Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: PH/qz62Lets02Xa3Z5K7mIAocCV0AQJT8tWHoLRNZtc=
Subject key identifier: BE:CA:27:42:00:37:58:B8:0B:26:60:7B:AC:02:70:F2:EB:85:C8:8D
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 0197B7451163B679E80A963260BA8BA0C352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0E9E
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: KFSOWnoQq5HGyFkM14+xOERxDtUE/C6heISCpf80+HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:11:63:b6:79:e8:0a:96:32:60:ba:8b:a0:c3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=beca2742003758b80b26607bac0270f2eb85c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:cf:33:64:3a:9a:8d:4b:b8:52:45:52:ac:
28:cf:89:82:62:3b:4e:58:ee:68:d6:01:63:81:3e:
54:c3:6d:d3:82:e3:6c:bb:b8:9b:6c:c4:35:7d:e6:
15:e5:e1:02:c1:31:1a:ce:9f:2f:f9:e3:fd:d3:46:
72:78:12:ef:a0:45:7c:a6:d4:5e:83:6c:95:e6:31:
15:e4:d3:33:a3:dd:b5:7a:13:8e:cf:f6:0b:9f:d5:
27:1b:87:c3:92:5a:3f:63:c7:62:8d:4f:76:3c:84:
2c:1c:ae:a9:b0:e5:ea:89:1c:26:d6:66:b7:54:23:
da:03:89:d2:e0:d1:7e:76:55:74:e5:2e:07:fe:4d:
5f:64:50:10:33:d5:63:ac:96:a7:24:2f:e0:29:c6:
03:fc:62:80:3e:00:c6:07:98:6c:8e:0f:f7:5f:2f:
a8:3c:ee:82:44:29:cf:19:cf:5b:13:15:43:01:b5:
5c:99:4b:1a:f9:61:a5:9b:f8:87:3b:13:d5:89:0c:
31:df:1b:9a:ca:e9:28:1f:3d:b4:04:dd:e1:2c:2e:
4e:ff:d9:d0:08:1a:58:31:6e:4c:b8:a1:3b:30:33:
0c:2b:e0:12:35:62:81:43:5e:6c:f7:e5:ee:60:62:
78:97:4e:2e:0a:b1:b5:73:8d:de:2f:26:6f:f0:47:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:27:42:00:37:58:B8:0B:26:60:7B:AC:02:70:F2:EB:85:C8:8D
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:19:06:2f:90:b9:ba:0f:a0:bf:b3:fb:77:c4:35:d1:d2:
6d:ff:2b:eb:cc:ea:ee:a5:b4:ce:fd:3b:6e:91:5b:a5:70:86:
d8:1b:b6:82:b1:15:5b:58:b8:0e:0a:61:9d:28:a9:0c:4f:1a:
57:94:3e:63:c3:05:28:3f:04:e9:9b:ea:ee:6c:c3:67:e9:6a:
7d:7a:6b:c3:f3:27:5f:a5:69:0c:10:2f:8c:f5:87:0e:a5:3d:
a3:cb:f2:1f:85:9b:1e:30:46:e7:fa:e1:40:7f:d5:9b:be:02:
87:09:15:d8:67:3a:45:23:94:f5:91:fd:23:ac:fc:32:3a:40:
d8:6c:6a:f0:e3:29:82:fe:b2:85:cd:5e:05:87:db:ea:26:55:
9e:01:b2:ac:f3:9f:6b:91:9c:eb:21:c8:52:17:56:07:61:b6:
2d:d3:c2:3a:06:8d:05:f9:aa:4c:a5:a5:70:76:ed:17:01:f4:
ec:05:17:cd:65:25:65:6e:90:fb:ce:eb:9b:77:85:4d:1b:da:
52:56:f4:2f:6b:be:16:f4:e7:05:77:1a:1d:e7:22:2c:c7:75:
9f:26:df:bd:18:e5:bb:6d:41:5b:39:9e:e2:87:3d:93:da:be:
cd:16:91:70:ac:5e:d4:0b:93:0f:70:e7:4c:8e:39:99:9e:1d:
43:b5:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:30 2025 by rpki-client