Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: sgoyWW+A5XbRVSeR0USldVnQkpK2HxvVw5xnuPYK44Q=
Subject key identifier: 02:D9:1F:E3:4E:0A:74:D8:9C:E2:F3:9E:D5:C9:E7:8F:05:F1:A3:9C
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0197B7B3319CA4F6B3E46A713B722355E01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0C43
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: uakoYSCijVuPCO2szFjX/7EFeNtKLolpeIyFl8Gl02k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:31:9c:a4:f6:b3:e4:6a:71:3b:72:23:55:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=02d91fe34e0a74d89ce2f39ed5c9e78f05f1a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:67:ef:e1:0f:5a:2d:9c:4c:84:98:2e:5e:
d9:9d:81:a6:b8:06:31:fe:3b:57:10:8d:24:2a:53:
4f:f3:c4:e9:ec:40:6d:ad:95:3f:51:04:12:5b:26:
af:19:c0:f4:3c:a0:59:d4:01:cc:12:74:b9:d5:f0:
1c:b6:82:09:91:67:f0:13:d2:13:e3:03:b8:e9:5d:
c7:0d:4f:da:64:8a:a8:e2:ae:0a:ce:a1:a2:e1:8b:
28:49:e0:46:89:fd:94:b4:36:30:6b:b2:ad:7a:de:
9f:f6:17:fa:9d:5b:85:a4:7e:05:3d:5b:61:3a:a0:
62:6b:05:88:29:bf:b8:a8:c6:55:bd:69:d1:1f:cb:
50:ad:fe:f9:bf:16:71:9a:45:6c:1c:6a:77:0f:3f:
40:46:09:9a:4a:e9:8d:5b:ba:90:70:9d:89:23:58:
66:cf:b8:e3:41:12:59:01:f3:2a:9b:89:06:75:84:
d8:95:c2:fa:44:1f:30:74:7e:a9:c8:9c:09:65:fd:
d6:62:5e:23:ea:b7:ea:4c:92:68:b4:c1:a6:56:1c:
75:3e:cd:e4:47:1d:2c:82:41:31:aa:20:f1:b3:65:
c1:c7:51:64:31:65:0f:b4:ed:47:58:3d:d8:95:4d:
87:a2:5d:3f:04:a5:24:c0:89:e2:81:52:9c:78:3e:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D9:1F:E3:4E:0A:74:D8:9C:E2:F3:9E:D5:C9:E7:8F:05:F1:A3:9C
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:a9:e4:3e:da:bd:a9:89:d3:a5:92:57:d4:70:a7:23:43:
0f:f9:5e:03:9d:70:32:9e:64:b3:e4:d8:dd:2c:1b:15:85:6f:
11:93:ca:6e:c1:e7:20:50:23:ad:76:3e:d3:7d:75:50:7f:7d:
c9:fd:ab:4e:2b:0b:25:ac:27:45:b2:20:4b:83:42:34:f5:7c:
eb:b5:72:cc:4d:87:31:34:0f:b0:76:b9:d2:38:05:cd:4e:02:
4f:a4:b9:50:a0:14:96:2b:8d:6e:b9:d9:88:0a:77:2e:28:3a:
4f:61:71:aa:ca:63:53:43:55:fd:80:94:53:c6:92:c8:56:ed:
1d:d9:1a:d0:b7:5c:6f:a1:30:69:3e:49:bd:79:cd:33:d4:0d:
8e:97:52:96:da:97:39:de:2b:c9:6d:b3:72:a4:a4:38:6d:46:
0a:65:4e:81:e2:9f:5a:dc:e3:89:46:83:73:fc:a1:11:a7:a6:
a8:2f:20:a3:d3:6e:db:4f:ea:d5:9b:54:1c:20:8b:e2:85:25:
7d:d2:19:de:70:11:d4:57:86:27:56:2d:b6:90:f4:f7:a0:7d:
53:3b:e3:dc:0b:98:3c:f0:ba:36:d5:ab:d4:c0:6b:a6:00:2c:
77:95:d1:e0:29:1f:f3:c9:47:7a:bd:10:dc:39:01:f9:b3:e1:
4c:af:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:44 2025 by rpki-client