Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: 5CDVXHfXt9JQ4D0HVe/1lTaYkvUqYNeKBBg2AoveCv4=
Subject key identifier: 93:FD:57:72:B3:05:1D:E4:68:09:72:DF:DA:20:13:A1:57:D1:FD:27
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0197B7B31F2445047AB94CA3984448D8C39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: 8hHAqiX8HHR4Zej8OH72Npyv0Pw+rPf+PwUfPNIB2Fc=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1f:24:45:04:7a:b9:4c:a3:98:44:48:d8:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=93fd5772b3051de4680972dfda2013a157d1fd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:6e:1d:ff:8a:da:6e:3f:44:33:fb:bb:1e:
f0:35:16:19:36:e2:65:59:56:3a:60:96:10:12:de:
db:c2:77:b3:1c:5b:aa:f2:ee:40:fe:dc:9a:0d:74:
51:51:64:28:03:5e:72:c7:c0:cb:a9:1e:5e:04:ca:
05:4a:0b:7b:bd:25:c8:be:00:11:53:ce:b6:b0:ce:
99:19:40:c5:bd:16:84:0a:a4:70:d9:bf:cc:21:78:
89:13:a9:0c:16:34:6a:10:a6:c4:bd:65:f9:37:ea:
f1:66:0f:f7:c3:bc:78:5e:20:ac:71:3e:05:4c:b3:
4e:12:a6:0e:91:37:4f:31:5c:41:57:da:a3:84:c7:
58:a0:73:9e:07:91:bf:11:4a:7f:17:fe:63:d0:e9:
d1:c6:85:e1:ca:44:77:95:4d:1b:5e:c0:58:72:ec:
a8:8c:e2:13:4a:4b:19:51:9f:34:eb:a5:31:68:2a:
f7:5f:2a:0c:58:de:d6:a9:f0:13:f0:f3:c7:95:3b:
82:52:e6:02:c3:fd:3a:f0:9c:d0:f1:8f:ec:94:23:
5e:2b:1d:8e:25:e1:34:aa:2c:2b:0b:1c:52:9d:83:
2b:e5:f6:25:e4:25:01:0a:d3:d0:a1:1a:72:02:5b:
fe:0a:ac:dc:21:7e:23:d2:4c:a7:1b:c9:7a:f8:45:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:57:72:B3:05:1D:E4:68:09:72:DF:DA:20:13:A1:57:D1:FD:27
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ef:d0:84:76:60:42:7e:c9:ed:ff:73:75:16:8b:94:16:fb:
1e:79:60:7e:ec:f2:40:15:06:ed:df:fd:4a:59:e5:80:e9:5e:
dc:d6:18:08:46:6f:4a:01:04:3a:ea:f7:07:61:48:27:6f:30:
17:6c:e7:7b:9c:9b:f4:79:c1:73:f9:c5:91:d2:cf:92:2e:ac:
8e:92:31:3c:4a:c4:84:e4:69:49:39:3d:e8:90:7d:0f:bd:37:
bf:de:57:30:12:a2:ba:f5:95:41:36:23:8f:2b:81:bc:35:f3:
a0:55:e2:d7:45:88:78:8d:8a:2a:c6:37:93:11:3d:30:df:00:
08:bd:23:2e:b4:8f:ef:3a:aa:7a:85:96:df:fb:f6:b7:91:85:
30:92:dd:b6:d6:3e:0a:f2:13:c7:99:f6:0d:11:d3:80:e4:43:
23:cc:9e:9b:aa:12:3b:f1:00:9d:82:03:3e:12:a7:54:ee:df:
1c:3b:ad:84:0e:5b:93:f7:46:dd:3b:be:04:8a:ed:16:46:cb:
6f:c9:8a:ea:79:02:b0:f3:e0:d3:8c:eb:7d:5b:fa:ff:4b:9f:
15:53:b1:a8:b4:6f:64:54:d6:55:1b:9d:ac:28:51:2d:3b:6d:
89:29:15:f5:ab:fa:49:a4:dd:8f:a7:40:06:01:cf:79:f1:02:
4e:a7:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:38 2025 by rpki-client