Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: /rs1TpcUAVp7lGzgXl4A/S5DPB0RxypWB4gYPXvRZtw=
Subject key identifier: FF:B2:FB:70:52:F3:DD:6E:54:89:4B:CA:7E:A0:E2:BD:A0:BB:7A:78
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 0197B9D8EADE82FCAA12673312C0DDDCC373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0BA8
Signing time: Sun 29 Jun 2025 04:01:29 +0000
Manifest this update: Sun 29 Jun 2025 04:01:29 +0000
Manifest next update: Mon 30 Jun 2025 04:01:29 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: DYpO/IynnoJuWNWND/hncclgY3VOrmhK96BQBVDws0o=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:ea:de:82:fc:aa:12:67:33:12:c0:dd:dc:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jun 29 04:01:29 2025 GMT
Not After : Jun 30 04:01:29 2025 GMT
Subject: CN=ffb2fb7052f3dd6e54894bca7ea0e2bda0bb7a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7d:81:62:c0:ad:54:44:49:d2:05:c9:30:9a:
21:a1:a4:f4:4b:c2:f8:af:4f:db:e5:8a:4b:8c:f6:
40:e1:0a:ad:9c:3e:42:7a:26:dc:01:e1:3c:78:10:
38:a2:b1:96:37:07:c4:a9:62:0f:d8:34:25:af:7a:
83:4f:26:79:27:34:8d:af:a1:f4:38:21:55:d8:ae:
3f:51:8d:1c:b8:d7:03:4e:00:c1:ab:a1:83:fe:00:
08:19:9a:a3:38:2e:f4:cc:65:95:00:26:4a:2f:1b:
76:ac:a9:55:8d:c3:53:dc:0d:f3:82:e1:7a:22:b9:
d9:0d:8f:19:ac:30:b9:56:d2:e3:d9:1c:35:02:9c:
06:b7:68:05:24:bd:c5:f0:b5:fa:76:f5:12:9a:5c:
4e:65:a9:40:c4:ac:23:12:58:4c:65:3b:24:b9:e6:
88:09:9c:2c:cc:f6:2d:56:ea:56:6d:76:21:1e:32:
17:85:ca:74:0b:66:a8:b7:92:6e:f0:61:83:53:60:
37:9a:2f:87:c9:a6:e6:ef:e4:97:40:75:f2:df:71:
03:4f:64:ae:a9:37:42:dc:8b:fb:99:a9:31:ea:b6:
59:c5:a5:46:17:3a:39:f3:35:27:ce:4f:42:3c:58:
6a:1c:a5:08:ba:e6:24:d7:53:84:8b:02:d3:fb:f1:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:FB:70:52:F3:DD:6E:54:89:4B:CA:7E:A0:E2:BD:A0:BB:7A:78
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:3e:a6:3b:2d:d6:7d:8d:80:f2:19:6e:4b:c5:3a:f9:b8:
ea:7b:94:4e:9a:77:90:9d:ed:48:9f:8c:28:b5:78:e8:ee:fa:
29:b6:b5:4e:f3:14:bd:58:b4:97:e4:48:be:2c:56:4a:b0:fc:
60:55:07:ac:8b:f6:5f:bd:f9:a0:23:f3:75:55:64:58:a1:73:
9b:2b:16:81:c5:e4:d3:a9:fb:95:2c:1b:72:30:f2:36:2c:e3:
95:88:ef:a0:13:46:ef:16:c6:07:6d:e3:6a:5a:32:9d:86:ea:
9e:a6:e9:3a:ac:b8:00:96:db:7b:97:d9:cf:ed:cf:14:1a:f6:
05:47:12:77:d6:b2:0c:95:8a:b4:75:6d:85:4d:c3:7e:4d:53:
89:24:d7:f5:0f:65:0a:b0:1e:e0:c2:32:10:e2:63:60:98:20:
ce:60:c9:2e:d0:b5:8e:f5:5d:7a:11:c9:dc:a0:78:a9:2f:70:
99:e2:35:60:30:00:81:c5:a1:a8:dc:4c:3b:09:88:0e:fa:45:
32:7d:ec:a4:b4:69:b0:e3:1c:4d:df:49:83:0b:e3:3c:d0:92:
a7:e4:ab:71:2b:6a:36:67:25:9a:0a:81:15:17:23:41:6d:39:
7f:34:60:88:36:ba:06:2c:16:f3:41:22:55:26:52:cf:f9:d3:
38:d1:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:41:01 2025 by rpki-client