Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: O1IRqzSD6SPtYyb+EQY34FEdv809AhnSHpVt7HQzDAc=
Subject key identifier: 4D:D9:C2:98:1F:73:01:6D:42:D8:64:9C:53:17:65:8E:70:AC:3D:A7
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 0197B821389E62B2F01367AD34A45F1F32CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 23
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: bbv+ESlBfNxqgt5g5MW6HZOfwrzeTLhJVkn7qEzZvMg=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:38:9e:62:b2:f0:13:67:ad:34:a4:5f:1f:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=4dd9c2981f73016d42d8649c5317658e70ac3da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:44:3c:21:3a:30:65:34:5e:3f:36:a1:a8:
82:8a:9c:12:6e:92:63:89:2e:99:3e:69:22:81:da:
11:8a:82:80:6a:48:ba:2e:21:9d:f5:7e:a9:14:7d:
94:ae:51:b4:20:bb:7e:24:16:c2:f1:9e:24:df:bc:
d9:30:07:f7:56:8f:3c:d6:97:8d:e3:39:dc:34:0f:
61:83:77:af:3e:a9:cc:e4:a0:e7:47:c4:a1:29:5b:
d5:4c:cd:d2:e0:06:06:5d:34:94:37:2a:24:51:db:
02:69:62:25:ea:34:8d:2f:d4:f6:16:64:d1:6a:a9:
a4:8f:15:61:53:43:70:f4:fe:dd:29:76:0f:4d:03:
a5:3f:28:83:01:f9:3c:09:a1:72:ee:2d:02:1f:7f:
94:3a:22:97:f4:04:f4:f7:49:05:bd:cb:bf:ee:2e:
bb:95:2d:5f:09:79:48:0d:4d:b5:48:b8:60:c6:b6:
d6:41:f3:95:22:82:5b:e8:ac:a1:a8:e4:9d:47:b5:
88:ba:96:2f:c9:11:5f:ab:d9:fc:15:ca:ce:3c:42:
c9:c8:9d:f6:8d:84:f4:43:73:bc:09:c6:db:89:4b:
24:9f:f9:a9:fd:23:2d:78:c9:2f:2e:2d:6e:c1:db:
11:74:86:0d:ea:dd:32:a2:58:e6:33:87:ef:19:f0:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:C2:98:1F:73:01:6D:42:D8:64:9C:53:17:65:8E:70:AC:3D:A7
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4d:1c:7b:6d:9b:bf:d2:cd:84:6b:06:40:5a:ed:62:aa:31:
1f:eb:80:65:90:5b:62:7d:21:2f:41:f6:38:04:32:63:2c:0c:
15:0a:82:53:bb:85:94:63:6d:d9:91:f6:ef:2d:b9:e0:fa:dc:
83:be:8c:e2:93:39:9d:b8:7a:3d:81:c4:3a:dc:99:09:f2:b1:
18:be:bc:7f:07:2d:2b:ca:bb:c7:ce:70:3d:f9:84:47:f7:84:
c7:40:61:76:90:c1:46:86:63:e9:b1:40:7b:2c:93:93:01:c1:
ac:ba:12:10:5b:5b:09:e6:50:b5:12:b7:7e:0f:e7:d0:8f:a5:
4a:87:f4:fd:78:cc:27:64:4a:05:00:c3:06:71:d3:bb:0e:e7:
6b:db:92:af:62:10:d5:1e:6c:91:df:ae:ab:7c:34:68:75:7c:
e8:ff:f7:6b:42:57:51:a8:b8:90:e6:e3:a5:2b:ec:de:84:d0:
83:ab:5c:fa:07:bb:d0:7a:ff:66:fd:3d:c9:c0:5b:f8:00:86:
0e:9a:a4:85:b1:36:31:15:73:39:c5:f6:e6:d6:72:85:bd:25:
eb:81:c9:48:4a:47:95:2e:73:a0:50:2f:1e:7f:e7:fe:81:f2:
a1:71:9b:32:7c:0b:0d:4e:25:f4:66:5f:22:58:29:52:97:4f:
91:6c:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:17 2025 by rpki-client