Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: BSiLUjF3ZxmqC7YBcrfwIVozF4PoG5R3ZVEpSbVNTVU=
Subject key identifier: 1E:F1:2E:E3:7E:0A:B0:84:5B:F1:85:73:8E:1E:B2:E5:88:43:10:EE
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 0197B820C202C188CA35F36A138FA89DE658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0CFC
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: 2CwsmdvMjUpTFJgCnfwJA+/mF0/bz1T5JZdt0HHyOU8=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c2:02:c1:88:ca:35:f3:6a:13:8f:a8:9d:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=1ef12ee37e0ab0845bf185738e1eb2e5884310ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:42:ea:9c:a1:2c:59:7a:e1:55:0e:a5:81:
86:ae:6f:38:06:e4:d0:38:7a:b9:af:91:06:6d:d3:
e5:fe:10:84:be:18:39:6e:b3:bb:fa:6d:95:2a:35:
22:bb:86:8c:29:a8:41:17:51:45:14:bd:56:f5:c9:
0c:d3:7d:68:1d:82:75:96:e0:b2:4b:e7:cc:24:4a:
a6:ed:03:dc:cf:df:9b:59:82:c9:41:56:3c:12:40:
55:e8:80:ae:09:84:5d:f3:ba:21:97:5a:34:99:15:
a4:73:c6:59:b3:b7:fc:5b:4f:24:86:7f:47:c2:8e:
52:ea:5b:c1:6b:3f:3e:1a:8a:6c:22:3b:68:32:9a:
b9:ba:3a:a7:3f:03:ea:29:b0:f8:03:79:00:e7:bd:
de:a4:2a:30:ae:ac:f0:a6:98:6d:aa:5f:38:d0:d4:
3a:6d:64:9a:26:b8:05:04:3d:4a:e7:33:03:34:85:
d5:f4:64:4e:88:ca:e4:da:89:8d:fe:bc:e2:a9:b3:
03:39:40:58:b3:7d:44:37:2e:25:40:26:a6:75:30:
9d:ab:11:31:fb:56:ea:76:db:a2:42:08:80:1c:c4:
5e:7a:3a:79:f6:5f:8d:9c:4b:30:b0:f2:59:09:4f:
9f:e9:71:56:f0:b4:c4:e5:04:57:d2:c2:2c:45:4c:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:2E:E3:7E:0A:B0:84:5B:F1:85:73:8E:1E:B2:E5:88:43:10:EE
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:2d:d2:9b:0b:e3:b1:5a:15:b5:0d:50:cd:ad:cf:6e:ed:
9f:bc:7a:89:6b:ed:58:6f:88:38:68:11:48:16:2d:d5:89:25:
85:89:9b:b4:4f:4a:09:ec:e9:cf:59:55:e7:3f:b5:e9:a1:04:
fd:7a:f1:40:be:a2:ef:5a:b0:91:69:08:33:29:fd:00:a9:77:
82:55:56:95:33:1d:dd:90:43:33:75:31:6c:da:62:c6:46:56:
aa:54:7f:4c:70:30:4a:ac:41:10:5f:84:2c:c5:76:cf:fa:f1:
13:81:5e:ea:44:16:85:42:4e:96:86:71:c4:8b:3d:c8:1d:83:
21:e4:34:f4:aa:29:44:87:8f:01:87:f3:48:ce:af:11:9c:6f:
6b:f0:d0:c2:74:ae:d2:fb:10:37:8e:ed:86:f7:c9:ee:fc:45:
13:6b:80:93:a4:66:39:cb:39:49:b9:06:89:6c:ff:bd:bd:92:
fd:f9:e0:e5:1f:91:80:32:4b:13:03:e9:82:e7:78:f5:29:57:
17:e7:c5:f5:43:a8:a5:af:8f:f4:a2:66:be:e4:5b:4d:3d:6e:
56:eb:c8:e2:22:f6:2f:e4:ed:c6:3d:2a:01:28:83:d5:ba:ce:
5f:70:80:47:4f:b2:d3:e0:15:2a:25:76:2f:55:f9:32:60:fa:
98:a9:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:57 2025 by rpki-client