Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: mq3FR+PyBecy5TYuhONtO92TrWYLwbtFZUynltuvUis=
Subject key identifier: 2F:4D:4F:5B:63:E8:D7:B9:47:AE:40:72:81:27:8A:0D:8F:73:92:C6
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 0197B6D740F222A9B00A90042177096CEA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: dweAqWVIRJrBgdR4prxJvyeF4gv1idvtfmjz1Z/7cgM=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:40:f2:22:a9:b0:0a:90:04:21:77:09:6c:ea:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=2f4d4f5b63e8d7b947ae407281278a0d8f7392c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:e8:c1:a5:77:de:74:d7:1b:ac:e4:b9:48:
d1:ce:6f:67:90:04:59:5a:53:78:6a:66:cb:d0:53:
f6:39:98:cb:4b:96:ce:92:da:39:c7:03:3a:bc:4b:
a7:85:ad:84:59:34:d0:ff:27:ba:fc:65:4f:ff:83:
55:4d:e4:4a:c5:63:65:09:3f:91:6b:a1:d3:7e:d9:
f7:da:02:3d:3a:46:e5:4b:67:c8:93:e7:ab:ae:85:
64:ad:5b:f0:e2:8f:5d:32:08:8c:be:9f:41:10:2e:
40:63:0e:da:ff:96:dc:57:14:d3:e9:c6:3e:13:16:
33:85:df:74:65:ac:bf:4b:19:b5:a9:0d:ac:0a:d7:
4f:ae:c6:6d:d5:de:e0:41:f2:3b:b6:ab:ca:a4:a0:
b8:a2:8b:82:1e:50:ca:4d:70:34:6c:23:f5:55:3e:
02:de:03:fd:06:62:d1:18:b8:76:1c:b6:13:83:7a:
12:2a:71:bc:a4:c6:88:d5:da:f3:ca:e8:ec:5b:9d:
4b:b0:41:00:2a:3d:6d:21:ed:81:76:b6:7c:96:62:
2f:38:7a:47:e9:0e:f8:3e:cd:db:be:4a:36:d2:f8:
ce:4a:1e:e9:59:f2:6e:f9:50:f5:9f:f4:30:1d:a2:
82:dc:b5:19:59:bd:87:43:51:fe:47:21:ab:30:7d:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:4F:5B:63:E8:D7:B9:47:AE:40:72:81:27:8A:0D:8F:73:92:C6
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:ac:29:e3:4c:51:ee:ff:c6:18:7d:70:35:0b:4b:9d:66:
62:7e:db:ac:6c:2a:97:0d:6d:7b:f0:62:f8:3a:ac:4e:1e:e9:
9d:7e:f6:80:b1:12:88:46:f5:fb:30:4e:48:d0:c2:c6:9e:bb:
4a:0f:3a:25:15:16:ae:b5:4c:ff:1e:95:ef:d7:fa:53:2c:fe:
9b:db:f6:67:3a:35:51:bf:0f:aa:45:f0:f3:23:75:bd:7c:1f:
96:09:b3:04:94:71:20:c3:6e:1c:ea:e5:c9:f2:76:fa:79:cd:
7a:88:26:05:4a:43:15:e0:1d:6f:63:11:77:8f:34:0f:e5:da:
ce:c1:11:33:c3:75:1d:51:7a:08:3a:f7:5d:e8:7d:f2:ee:4a:
05:5d:43:ab:aa:30:14:b1:19:05:a6:66:7c:58:74:7e:5e:ef:
06:f1:bf:6f:7f:53:cd:96:49:91:b8:fc:1b:1e:c0:85:ef:75:
7d:aa:a5:4b:a6:4e:92:79:9a:67:87:94:4f:80:48:3d:15:73:
3d:23:0a:82:d5:fa:06:e0:2a:d8:3e:68:53:7b:0e:80:3b:0c:
64:62:03:8b:66:95:6f:32:49:a3:7e:c0:9e:13:53:80:1c:5e:
40:ff:a5:aa:5e:b6:10:50:ed:21:44:ad:33:87:d6:fe:ce:0c:
4a:0d:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:02 2025 by rpki-client