Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: aH9/FjfAPo54uqPVlwjKwFO6duYBYtS9zyZRCmmcL4M=
Subject key identifier: CA:84:49:DB:67:A5:49:74:AF:0A:C0:A9:88:4D:B9:E2:B2:8B:25:31
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0197B6A19111B66D5D7265F83262348EC939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: q3KhvFLluCLkJta0CarRoBkchDSBQKfNYb3jWMjINR8=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:91:11:b6:6d:5d:72:65:f8:32:62:34:8e:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=ca8449db67a54974af0ac0a9884db9e2b28b2531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:41:57:59:69:a9:9b:16:1d:92:e7:06:b8:
eb:18:c3:68:e2:57:76:9d:55:b0:2b:a7:46:74:c2:
04:b9:0b:18:18:91:1f:d7:b8:c1:04:42:ff:ab:89:
0f:35:bc:52:24:e8:1d:c3:7f:59:e9:d4:cd:a1:b1:
a9:a3:53:78:c7:21:ec:40:4f:aa:ee:fb:44:85:bf:
75:b1:be:36:f7:ec:20:9c:03:de:ce:59:a1:a6:09:
95:fc:4e:4e:fb:8b:cd:24:f3:38:b9:4f:1c:c4:7b:
75:7e:89:6a:b9:1a:d0:e8:b1:80:48:45:f1:4e:e0:
9d:9f:ca:84:d4:55:2a:8e:a2:85:a8:06:79:6f:62:
c1:98:6d:f3:61:78:14:34:a3:b3:6c:a5:64:6a:38:
a5:f1:c5:51:72:45:81:b9:2b:4f:c3:79:89:bb:6b:
ce:06:72:0e:44:d5:d6:52:ea:59:08:b7:07:42:71:
9c:59:2f:37:df:5c:38:e3:26:d9:04:85:86:fa:8d:
76:f2:07:bc:c3:8c:14:8e:18:e8:c8:ab:f8:de:dc:
c4:9d:23:ad:29:ee:bf:c0:65:42:16:7c:ef:c3:79:
8e:ff:da:1f:e2:db:80:db:1d:26:37:03:92:5a:5d:
da:b1:c7:76:f4:18:4b:18:86:c5:66:73:9f:8f:f8:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:49:DB:67:A5:49:74:AF:0A:C0:A9:88:4D:B9:E2:B2:8B:25:31
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:66:71:41:0d:af:58:da:e7:3d:33:00:a4:87:35:ab:35:ff:
a4:6e:a6:3d:4d:85:5d:6b:99:15:28:b8:c2:eb:bb:20:5b:e3:
98:13:5c:3b:5f:3a:d9:64:f3:14:e2:20:28:43:c9:7c:67:3d:
ab:a7:31:aa:31:0f:4d:da:5f:29:b7:33:11:ed:e9:79:73:58:
92:6d:5c:f4:c2:aa:e6:7c:0a:d9:61:88:7a:f4:c0:ff:e1:3b:
ac:e7:a7:7f:dd:9f:8b:48:e2:b1:03:2e:2c:d6:7e:1a:b5:5f:
6f:39:92:21:19:48:9d:e7:8b:f9:1c:15:77:32:e1:f4:85:c9:
a7:8b:3e:64:6e:67:c8:d0:72:51:d3:19:f1:e9:3f:1a:7d:88:
7b:84:82:c3:43:ee:be:04:0a:67:1d:19:83:d3:fe:df:26:4c:
cf:e6:79:c6:da:80:9f:94:d6:e4:5e:a9:61:47:14:24:b2:dc:
8b:85:d8:20:8d:54:9b:d7:eb:b8:27:0e:87:55:36:23:0b:c1:
ba:d3:6b:79:fa:bf:45:d3:1b:b4:19:c3:fa:58:c6:18:30:ec:
a6:c0:0b:d0:38:30:d6:ce:72:4c:d2:d7:4c:8e:30:9e:f6:e2:
0e:8c:3f:37:0a:bd:27:9b:29:7a:0a:b0:3f:87:ea:91:92:6f:
00:09:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:31 2025 by rpki-client