Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: uv+WlOewXAtUVcnaGuey2xHgiKl8B7km70ZoOBG5ELQ=
Subject key identifier: A7:4D:A6:9A:AC:3B:53:71:83:86:25:48:05:EF:02:65:D2:68:8A:B4
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0197B5C52653002E13DD81F01B578980DA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 09:01:25 +0000
Manifest this update: Sat 28 Jun 2025 09:01:25 +0000
Manifest next update: Sun 29 Jun 2025 09:01:25 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: wyv9Iad9KyJhhx5VzYl5/e5mYPO+qBEH4EYugr28XOo=)
2: tb7zy4gQAH_RQZ4Nz-3NFx59Mbo.roa (hash: oJpg/mpoL0grHs9Xu1Kgy7pPSav+AYmr/wpKbCpQ/O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:26:53:00:2e:13:dd:81:f0:1b:57:89:80:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jun 28 09:01:25 2025 GMT
Not After : Jun 29 09:01:25 2025 GMT
Subject: CN=a74da69aac3b53718386254805ef0265d2688ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:3f:a2:ab:d8:cb:d7:7b:7d:9b:94:89:5d:
f9:2a:41:6c:84:4d:df:f0:45:81:9c:46:bd:83:24:
9e:45:63:0d:ef:1f:26:4e:14:ba:97:44:1d:89:84:
32:0f:4d:c6:f7:1e:7b:a9:84:e4:86:aa:10:61:d9:
fd:9b:f2:c8:0e:b4:2e:ae:55:da:bf:45:c0:b9:62:
02:dc:36:bc:76:de:b1:e6:04:19:a5:43:1d:a0:97:
26:f0:ca:ad:7c:11:1b:99:bf:63:d1:10:83:bd:a8:
b7:dc:ab:f7:ed:08:6a:3a:53:1b:5b:58:67:5f:3e:
b6:28:77:4e:5c:dd:1d:0d:33:18:e7:ca:4f:53:69:
5e:92:2d:76:47:d9:e2:4e:55:94:8e:05:8b:aa:20:
1e:ca:40:14:d6:b8:a4:d0:af:bf:47:7f:44:a4:6f:
25:49:53:d8:3e:39:06:f7:23:c3:a3:3c:c0:85:7e:
c7:b6:d6:f6:27:b1:aa:6b:75:0c:67:2f:ac:3e:d4:
ca:de:2b:91:f2:60:1b:b0:f5:0f:81:8a:36:0b:76:
24:43:ff:c8:7e:d3:70:e6:19:73:c9:de:50:ae:d2:
87:5a:27:02:fa:54:cd:32:b6:60:97:8b:16:d0:ed:
c1:d1:6f:af:a3:8e:74:e9:3e:b5:37:b8:4a:77:f2:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:A6:9A:AC:3B:53:71:83:86:25:48:05:EF:02:65:D2:68:8A:B4
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a6:ec:5b:f9:d4:9d:8f:36:64:48:eb:93:5e:7a:1d:d5:da:
da:6b:41:3c:21:d5:39:09:c5:d8:25:7d:ee:e4:3e:01:4b:86:
a2:e9:e3:f9:d0:c5:7f:94:7d:8f:3a:f3:54:f9:6a:c0:69:42:
83:cf:ac:c5:62:2a:90:20:8c:de:68:c2:62:49:16:bd:da:53:
bc:c0:6d:30:67:cf:d2:0b:60:3b:90:cb:b1:71:3f:f5:46:38:
1f:bc:49:cb:00:ad:26:53:e0:89:b7:06:c8:07:1e:a3:47:be:
0c:dd:c9:94:09:e5:56:b2:41:dc:4a:45:24:6b:8b:b8:1a:5e:
f0:28:e6:b1:62:16:a3:4e:1a:99:42:cb:11:83:84:db:7e:19:
29:58:b7:25:2d:ac:f5:25:33:4d:19:76:a5:44:d0:43:79:65:
9f:43:1c:67:f4:f2:2b:0c:45:5b:d4:6c:18:fe:da:9a:88:47:
0c:f2:ef:ff:ed:9b:f0:b0:07:1c:04:59:e1:62:ca:23:2e:b1:
7b:35:3e:1b:03:99:fa:85:7a:08:08:5d:b3:65:92:e2:b5:c3:
ae:b9:56:16:e3:f1:7e:c4:5f:73:f2:a6:1b:f6:76:7f:5e:47:
95:77:5e:e2:da:80:21:11:14:58:f3:b8:91:8d:63:19:84:a9:
2f:f8:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client