Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: RLR0I9DwJrOk7i+K3n+BzzPNx0LnX2aN84tHz3hTGYY=
Subject key identifier: C2:88:2E:B8:AA:4D:FD:EE:58:BD:7A:75:E9:A3:63:E3:7A:41:18:D6
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0197B6A2499DBD55D429FCE8C17CE6042DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: /lHHbIItRUQeq3oofCy31q6Bmmkb9C+2jedmFS4VEFA=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:49:9d:bd:55:d4:29:fc:e8:c1:7c:e6:04:2d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=c2882eb8aa4dfdee58bd7a75e9a363e37a4118d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:e6:b0:b1:fe:de:9c:39:f7:f7:fe:aa:4f:
50:d1:be:e3:a4:91:d4:7f:48:a6:b6:71:2e:6e:9a:
7d:76:ba:bd:7c:c6:9c:6c:fd:ca:8c:11:f2:84:31:
a8:7c:86:07:f4:15:e4:97:ac:55:a2:c5:a1:d4:de:
a3:d5:d4:9f:16:67:7b:45:6d:83:50:b6:ae:24:10:
d4:e7:11:33:e6:4a:d6:7b:84:79:57:35:e1:bf:05:
ac:47:6c:f8:3e:9b:25:0e:1c:2e:91:ea:c9:87:86:
81:8c:97:95:1d:e2:9c:94:b5:9a:3c:80:8d:b6:35:
8e:33:05:fb:11:ac:ab:79:1b:71:51:b1:94:c4:3e:
9d:7b:71:2d:94:3a:81:f6:aa:4f:cd:bb:60:89:72:
a7:a1:1c:92:fb:8c:22:e5:5b:c0:12:86:46:1e:d1:
46:bd:e0:51:35:cc:5b:7a:71:e9:2c:32:16:d3:8e:
3f:f1:8e:17:f1:51:a1:47:9c:e2:67:83:e0:2c:c2:
92:68:c9:3b:26:6e:80:62:41:5d:0f:76:09:d3:4d:
6e:10:d0:1d:c2:d1:4d:9b:cd:c3:e1:aa:4c:2c:dc:
28:85:03:83:7a:47:8e:5b:4f:8a:f2:5e:f7:4c:13:
66:10:bc:a9:15:78:2c:3f:ea:78:51:49:2c:65:ea:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:2E:B8:AA:4D:FD:EE:58:BD:7A:75:E9:A3:63:E3:7A:41:18:D6
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f1:e0:1c:63:56:59:5f:32:a7:6e:0b:4d:52:91:1c:ea:86:
90:7a:fd:f8:25:8c:09:f4:fe:97:57:b3:ba:a9:b9:23:91:e5:
9a:0e:cf:6b:d8:61:4d:25:6f:71:47:d2:a6:c7:71:c3:93:3a:
75:71:f5:f4:95:55:32:10:15:9c:42:6b:55:71:93:f7:9d:c1:
91:27:b2:06:66:8b:c0:4e:8d:90:20:49:c9:5f:f2:69:83:de:
9e:ec:ca:f2:88:df:ea:46:38:97:35:57:b1:1f:68:a9:69:94:
ab:de:c2:ef:3e:22:bd:6b:4e:f6:50:09:da:33:5a:05:a8:4e:
f1:cf:04:89:64:ca:02:14:a3:5f:c4:dd:07:c7:1e:f1:2b:59:
7c:c8:e2:b0:18:d9:27:b7:7f:51:7d:f2:ca:79:07:96:a6:72:
f6:36:68:d5:4c:a5:1d:55:e7:9f:e2:94:88:9a:52:4f:22:05:
1d:3c:0b:bd:2c:42:17:e9:4a:1d:fa:9e:69:47:e7:82:3b:5d:
69:0f:89:13:e8:81:7a:5f:e7:fb:fe:ec:16:33:f4:d3:42:63:
e9:2e:75:2d:30:55:b1:28:a8:1f:47:19:1a:46:a6:0b:13:87:
a9:9a:14:a0:8b:fa:3c:2f:4c:32:2f:4b:f1:af:52:77:f9:b1:
a2:3f:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:19 2025 by rpki-client