Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: PxbRFrekzO/h0awmnm5vhd7KJasBy9lW1vtSNbw1OoA=
Subject key identifier: E4:B4:EB:16:2C:9D:AA:42:F7:7A:28:22:EE:17:27:4C:06:C8:E1:D7
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 0197B6A16150ADB1DB87147653AF184718A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0C5C
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: z2yHQnS9dvjflGK8TOiNr6rXDBzFfxqmiksZBCWC2NA=)
2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:61:50:ad:b1:db:87:14:76:53:af:18:47:18:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=e4b4eb162c9daa42f77a2822ee17274c06c8e1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:68:9a:48:54:7e:ba:9e:42:b8:82:fd:f4:
5b:2c:86:f9:92:9a:af:b1:27:67:c0:97:48:58:29:
f5:ca:cf:30:c5:48:0a:d4:f8:41:3f:32:42:52:87:
b0:42:a8:30:33:d3:f5:f0:c8:15:f8:f1:89:97:42:
e7:f0:97:c0:bc:74:70:0e:1c:6a:0c:95:6a:ca:ed:
76:86:b8:7a:fa:ee:29:74:83:23:02:26:2b:b3:91:
5c:fc:2b:f8:8f:e6:8e:0b:b4:61:be:bd:67:57:a1:
2b:64:35:cd:20:57:cb:51:78:46:d1:15:ec:cc:87:
6f:c2:60:41:85:9b:6a:6f:d5:6b:22:80:eb:5e:b3:
c1:9c:97:85:3c:54:92:33:30:ab:64:a8:fe:cb:44:
b5:32:ad:88:f8:7d:8a:51:d3:db:90:04:9c:43:b3:
52:24:30:4d:18:aa:a0:70:ab:0d:bd:14:24:b4:da:
ea:15:7a:0b:a1:94:9f:b3:78:02:72:c2:0e:f9:80:
17:f8:b3:35:5d:04:20:91:30:8e:b7:30:56:d9:bb:
b0:d5:f2:46:dc:7f:e0:b7:b3:7d:bd:c1:5b:c4:21:
36:61:4b:e1:47:4d:91:b5:e4:ed:ca:2b:29:c8:d3:
5e:64:ed:65:50:88:d7:61:7d:ab:83:9a:5e:1d:58:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:EB:16:2C:9D:AA:42:F7:7A:28:22:EE:17:27:4C:06:C8:E1:D7
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:59:b8:b8:db:95:81:c1:66:21:e7:78:18:9d:30:72:f2:
d4:ce:b4:bf:f1:6f:fb:8f:e8:11:74:e9:71:5b:40:76:42:06:
8b:5d:ca:ab:f4:3b:4c:1c:a8:06:24:fe:aa:e0:27:16:ed:3e:
92:bc:fc:8d:bb:40:45:49:12:1b:68:99:de:a8:59:b0:e7:3c:
61:99:0c:4b:60:f7:02:f1:5f:d5:d6:ee:ad:87:6b:67:ae:f9:
77:3d:42:be:db:44:c1:57:33:ca:b1:55:de:94:11:98:f8:87:
77:00:30:93:92:0c:c5:c2:e3:8f:46:8a:90:6c:56:03:b8:f8:
cd:cc:91:5d:7d:ef:b9:2d:a6:e6:15:6c:c4:e1:2a:43:44:7f:
e8:73:bc:f6:b7:f0:e9:cc:fd:35:ef:02:cf:0b:0d:bd:57:8b:
b5:e9:eb:21:6e:dc:cb:01:26:2e:1e:30:38:58:db:51:6c:57:
a1:a9:e5:b8:9f:e0:0a:3c:aa:1c:70:d6:f2:73:be:fa:f1:a7:
b0:e2:8c:a7:43:83:b5:02:d7:ce:28:ec:d4:e2:b8:76:3b:57:
c0:d0:f1:44:21:9b:8a:8e:7e:04:14:a0:0d:e9:24:b7:e8:66:
b5:9f:17:4f:98:d9:43:40:20:26:e9:87:2b:e3:c4:9c:ab:dd:
e3:39:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:10 2025 by rpki-client