
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: pyv6aFgVPVbRUAv1W7oGBqChlDn7SJZqLJRl8AZx0uc=
Subject key identifier: 6A:70:8E:F7:D7:EE:7E:48:33:E8:4F:DF:9E:00:DA:F1:9F:6D:B3:55
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 0197B88FB321B49D22181B22558B890C9E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 54
Signing time: Sat 28 Jun 2025 22:01:54 +0000
Manifest this update: Sat 28 Jun 2025 22:01:54 +0000
Manifest next update: Sun 29 Jun 2025 22:01:54 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: s2b/EiZcug/+GtkfJ/jobnHAMcycLEsI1RK3LxKyxZg=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b3:21:b4:9d:22:18:1b:22:55:8b:89:0c:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Jun 28 22:01:54 2025 GMT
Not After : Jun 29 22:01:54 2025 GMT
Subject: CN=6a708ef7d7ee7e4833e84fdf9e00daf19f6db355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:d2:58:ff:4c:86:8a:f8:ad:59:72:30:bf:
fb:29:ca:d4:ec:46:bd:2e:04:65:a6:99:e5:41:2e:
01:e0:d1:72:b9:f4:bf:6b:d0:0e:7f:61:16:ec:94:
cd:43:74:eb:d2:9f:c4:65:79:44:83:18:c9:97:ee:
d5:4f:41:4c:8a:f7:71:41:20:a6:1b:6a:7e:f2:95:
6c:fa:4a:59:39:76:b5:62:0a:a7:91:40:c8:0e:e3:
65:b7:c1:fd:1a:4d:37:a4:d6:8a:84:c4:dc:2b:a7:
16:c3:b9:45:a2:bc:28:f8:6e:45:f0:e6:83:2d:00:
77:71:1b:59:f8:d2:4a:d5:38:9e:aa:7c:ea:69:9d:
e0:e6:6a:2a:f2:77:40:18:47:1d:96:6e:98:d2:5f:
86:63:f1:b2:aa:ca:9b:51:22:c8:4f:6b:a8:ad:fe:
41:4c:84:7a:2a:fd:3b:6e:7c:08:21:00:81:95:85:
c5:0f:af:02:6f:f0:3c:b2:9b:c3:59:be:62:11:62:
ed:14:35:66:54:75:7d:81:ea:71:c2:f0:bf:1e:8b:
05:e9:dc:ea:ee:25:55:ae:1c:06:35:a7:de:13:4f:
79:51:19:16:e3:53:89:2c:64:d9:6c:5c:12:7a:3f:
f6:d5:be:0a:bf:fa:ea:77:0b:39:00:ef:6f:12:ec:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:8E:F7:D7:EE:7E:48:33:E8:4F:DF:9E:00:DA:F1:9F:6D:B3:55
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:11:7e:28:3f:ff:e5:ec:97:59:25:a2:d1:8a:5c:09:b1:
2c:13:21:21:5a:50:1a:07:b4:7a:9d:31:f7:aa:a7:2b:38:c9:
a4:a7:d6:71:e3:61:74:2a:95:2b:8d:09:ad:5d:3a:d5:3d:1e:
3b:05:b6:7e:3f:28:ed:94:71:69:af:7c:12:b6:57:7d:5b:af:
f3:b9:02:f5:5d:be:b2:84:1f:74:f3:c2:71:45:d1:e1:21:24:
f3:04:96:c5:41:6a:68:1d:a5:aa:ab:11:da:4b:af:d2:fe:7a:
36:a8:bd:6b:68:14:46:eb:35:24:18:42:bb:dd:81:92:9f:de:
10:dd:c1:4c:6a:20:86:6c:b7:99:72:74:c0:18:4a:e9:2f:67:
9f:c0:ce:03:d2:03:54:4e:d5:aa:88:bb:98:f6:64:07:48:fd:
a6:33:72:ce:72:22:bc:5a:5c:b8:48:da:b2:35:27:71:f2:a8:
da:5a:cb:02:b4:18:ce:71:51:9e:0c:2b:4e:53:a9:6b:d8:ff:
dc:de:57:24:85:84:f9:01:12:91:9d:11:d0:4c:08:56:4f:a0:
1f:9d:42:a0:d9:00:6f:67:e7:8b:00:e9:48:1d:32:29:5d:33:
0a:c6:44:13:3e:35:f5:23:fb:1f:46:84:b4:cb:11:bc:14:27:
24:e9:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:04 2025 by rpki-client