43:9a:c1:2e:
68:7b:dc:a9:82:23:b1:d4:ed:49:10:99:6c:38:1e:
50:49:5a:cf:ec:40:a9:17:67:e8:ae:5e:3d:4b:50:
1d:ee:7c:c6:e0:13:84:13:55:39:1e:34:e2:d8:d6:
b9:7e:51:2c:c3:6e:bc:3a:71:cf:ed:61:47:31:44:
bf:57:be:d8:34:e8:aa:19:3d:0a:51:6b:a2:ec:0e:
33:61:01:f7:4c:7f:d9:39:69:0d:76:3b:a4:6f:26:
8d:76:66:6b:eb:61:f0:f8:57:2f:57:89:e1:b2:39:
ef:80:94:a3:c4:91:31:b8:0c:ea:a6:26:28:9d:0b:
a0:c0:3e:a7:e3:4a:d2:5a:d8:1f:4a:c2:7e:25:3e:
71:11:07:56:ea:79:51:be:4f:fa:bf:3c:2b:7b:d0:
be:51:3c:10:a6:4c:cb:51:16:ff:97:51:32:4d:b3:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:AD:87:81:CF:A9:84:69:DC:4D:96:39:DB:37:85:06:B4:CC:1D
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:90:10:20:5f:7f:21:97:1b:85:4d:b8:a6:2c:6c:6a:e1:
8b:cd:2f:22:31:e8:64:fa:b2:48:1b:bb:f9:3c:51:ce:0e:5d:
d9:4f:f4:2c:0a:81:ee:60:74:8e:71:09:ee:7b:be:6d:6a:ee:
5f:5e:01:fa:67:56:76:ad:a4:4d:33:a1:65:4d:8e:46:37:4b:
01:c6:0d:7b:63:03:a7:b5:d5:00:e0:56:0c:90:4c:94:1a:5d:
d0:3a:55:6f:f1:25:18:b4:20:bb:7c:e9:34:a8:c0:c2:fa:71:
92:63:a3:8f:f7:67:af:ab:54:e8:6a:25:44:b3:8a:6f:d1:75:
b4:38:99:7b:a1:07:69:03:eb:06:c9:c4:07:0c:f1:a6:12:69:
71:87:47:b9:01:6d:1c:2f:46:85:f8:13:ae:2a:28:fd:e0:eb:
d3:4b:67:62:b7:19:31:39:04:0c:af:33:af:c5:ee:5c:ab:c7:
d5:ab:34:cf:8a:97:1b:e2:3f:64:20:be:0c:13:05:26:73:ac:
48:b2:d1:61:47:9a:dc:02:04:24:ae:9c:cd:7f:bf:fe:c6:16:
34:87:a3:ca:8e:6c:2b:84:18:9f:40:0d:7c:35:ad:9b:f6:4e:
07:66:11:08:21:1d:cb:e5:0b:6e:33:b1:67:74:70:95:4f:6a:
4e:c0:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:45 2025 by rpki-client