Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: t0zqptw/3nmzkE/WjJgVASft1+FhF7MdF/UnN9++wIE=
Subject key identifier: EA:E4:00:D1:A5:87:93:3E:BC:C8:10:1D:80:B2:9D:2E:81:66:EB:CF
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 0197B745BD47B2F9FAD08CB69959D2C274F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 12CE
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: Tzm6tACfT5Qy4c6AvnsD3hMiDM6fAQEJGVGoSyLQpIM=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bd:47:b2:f9:fa:d0:8c:b6:99:59:d2:c2:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=eae400d1a587933ebcc8101d80b29d2e8166ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:bf:6e:d1:4d:19:83:11:23:fe:02:f2:52:
c8:b1:eb:06:4a:aa:cc:eb:fc:b1:c2:99:cd:88:4d:
48:48:f4:ba:64:23:42:1d:3f:53:0c:ef:86:20:14:
b7:49:3e:f1:d2:bb:95:45:a4:9f:3f:3f:96:d8:e5:
dd:e3:e4:a7:27:2f:d5:fd:ed:e5:0b:50:8a:00:02:
25:08:b6:3b:66:e4:89:85:be:60:04:a0:d4:40:81:
ce:12:c0:d9:04:46:59:7b:16:73:46:0d:30:be:57:
7b:ce:9f:78:b6:e6:1b:93:3d:de:ad:50:91:f1:32:
03:28:e9:43:7c:62:0a:b6:33:3a:ff:b9:eb:b0:7e:
a4:1f:32:00:bd:14:6d:7e:96:2d:82:af:e8:8a:8c:
19:ba:74:4e:04:79:e4:f5:48:a3:a5:ec:4a:26:16:
55:d6:30:c5:19:5c:66:40:1a:4e:76:bc:9f:16:4e:
bf:ae:2a:bc:e9:83:5f:15:1b:02:c1:b4:47:a0:a7:
ea:95:13:4c:f2:67:a0:34:7a:9e:7f:2f:7f:02:d0:
09:f1:a1:52:65:10:37:2b:6c:9b:d3:53:4e:ef:17:
11:49:ad:2f:b8:b6:cb:00:27:4f:6b:d8:62:b9:09:
a0:ca:15:90:9a:2a:ae:04:75:f3:a4:dd:99:03:d1:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:00:D1:A5:87:93:3E:BC:C8:10:1D:80:B2:9D:2E:81:66:EB:CF
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:f1:da:20:f4:d6:cd:b1:b2:96:90:fa:e3:fe:59:88:59:
cf:7e:9f:87:fe:bf:5f:c0:8c:34:ad:59:9f:5d:0f:30:10:70:
e2:48:a7:11:db:a7:75:a2:b3:73:eb:54:3f:2e:12:80:a5:92:
c1:2d:f7:01:ba:9c:ad:f2:5e:45:96:9d:92:02:f8:ed:9b:07:
3c:ac:52:cb:06:0d:85:ec:24:ba:7a:71:6c:cb:2b:74:ef:61:
dd:89:82:21:b6:fd:a0:b9:9c:02:26:b5:5d:3a:c1:cd:37:26:
f4:ef:5a:49:9c:23:d7:ba:4b:da:10:ce:8c:ce:40:f9:a8:b2:
e2:eb:cc:b6:5d:e4:bd:05:16:c1:96:b8:27:e6:cd:33:13:ec:
45:43:a9:fe:b1:00:fa:16:c3:85:c7:88:c0:ed:68:4a:4c:a2:
7f:06:4a:47:2e:3b:6d:89:67:85:80:24:b7:b6:e6:f7:99:d8:
5e:d6:97:22:52:71:aa:17:30:d2:30:97:92:70:76:1d:90:67:
16:0b:09:2a:42:1e:f5:88:9d:1f:74:28:13:11:58:14:7a:a5:
fc:df:ae:d7:02:a2:f3:6f:a9:74:05:44:42:3d:44:d3:69:5c:
80:e3:c9:63:16:5f:87:da:77:9d:d6:67:f0:ed:35:5b:f8:b3:
60:72:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:44 2025 by rpki-client