Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: Jj9PIVTPFy5yREkNxNkvXVjcUa2uAmcXwVQ7j94WHZA=
Subject key identifier: AC:A3:17:30:45:45:48:2B:34:A2:0D:30:AE:DE:A6:15:4D:1B:4C:84
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0197B890134E7EB45E29CD1D17EE712A7F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 07F2
Signing time: Sat 28 Jun 2025 22:02:19 +0000
Manifest this update: Sat 28 Jun 2025 22:02:19 +0000
Manifest next update: Sun 29 Jun 2025 22:02:19 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: EFiOinmQB3WOFUGqqznkPNsocvL0/rVDE9pRAxDx7B4=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:13:4e:7e:b4:5e:29:cd:1d:17:ee:71:2a:7f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jun 28 22:02:19 2025 GMT
Not After : Jun 29 22:02:19 2025 GMT
Subject: CN=aca317304545482b34a20d30aedea6154d1b4c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:d0:5b:3c:28:cf:51:3e:83:90:10:9b:a8:
03:64:ed:d3:3c:c0:74:26:41:5a:ff:2b:9f:b7:c3:
79:20:ab:4e:ed:3b:12:3e:7e:17:61:5f:64:a4:db:
20:f8:f0:0c:25:f9:7c:55:cc:91:8d:50:9b:c5:b9:
52:35:c3:02:2e:5a:fa:7f:f3:02:97:43:c5:bf:6f:
4f:22:9c:c8:ad:44:e0:bc:d3:77:d4:e8:b4:74:3b:
0c:d8:16:76:06:77:a9:c5:7a:3a:45:20:18:33:a4:
e2:8f:bd:27:24:f3:9e:67:7d:04:da:61:76:9e:91:
78:51:e2:7d:bd:6d:4e:2b:64:55:07:bd:da:5c:f1:
57:fa:74:e8:2e:6b:95:e5:9b:69:35:a5:50:fd:26:
04:02:15:ac:b9:e3:b0:ef:18:88:e2:9c:b7:7c:c1:
b0:95:e1:88:a9:a6:8f:64:02:af:5c:0a:c1:32:5c:
c5:24:54:10:4e:3a:5f:92:aa:0d:6d:fc:58:24:7a:
f7:69:2e:71:32:51:37:55:30:53:5e:0d:8e:3b:46:
52:4c:bc:16:88:b3:0a:32:a1:1e:d1:19:27:31:31:
c5:26:b8:8e:47:72:c7:db:ac:08:e2:37:51:35:e8:
a5:9f:19:a5:f1:b2:0e:b1:2c:f1:67:f1:a4:c6:89:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:17:30:45:45:48:2B:34:A2:0D:30:AE:DE:A6:15:4D:1B:4C:84
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cc:b5:0b:2d:17:61:09:4b:40:0e:eb:a6:88:89:05:1b:de:
38:33:63:5a:da:29:6c:36:6a:fc:2a:01:ce:a0:f4:24:4a:91:
00:e2:4a:86:2c:f4:67:2a:97:3b:cf:07:bb:c8:fd:4c:11:5f:
13:61:db:eb:2a:46:21:fa:2c:e1:05:5f:1c:d8:e0:05:26:df:
f8:88:32:84:b0:97:e0:6d:7b:ea:51:46:d1:f3:e5:24:9f:e2:
36:e3:43:0b:0a:67:9c:13:ff:1a:a2:56:b1:67:eb:6c:d3:9f:
35:27:ae:d8:04:a4:56:b3:df:0a:35:5e:36:5e:ea:d6:18:95:
63:3f:ee:8b:16:97:63:10:a3:1e:d8:7b:d2:83:5f:53:32:81:
a8:12:50:57:e1:c8:7f:1f:bf:21:75:47:de:a4:fa:07:92:93:
f4:85:30:80:51:94:b2:54:63:1f:64:db:74:62:12:47:2a:fd:
2c:5e:7f:63:ce:5a:8a:f3:a8:d1:5c:04:29:61:59:4a:34:88:
2a:35:dc:39:bf:23:19:03:4a:fb:33:67:9c:d7:5f:5a:e8:4f:
87:b7:18:cb:eb:87:92:c3:77:26:cb:ad:c7:0c:77:26:45:d4:
64:a7:ed:1b:bd:6d:cf:91:73:66:1d:f0:6e:de:27:46:99:e1:
07:7f:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:40 2025 by rpki-client