Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: FxG2yR3DGesek20clIcReLnvTSmaq8ZMlKx97yIhnCE=
Subject key identifier: 3D:9C:AB:73:B7:A7:EA:EB:75:96:E5:39:53:64:C8:30:F6:2A:32:42
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0197CB3A1AFFA9533376950EBA9EFE5F3FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 13:01:12 +0000
Manifest this update: Wed 02 Jul 2025 13:01:12 +0000
Manifest next update: Thu 03 Jul 2025 13:01:12 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: OVDVdcGJJ4HmiUnyk8AnQSVzeGbF1PN71yCD+YKCo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:1a:ff:a9:53:33:76:95:0e:ba:9e:fe:5f:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jul 2 13:01:12 2025 GMT
Not After : Jul 3 13:01:12 2025 GMT
Subject: CN=3d9cab73b7a7eaeb7596e5395364c830f62a3242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:b6:55:19:9a:0d:66:79:1c:2f:3f:cd:d9:
0c:61:52:6a:81:89:bc:d1:37:a8:22:d7:2f:9b:80:
b7:87:8b:67:d7:d8:63:53:40:a7:d4:0f:79:1a:bd:
4c:7f:cc:49:ef:8f:bd:3e:d9:de:9b:05:9c:64:d7:
0f:78:4a:12:e2:fd:c1:9b:51:c3:2d:37:32:60:38:
86:41:09:0b:99:1f:9e:fa:70:4a:0c:cd:a4:eb:98:
cb:1a:2d:3d:7b:15:63:e3:26:df:56:a5:cb:e2:c5:
bc:4f:9a:e6:e9:ca:be:64:73:e4:e7:7a:da:d8:c2:
f1:48:ac:c6:f3:13:a3:d1:53:f4:bb:7e:fb:43:2e:
87:df:68:c5:89:18:e6:0e:25:59:6e:f1:17:e1:d4:
55:9d:29:22:16:80:de:3e:79:f6:6d:dd:f1:0c:6d:
dd:3c:0e:76:3d:2f:7b:1a:1e:37:ef:cc:f1:27:a3:
e8:82:c7:b0:96:91:db:36:f2:61:8e:63:bb:81:5a:
82:3a:4e:47:aa:3e:8c:89:3c:a5:f8:a3:39:00:9a:
f3:36:c0:89:6f:a3:84:10:35:31:fc:c7:b3:45:d7:
b4:43:d1:e3:81:57:bf:49:84:b7:70:bb:ff:ac:23:
e6:01:2a:c6:54:75:62:2c:45:8e:77:b8:f9:63:fa:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:AB:73:B7:A7:EA:EB:75:96:E5:39:53:64:C8:30:F6:2A:32:42
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:15:15:31:16:a5:f7:55:a2:4a:f3:8f:c5:c9:55:20:79:80:
0e:51:19:5d:e7:28:33:42:20:1b:71:14:4d:76:14:7c:86:74:
12:54:49:9d:9d:57:ef:46:91:e8:21:ad:6e:db:ab:ca:a9:a6:
f0:3b:6b:40:2b:8e:b5:40:20:35:0c:57:e6:96:2c:8d:42:8f:
f4:71:65:07:cc:c0:e0:ef:aa:9a:2b:95:49:8e:1e:c9:bb:22:
92:70:ce:c5:0b:6a:9d:f3:8d:38:d4:0e:ba:19:ae:48:67:cb:
2c:a3:51:56:4c:83:6a:49:4f:a7:bc:fc:0a:5c:f6:e4:ca:28:
08:b4:f5:50:bd:68:2d:2e:70:53:78:42:fa:10:aa:cd:23:30:
82:e2:7e:99:18:ca:77:f3:f9:8c:17:66:82:48:54:d4:2e:4c:
34:21:21:69:b2:23:22:96:3f:05:e6:da:31:f3:ea:29:81:ee:
35:a7:fe:da:25:74:3b:c5:16:e7:1e:c4:29:24:fa:af:d8:4e:
3c:13:8b:e5:6e:b1:18:bf:80:7f:ac:c5:56:1e:5f:f8:35:4f:
48:e1:df:3c:67:8f:f7:26:a8:c9:d4:0c:9b:a6:f5:77:f8:2e:
af:d0:3c:bc:b4:bf:f4:77:4a:66:7d:ff:43:18:16:00:20:54:
eb:7f:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:01:26 2025 by rpki-client