Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: NrUj2xl6piAKksqC/KLGGYwY2VoC0Y5+JJcGTAZSOKo=
Subject key identifier: C4:AC:D4:CE:5A:07:3D:A1:DE:3E:BD:E9:19:85:29:73:24:53:C9:12
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 0197B820CA08FF16D972A6C8247CE203330B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0E99
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: Jgzy6pYl+284vRZEki4KLGwSQVqslUfRj803vTdQv+0=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ca:08:ff:16:d9:72:a6:c8:24:7c:e2:03:33:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=c4acd4ce5a073da1de3ebde9198529732453c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:03:91:a8:dc:d4:07:8d:6f:3f:d8:51:0e:
84:63:a8:60:db:a7:33:61:1f:e4:23:94:81:f8:88:
1c:6c:44:06:72:c5:e5:44:c3:40:17:0c:f7:d0:45:
4c:53:80:49:63:f9:06:97:89:6c:d7:92:11:a1:33:
fd:58:c6:69:6a:8b:4e:4a:73:82:c3:a8:b8:b5:95:
d0:9e:1f:a3:aa:2e:ce:65:ae:cd:65:8e:6d:16:9c:
c3:8c:1e:d0:ca:c6:88:95:07:1a:96:d2:11:f6:6b:
06:1e:37:f2:cb:7a:d3:c3:a9:41:8e:f2:1a:6c:41:
ce:b7:35:74:ee:1b:01:fb:dd:e8:39:64:cf:ea:fb:
61:f7:83:fc:6c:9a:ad:cc:06:d5:44:5a:41:c3:62:
c3:9a:34:c4:6e:e5:9b:c6:99:33:70:2f:4c:80:b5:
ce:dd:2f:27:b7:0d:c5:d3:2c:1f:f8:bf:26:02:ff:
a0:4e:3b:45:98:75:db:57:32:33:5a:63:6c:b3:81:
42:a6:a5:b1:83:04:21:2a:fe:e6:3f:af:8e:ca:3d:
dd:05:d6:fc:b5:ba:6f:94:42:9d:82:18:a1:81:59:
62:00:8f:3f:ad:ae:a5:aa:da:85:a7:2f:c6:01:13:
d8:e0:80:f9:56:32:6c:3b:23:5b:c5:de:bb:a1:6a:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AC:D4:CE:5A:07:3D:A1:DE:3E:BD:E9:19:85:29:73:24:53:C9:12
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:fa:c6:2b:bc:e7:61:1e:5c:c4:29:27:37:d0:b2:17:7c:
e9:8c:42:2c:db:54:6e:f3:a2:20:0c:b0:f8:89:b5:42:f2:c0:
0d:27:e1:21:c0:7a:c7:08:3e:b9:03:19:ed:37:d0:72:94:2f:
67:83:93:eb:26:7b:ca:89:91:83:2b:fd:ce:8b:24:ec:d9:2b:
f7:83:2d:26:41:73:3c:44:13:cd:3d:42:3b:3d:fe:3a:57:cb:
22:75:22:93:1f:6a:e2:38:8d:67:3b:0c:e1:3a:0e:95:69:3c:
9e:cf:26:ca:c1:91:f9:83:50:ec:c5:9f:1b:01:0e:4a:f3:7b:
03:17:30:1a:92:5c:dd:a4:00:97:02:35:8e:85:e5:48:5d:9c:
59:eb:a8:05:54:cc:75:ea:2f:ab:14:d6:7a:a6:bc:79:29:94:
85:6d:b6:47:b5:3a:1d:4a:65:e0:62:b8:e7:2b:dc:9a:a1:c5:
08:6d:ba:44:46:98:05:06:07:22:9a:32:4d:8a:3b:e2:0d:d9:
c4:a3:e5:47:fc:f4:fc:37:94:03:61:a1:1b:a8:e1:66:59:55:
89:ab:78:fe:96:45:cc:d8:36:ed:3a:a4:20:4e:66:74:2e:fa:
2e:8a:bc:d6:2f:b0:11:59:68:3d:cb:49:38:a0:dd:b2:68:e2:
2a:ff:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client