Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: u6QkXTCQtcrwy9JkDsS65d2yXTe+xU4UrD3Yuo64XHs=
Subject key identifier: 87:DF:92:FF:FB:F3:7A:87:81:3B:87:9A:09:28:81:70:D3:82:74:07
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0197B5C4883163E2BB4D0E297489BBF4F6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0660
Signing time: Sat 28 Jun 2025 09:00:45 +0000
Manifest this update: Sat 28 Jun 2025 09:00:45 +0000
Manifest next update: Sun 29 Jun 2025 09:00:45 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: /QUc5VY8Tjhr8IdVBv9gHxMCzyxo1InzMw3PP4NnOJk=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:88:31:63:e2:bb:4d:0e:29:74:89:bb:f4:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jun 28 09:00:45 2025 GMT
Not After : Jun 29 09:00:45 2025 GMT
Subject: CN=87df92fffbf37a87813b879a09288170d3827407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:a3:b8:7b:0c:e7:ad:c1:f7:d5:9c:04:32:
61:1b:41:fe:8c:82:0a:cc:c4:1a:9f:6d:02:f6:f4:
29:60:7a:0d:a5:23:c1:3c:cf:6b:cd:e7:02:ff:cb:
fe:a2:2d:27:36:14:df:91:bb:00:1d:f4:2d:42:18:
70:bd:9b:f4:89:ce:18:57:82:2c:2d:e5:38:35:61:
67:21:97:f2:a0:c1:ea:8c:d7:81:da:57:dc:69:f3:
b3:10:86:89:60:3c:a0:52:df:70:08:81:38:a2:b7:
86:d2:76:41:49:e3:83:5f:89:dd:37:4c:8e:0e:35:
5c:90:e8:b3:9a:4e:11:7b:42:05:3e:72:8e:cd:58:
b3:df:0a:4c:63:ef:27:32:c7:11:7e:f7:3f:d7:72:
0a:d1:f3:bf:d1:32:b4:a5:43:fd:ab:3e:19:3d:cc:
6f:aa:a5:d9:d9:65:da:f0:e8:19:09:91:76:a9:4b:
dd:cb:02:fb:62:10:90:9d:ac:ea:49:b6:0a:0b:c9:
67:e9:b9:89:7a:c4:90:c1:05:e2:20:59:b6:59:db:
31:25:ec:6c:37:46:f3:1b:a9:cb:30:db:d4:db:36:
4a:56:7e:6e:d4:68:4d:a1:cb:1d:e3:f6:b3:a0:46:
f1:2e:98:2a:53:96:6f:bc:75:82:7b:30:c0:fa:01:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:92:FF:FB:F3:7A:87:81:3B:87:9A:09:28:81:70:D3:82:74:07
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:a2:9b:6b:c7:e7:8f:11:29:f9:41:85:d8:55:59:f1:f4:
03:53:d2:e2:82:48:3f:47:4a:29:65:21:0e:3a:6d:5a:41:86:
12:a4:8d:fd:9c:1b:a2:af:de:e8:a5:64:53:51:9a:f7:05:69:
81:0b:4b:6f:ca:3d:16:e0:75:62:53:73:67:76:53:0a:b1:d3:
ef:e1:fd:ac:6c:b9:cb:c7:a1:f6:b1:79:4d:2c:72:9c:8e:b8:
a6:d1:50:9a:a1:1c:22:2a:00:56:0c:43:c6:79:75:76:42:f9:
5b:6d:1c:63:dc:3a:6f:2c:00:5b:c4:c1:7e:b6:e8:2a:4e:23:
43:cb:96:9e:4d:8d:da:d8:84:30:5b:c6:28:66:5e:bb:51:0f:
1d:c3:7c:af:e2:15:02:98:bc:be:e8:5a:20:37:7a:9c:92:cf:
a6:c3:82:fa:5a:f2:eb:48:f9:d9:b5:8e:5d:d0:f3:e2:35:6e:
de:c2:ba:92:0f:9a:61:ac:1e:03:f0:e1:0e:be:9b:e9:e6:3d:
19:e4:39:b9:1b:9b:95:77:47:1a:76:61:b3:90:bf:ef:e2:96:
45:6b:dc:b6:7d:ab:38:9d:07:3b:84:37:96:cc:01:06:d2:6e:
7c:3d:50:f0:f9:cb:14:7f:65:44:40:01:ef:05:a7:cc:15:da:
76:3c:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:12 2025 by rpki-client