Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: /WpLJF1M51M6BA019fBtQiTSJtbDje19wGHVXB8Puqc=
Subject key identifier: 87:E0:77:FB:C3:2D:77:E7:6C:AF:6C:D7:AE:A0:CF:63:D9:0F:0E:23
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 0197B7EACC6BAECA6C51319649D7905784F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0896
Signing time: Sat 28 Jun 2025 19:01:47 +0000
Manifest this update: Sat 28 Jun 2025 19:01:47 +0000
Manifest next update: Sun 29 Jun 2025 19:01:47 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: z/REBbrBuvF04mur+g7e+DDjIOaUd0hHxqvj3xJO5kI=)
2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:cc:6b:ae:ca:6c:51:31:96:49:d7:90:57:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Jun 28 19:01:47 2025 GMT
Not After : Jun 29 19:01:47 2025 GMT
Subject: CN=87e077fbc32d77e76caf6cd7aea0cf63d90f0e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:54:fc:8a:f2:34:b9:68:2c:3b:84:33:51:
b2:8c:50:26:0c:2c:dd:7c:c3:05:ad:c7:e6:71:2f:
c4:d4:37:bf:c3:33:7f:a4:29:79:72:2e:74:da:57:
12:08:cb:c5:85:a0:2c:80:14:ca:5b:47:2b:bc:87:
7c:db:9a:90:a8:fb:e7:08:66:cb:5a:1c:33:28:2b:
35:4b:2b:64:96:4b:ed:2b:39:0f:ee:08:4a:6e:51:
0c:2a:e7:9b:14:1a:3b:12:d5:91:32:0f:98:04:31:
f8:10:59:9f:c7:6b:d6:ab:c1:2a:9d:92:ed:62:1a:
04:49:01:ee:0e:61:5b:43:11:56:0a:8d:a5:77:a5:
f2:62:8e:62:16:0c:4e:1b:3c:09:ca:82:d6:03:6c:
4a:7f:ef:f7:c2:17:3a:da:7f:3f:21:7c:ac:fe:18:
82:16:2d:1f:90:b4:da:d3:25:6f:65:4c:45:60:6d:
7b:27:bd:74:a5:fa:85:9d:49:62:bb:0d:f4:a8:1f:
da:c1:89:65:7e:08:13:f2:6a:57:fe:a5:eb:09:76:
65:1e:19:56:7e:5e:95:b2:4c:ca:e8:6b:84:ba:20:
9e:1f:58:c3:66:60:ef:d6:49:4b:4e:7f:4b:ef:65:
49:4b:c8:78:20:b7:da:29:53:40:6a:25:eb:48:9b:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:77:FB:C3:2D:77:E7:6C:AF:6C:D7:AE:A0:CF:63:D9:0F:0E:23
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0f:f4:82:e3:a7:45:cf:78:d1:58:9d:94:9f:49:a0:de:ae:
7f:73:6a:82:64:60:33:ed:ed:4e:9c:44:80:43:cd:ca:4f:8e:
82:ab:f8:65:2c:90:f0:4b:32:37:d1:62:f1:13:b0:d7:e0:23:
12:e6:ca:12:3e:32:47:cc:34:8b:84:ce:60:a1:d5:c9:53:3d:
c6:3e:a3:d7:1d:d2:2a:ce:c4:91:e7:62:9f:9c:a0:2e:7a:77:
81:61:af:e6:ee:06:9d:f9:86:9a:51:17:bd:b7:12:03:60:df:
22:03:c5:b0:68:7f:f3:fc:e0:3b:bb:be:90:31:15:4f:39:c4:
67:a2:44:70:95:71:4d:2f:57:db:e9:b5:20:49:88:09:14:ac:
fe:5f:76:80:b6:f7:7b:cc:a5:bb:b4:3f:d9:ce:31:db:9a:9a:
a3:ee:57:3f:05:8f:a5:9d:4c:86:fc:64:70:6b:e5:f5:ad:8b:
7d:b1:15:23:24:36:74:1d:dd:1d:a1:60:0f:a6:28:75:3f:61:
c0:f0:85:83:ab:dd:9d:c8:a2:08:16:15:b7:d8:d0:e6:ae:14:
0c:02:56:00:b7:90:d8:48:6e:7d:53:0e:e4:cc:e1:fd:2d:48:
e7:d1:49:84:53:f6:8a:13:04:fc:39:f2:11:a4:c3:75:07:67:
18:89:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:01 2025 by rpki-client