Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: Cn+bXtWwr1n78d3ndWolzTVYULc+MIJ4Htmhm2t3xb0=
Subject key identifier: 0D:46:4D:20:D4:82:09:A9:DE:BA:9F:F1:17:83:F7:46:0C:C8:9B:66
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 0197B9A18B0D7E745555BA17945B312DAB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0E89
Signing time: Sun 29 Jun 2025 03:01:01 +0000
Manifest this update: Sun 29 Jun 2025 03:01:01 +0000
Manifest next update: Mon 30 Jun 2025 03:01:01 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: NuIo1c9qESzI2lyerJ+sXX343TzBF4vPW84jx0dgA20=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:8b:0d:7e:74:55:55:ba:17:94:5b:31:2d:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jun 29 03:01:01 2025 GMT
Not After : Jun 30 03:01:01 2025 GMT
Subject: CN=0d464d20d48209a9deba9ff11783f7460cc89b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:13:59:9c:f3:32:9d:ae:46:7f:0a:ca:72:
8c:cc:99:0b:0b:4f:c8:8e:c8:46:e6:0b:45:b7:27:
b6:df:cd:25:b2:39:b7:d5:74:bb:60:b2:23:f9:98:
98:ef:78:f0:9e:92:9a:be:62:a4:1e:37:c0:e7:5b:
53:b5:47:5a:32:70:1d:67:ed:66:0a:c3:39:56:c8:
14:a0:ba:95:61:81:5a:cd:56:d5:ae:87:5a:a1:02:
d6:26:44:0b:6e:e8:02:7c:ca:ff:8c:f7:32:ba:83:
53:df:17:4b:8e:c0:2b:58:2f:da:de:9b:53:bc:6d:
e6:8e:c7:18:a0:6f:86:e2:18:34:25:35:e4:83:20:
96:2c:87:8f:4f:a0:05:6e:f6:57:c1:2e:be:8e:34:
d4:9c:f3:b7:67:01:3f:6b:64:ee:a5:1f:a3:88:1c:
24:5b:91:5e:10:d0:22:cb:01:b8:02:b5:eb:0c:9e:
8b:aa:1e:9b:6d:a3:9b:f7:da:44:17:5e:ee:29:27:
f8:95:c1:b9:6f:e4:ee:78:07:fb:53:df:39:0e:81:
1a:23:5e:20:bc:8d:f8:c4:c5:6d:12:73:32:81:59:
34:55:96:3f:d8:c8:14:56:b4:04:21:f3:13:ea:8b:
c0:e3:52:46:e4:21:f7:c3:62:82:94:44:08:c6:5c:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:4D:20:D4:82:09:A9:DE:BA:9F:F1:17:83:F7:46:0C:C8:9B:66
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:12:eb:52:95:c0:b2:8c:a4:5b:7c:f1:90:19:ea:a3:93:
d4:6c:66:4e:5b:2f:9a:02:eb:4e:ef:8a:fb:3f:54:dc:e3:37:
ca:e5:85:94:c1:3d:f0:cf:69:e4:ec:bb:01:47:bf:fd:cb:fd:
dd:33:f1:d9:ba:1c:f1:74:b7:91:94:0c:d9:57:ad:50:f5:35:
66:42:b3:44:1b:ed:32:17:c9:15:0d:38:2f:17:03:bf:cf:2d:
12:f5:3a:b0:87:2f:b9:27:53:35:80:7d:17:89:f6:8f:43:33:
68:8c:e0:21:ee:9a:52:1a:45:04:8a:53:83:0a:c5:43:d2:32:
d7:8a:f5:78:29:39:7d:1c:88:d9:d7:f9:90:f1:02:dc:3a:a3:
33:e9:26:f4:05:e5:21:95:29:95:02:55:73:97:c0:19:b2:58:
ed:54:0a:6d:15:90:66:fa:f8:e7:a6:72:ab:0e:01:e0:1e:15:
d3:61:8b:fa:c2:f6:d8:ab:7b:6a:38:6d:a1:8b:aa:21:98:bf:
b1:f8:08:a5:b7:56:2b:90:ff:0f:81:5e:e4:b1:fa:e0:42:9a:
8c:db:cf:23:0e:18:41:bb:29:8a:89:95:3f:fd:ee:ef:1b:e4:
b0:d3:b3:e5:f8:be:14:76:6d:82:ec:ac:2f:78:c5:56:46:b4:
7e:88:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:41 2025 by rpki-client