Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: zFVl7Rdl5vPWcfIqWI2LkM2PINpBh4k6dOSFSBueEXQ=
Subject key identifier: 4C:53:50:3D:6A:41:FB:C1:3C:25:0C:97:3D:83:78:3F:79:07:19:33
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 0197B6A06B21D9234B910265A983480B090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: pvtkStVGZiRoXDY0Wz1l66YGPns7eizb61hIOGtoA9Q=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6b:21:d9:23:4b:91:02:65:a9:83:48:0b:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=4c53503d6a41fbc13c250c973d83783f79071933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:c6:ed:ee:ec:ce:1b:a6:ec:da:ac:17:e9:
d7:18:ea:6a:c3:f0:23:2d:2d:d4:0d:d2:5e:12:af:
cb:87:af:87:93:d5:ca:0e:b1:ab:78:56:52:e2:bc:
c7:0a:b1:b7:56:f7:8a:e0:bd:47:17:bf:b7:74:a3:
fc:d9:46:81:8b:61:31:a9:9f:64:ae:14:dc:39:50:
0d:f7:cb:96:f6:0d:ad:4c:23:ac:d1:81:c5:10:96:
e1:4c:fe:44:04:73:a8:cf:cc:5c:89:87:69:fc:33:
85:15:fd:86:52:23:1e:a1:88:73:d8:f7:0e:de:a1:
6a:08:d2:da:0d:ff:7d:f8:af:9b:5b:69:73:2f:9f:
ba:24:08:f8:78:f6:56:22:5f:ac:76:e5:38:9e:87:
3e:21:5c:a3:6e:25:c3:47:72:b0:bf:57:a4:b1:cc:
ed:28:ed:6b:10:73:32:42:26:d4:e9:40:87:00:24:
fc:a1:87:32:f8:eb:b7:0c:e5:4c:82:c0:a0:5b:94:
4d:2a:4a:38:de:d7:f8:4e:c1:8a:94:88:81:bf:7d:
ec:ff:c9:ac:e4:5d:68:b9:b5:15:14:02:8b:12:65:
98:ff:12:7d:64:96:82:45:01:74:1e:59:a7:9e:7e:
74:6b:e6:f5:80:70:5f:4d:9b:8c:e5:a1:b5:b0:76:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:50:3D:6A:41:FB:C1:3C:25:0C:97:3D:83:78:3F:79:07:19:33
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:69:5c:ba:9c:c8:af:31:eb:08:d2:8a:44:5c:ec:8e:93:93:
fb:14:cc:59:8f:e6:b1:55:83:7e:d9:e4:05:ef:93:d6:c9:41:
66:60:06:a8:2f:73:76:66:18:2f:45:68:b6:b4:6c:24:83:87:
94:f8:a3:e0:c0:38:38:80:0b:8c:3b:b4:d1:88:4e:93:c5:42:
5e:09:32:17:23:6a:8c:5c:cc:79:4d:d3:12:44:52:ba:25:84:
1b:48:98:d2:52:ce:1c:01:5a:8a:97:71:ef:f4:68:64:90:88:
26:38:d3:e2:9f:b8:84:22:b2:df:ed:52:40:8a:77:4b:00:c7:
46:4d:79:f6:3c:bd:28:74:74:07:1a:a7:26:13:98:06:8a:a9:
91:36:de:89:af:2b:64:fc:71:69:18:b8:9f:61:1a:e8:30:b4:
72:93:51:ef:97:4f:55:42:00:ea:2c:06:fa:dd:1c:b4:67:9f:
74:60:96:de:cc:51:50:80:b7:94:27:32:f4:16:fe:b3:02:2c:
9a:7c:51:b1:26:c5:83:f9:89:02:67:e0:04:ab:f1:f2:78:a2:
34:b7:48:2a:c0:d2:1c:82:30:12:c2:11:64:98:f8:a2:d1:f4:
8f:19:29:d7:ac:42:7b:81:92:7f:03:08:cb:6e:75:c4:b1:f9:
94:2c:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:40 2025 by rpki-client