Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: Ewh1FefVfktaYcNPASv+/1G7c2Gq23hZF85oewL4VK8=
Subject key identifier: 74:3C:95:07:9E:01:2E:25:3E:DE:A7:FB:6B:FF:72:78:8A:A7:6B:43
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 0197B632FC8D60C383350E76348C84747F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:24 +0000
Manifest this update: Sat 28 Jun 2025 11:01:24 +0000
Manifest next update: Sun 29 Jun 2025 11:01:24 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: RoQveG4GrmA9MpVcDE75phPdWO9e+SzL9F23+1/iI7w=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:fc:8d:60:c3:83:35:0e:76:34:8c:84:74:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Jun 28 11:01:24 2025 GMT
Not After : Jun 29 11:01:24 2025 GMT
Subject: CN=743c95079e012e253edea7fb6bff72788aa76b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:f5:66:6d:3a:8c:ea:af:0e:77:8d:2b:94:
3f:a3:fc:d3:51:cc:61:75:5e:5d:9b:15:67:06:93:
82:d8:09:cc:02:9c:5f:82:06:62:b3:01:c2:e9:e1:
9f:6d:a8:fb:37:ea:a6:c7:75:78:50:03:60:3c:ab:
b6:7e:ce:fe:ee:ae:88:8a:e5:91:e2:b0:f7:d7:91:
2d:99:c7:69:36:e5:f0:89:3f:68:44:01:5b:98:f7:
a3:d7:43:75:46:dd:dd:7b:d3:30:10:e4:e9:3d:43:
77:a1:d8:6e:ee:8f:39:66:0a:4e:89:b6:4f:22:d0:
09:40:0c:3a:9e:5f:62:08:3b:d0:b9:50:b3:4c:24:
09:10:69:2b:01:21:12:e3:32:21:63:db:4e:ab:4c:
a5:41:e4:58:57:b4:4b:07:34:4b:0a:d4:67:7e:5a:
c3:50:bc:10:df:cf:ae:65:80:5b:ab:cd:7f:91:6e:
e8:33:42:64:ff:10:40:09:93:a5:b4:c5:c7:10:c7:
07:2d:4f:85:c7:04:7f:bf:40:e8:ac:6c:18:c6:96:
72:8f:9f:ed:89:7f:e4:ce:04:69:50:44:bd:65:5c:
a8:55:2d:cc:04:00:71:2b:65:84:c0:d2:9a:54:40:
ad:81:78:c8:e3:ca:a0:16:38:8d:5e:a4:30:70:3d:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:95:07:9E:01:2E:25:3E:DE:A7:FB:6B:FF:72:78:8A:A7:6B:43
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:f6:c6:e9:01:d3:30:88:af:8a:d9:0b:37:57:33:dd:02:
2e:54:94:ff:c7:e3:05:bf:74:ef:38:29:3f:56:5b:4f:cc:e7:
b9:cc:4f:eb:e8:b8:69:c0:cc:fd:e7:1b:74:c4:53:07:10:eb:
8a:f2:4e:95:a6:54:96:af:16:52:9b:99:a8:2e:45:fb:b7:3c:
eb:36:8e:61:09:a9:8b:20:a4:9c:f2:17:6a:0d:37:e7:67:a3:
90:7d:e8:71:57:37:85:96:f9:c4:1b:09:16:17:05:0f:0d:ac:
df:88:b6:5c:4d:a3:de:19:0c:dc:89:54:b6:a1:ad:9c:1d:e4:
bd:c8:83:4f:0d:30:49:73:4f:fa:ed:cf:01:cf:86:6b:7a:6a:
0d:e6:72:37:f8:d5:34:4b:50:f9:de:20:48:10:d6:01:f5:6e:
f1:ab:ff:5e:31:d6:ee:bb:d9:96:d5:31:4a:d4:bb:30:fc:f0:
44:d0:e5:c5:81:cb:ad:e2:99:ba:b8:f2:51:3f:af:a0:39:27:
bc:22:19:09:87:97:12:7a:e7:ed:9d:e2:b1:d0:00:69:f0:66:
96:b7:9a:75:c7:03:a4:21:ae:c5:68:94:b8:d7:77:80:37:90:
ac:b5:f3:58:f8:22:3a:62:30:d6:35:ec:c7:08:2d:aa:ab:5f:
dd:53:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:34 2025 by rpki-client