Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: dcxVaVKfq7WU+/EZtHJGyXEdFxcRc6CtLaIWM/nO4eU=
Subject key identifier: 13:65:4C:CE:8C:7A:75:C7:65:E0:50:06:82:0F:E0:D2:80:E7:5A:A2
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0197B745203E829371A734CC91F63E8E6AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0CFA
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: uQ+DSC839pJrRWmqwey+CVh/iSs2LMS35QZt3OvW3mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:20:3e:82:93:71:a7:34:cc:91:f6:3e:8e:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=13654cce8c7a75c765e05006820fe0d280e75aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:b6:04:df:d4:16:23:24:31:23:b3:30:6e:
5a:63:ed:b7:ab:0e:b3:e5:65:71:1b:97:6e:1c:36:
d0:72:1f:4d:8f:b7:51:ac:7f:0f:71:e4:0d:3a:a9:
46:1f:2c:78:df:6f:2b:cd:7d:a4:3a:e5:e8:83:61:
32:3e:a7:ca:21:27:c9:6c:30:ca:d5:bb:56:86:0b:
fe:66:fe:45:f2:4a:21:ce:e5:3e:fb:08:24:3e:5c:
8a:69:74:ca:f5:ac:5d:14:de:17:c5:66:45:bb:b7:
31:29:93:ff:33:d0:dc:36:91:0b:63:56:a4:45:98:
47:70:65:51:36:3a:2b:a0:cc:a0:13:08:d5:9b:f6:
8d:c3:90:1a:7e:81:6e:b5:f1:a5:52:ad:08:ea:94:
08:bc:1b:c0:22:af:a2:6e:0b:cc:af:e5:d8:47:18:
28:3a:47:be:61:12:7e:15:a6:03:71:0f:4d:a5:60:
0c:29:a3:9d:7d:1b:28:88:a6:57:82:ae:24:96:5b:
0d:e9:a8:1d:bf:b8:45:8a:44:a8:4d:73:76:08:d0:
01:7f:33:83:3c:54:4f:0a:e1:c7:fb:58:07:36:f5:
6e:80:60:61:80:89:52:f8:ab:65:5a:48:6a:d7:8c:
94:e3:10:c8:d5:d0:99:56:57:8b:3f:88:1f:67:79:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:4C:CE:8C:7A:75:C7:65:E0:50:06:82:0F:E0:D2:80:E7:5A:A2
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:1e:74:38:fe:a0:66:4d:94:ca:cc:5e:fb:a9:09:21:7b:
5c:9e:ee:4b:38:60:02:6f:db:a6:b6:b2:30:3c:3c:25:74:02:
61:6e:4c:97:e6:bd:67:1c:50:8f:47:f8:e5:2f:82:03:2d:7c:
98:4b:7f:53:98:24:bd:07:5e:7b:5d:d6:f5:81:7f:2e:00:ee:
ef:68:0b:9c:7a:45:f4:78:a2:d0:4c:a6:3b:36:5b:14:33:d5:
25:54:3d:b0:45:38:8b:7f:35:91:fe:47:40:64:3f:5d:11:4e:
17:c0:7e:6b:bc:33:1f:34:27:5e:ac:8b:00:8f:e8:20:05:8c:
a2:74:19:71:50:7b:df:6a:7c:79:da:e5:1b:6a:c6:5a:76:e6:
7d:58:5b:50:6d:5a:d1:8c:c7:3d:45:e5:4e:f8:06:b5:e0:11:
9f:5e:9a:3b:26:b4:ea:eb:20:9f:d3:44:b3:a5:7e:d9:47:23:
af:ca:ef:50:b3:0d:88:85:20:a7:02:b1:28:36:26:39:bc:b2:
49:44:88:65:d2:52:95:5c:f5:4f:3b:44:12:2d:3e:1d:20:5e:
85:67:15:31:ef:31:7d:33:29:27:7b:67:6c:e5:dc:d8:6a:a7:
fd:e6:6c:19:4e:2b:7f:0d:c0:7a:35:b8:90:55:8f:5e:7f:88:
49:83:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:34 2025 by rpki-client