Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: BFpt01fyCjpUCqRjR8YUOK6i8oEPvokNyuoMMA9bnAk=
Subject key identifier: 29:2B:AE:8F:FB:42:A3:0B:EC:37:59:77:F2:C7:51:97:E7:A3:60:AB
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 0197DE8A37052BBBBF3951BFB1DCEC718988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 15CA
Signing time: Sun 06 Jul 2025 07:01:29 +0000
Manifest this update: Sun 06 Jul 2025 07:01:29 +0000
Manifest next update: Mon 07 Jul 2025 07:01:29 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: mmHOZOwTLIAuqHmCK8BQ00trtJ0z/k/RZEBAymTXUnI=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:8a:37:05:2b:bb:bf:39:51:bf:b1:dc:ec:71:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jul 6 07:01:29 2025 GMT
Not After : Jul 7 07:01:29 2025 GMT
Subject: CN=292bae8ffb42a30bec375977f2c75197e7a360ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:8c:03:f8:8a:21:c1:d3:58:5b:77:7e:d6:
56:d7:a6:fc:6d:32:b2:34:3b:36:f4:30:9b:9b:28:
9a:09:35:2c:ca:fc:4f:6a:de:61:45:fa:49:8b:d9:
94:b8:11:33:db:9d:68:1e:49:43:ea:35:9b:17:63:
8e:e4:1a:38:f5:3a:49:6e:e3:4b:59:8f:cf:64:1e:
07:03:d2:2c:5a:a2:37:4b:ec:67:be:f2:b4:9c:df:
e0:68:ac:97:5a:9f:a9:ee:70:6e:4d:a7:5d:b2:66:
61:3f:f4:66:2d:28:7e:c8:00:b6:ca:e8:c1:88:0e:
b1:b3:bb:50:56:cf:bf:97:c5:ba:fc:da:38:88:d5:
cf:62:27:18:17:e2:e4:63:ba:24:c8:7f:a7:78:a5:
77:a3:03:28:d6:89:3e:e1:95:c0:1c:5c:b1:bd:b0:
a4:8b:a6:8c:76:0c:a0:07:db:99:3b:db:22:fc:4c:
71:d0:9e:60:3c:b9:c4:5d:12:01:5f:fb:c5:ea:99:
17:76:72:e1:8a:2d:4b:53:03:39:82:8a:fa:97:2b:
39:a6:40:7e:f7:8a:83:7a:09:d1:13:c3:2d:11:0b:
fd:1e:90:ea:82:58:dc:26:66:84:34:a2:f9:59:fe:
05:11:67:6e:b2:d0:3d:89:cf:32:e9:c0:6f:07:65:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:AE:8F:FB:42:A3:0B:EC:37:59:77:F2:C7:51:97:E7:A3:60:AB
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:1d:66:45:e1:5d:7a:6c:9e:e1:e1:f7:63:16:4a:87:24:
e1:f7:40:4c:c3:07:7c:3a:92:d5:f1:1c:88:7b:0c:d7:65:48:
ac:c0:db:e4:31:4e:cc:be:bc:8d:a1:18:8d:85:37:83:f8:5a:
fb:e5:3b:d1:47:42:7a:0f:30:4d:4d:b1:6e:75:01:e4:03:40:
5b:14:64:7e:1a:75:e6:60:f2:3f:21:9e:51:d5:1f:b1:f5:58:
d5:3f:4b:d1:5d:5d:dc:71:46:cf:32:a4:96:31:e7:9e:06:78:
75:9a:2a:0b:7e:b0:1e:cb:44:48:c8:9f:62:3e:6e:30:9e:81:
aa:e6:3d:2f:0d:1e:f8:f9:ba:d7:ed:f5:83:24:f1:06:99:80:
d0:b7:72:31:35:4c:4a:f9:ab:c2:a1:14:d3:f0:d7:9e:9e:ca:
fe:ba:96:68:83:9d:a0:3f:5c:5e:02:d7:61:4a:e7:a2:79:44:
67:25:4d:9b:45:6c:32:da:4f:6b:67:89:6c:ec:88:51:6c:f9:
10:5f:07:62:14:c8:3f:fc:d8:30:bf:ed:31:70:80:5b:5a:66:
90:24:a6:97:bd:17:af:52:ad:91:4d:a1:d5:56:1f:a9:93:75:
3a:8b:62:93:11:f8:a5:0c:eb:12:ed:cb:72:be:fd:fc:5b:4d:
d2:13:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 09:37:34 2025 by rpki-client