Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: 4/B6tUPzgAcUoyr/8vSUgAcPmQvaRkVgs9Oa+Y10Lc0=
Subject key identifier: 58:F4:BB:35:6E:30:A1:1B:3A:09:75:CC:26:1A:1E:A3:FA:CB:08:C4
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 0197499ED9781BE10DA5260F1BFA2624C1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 0616
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: pWF2kyD3mL5k+LE92wk/nHbWP0zBmHUV4Rl9k39cjXM=)
2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d9:78:1b:e1:0d:a5:26:0f:1b:fa:26:24:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=58f4bb356e30a11b3a0975cc261a1ea3facb08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:5a:69:71:fa:e8:25:1d:1c:02:62:66:8f:
60:44:38:33:90:cd:a0:68:8c:bd:e5:2d:2e:96:6e:
26:53:bd:05:1d:b5:0d:02:06:3d:99:aa:0e:5c:4a:
0a:5d:24:aa:b8:f5:52:75:6e:58:bc:5e:a6:2d:d4:
4a:ad:8f:ac:88:56:5e:bd:bf:a8:46:fe:5c:19:42:
7e:7a:97:c9:3e:74:8a:41:a5:74:bb:37:a6:0a:68:
2b:8b:51:9b:46:8e:c8:3e:e8:33:fe:67:57:cf:7e:
09:cb:99:42:2c:c2:9c:88:c3:ad:3c:4e:30:c0:aa:
cc:a2:5d:57:e0:69:f0:06:f5:0b:63:53:cd:30:3e:
e0:57:13:04:a9:5d:1e:58:7d:fe:da:15:ee:63:07:
b0:4f:0a:67:82:e3:13:5c:b4:2f:d1:ad:43:50:0b:
b6:f6:ee:f1:4b:ef:fa:a0:5d:28:3c:70:70:18:11:
79:07:cb:00:d0:cb:90:fc:d7:71:3e:ce:38:f5:89:
72:3e:9b:f8:fb:00:cf:fe:cb:be:c4:2b:58:22:0a:
2b:38:13:c5:cb:eb:87:c4:e1:78:66:d0:3d:27:93:
0d:4c:5a:c6:e1:f0:e8:f7:b1:9f:f2:dd:16:05:9e:
c4:f8:3f:8b:79:7a:1b:6b:ae:cf:cb:c5:92:0e:3d:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:BB:35:6E:30:A1:1B:3A:09:75:CC:26:1A:1E:A3:FA:CB:08:C4
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:20:70:45:61:4c:99:8b:5f:72:04:7e:74:25:08:76:a7:6d:
e3:e8:29:cd:6b:62:7c:a5:ad:93:28:f3:d4:ac:c9:91:fb:d7:
bc:20:6c:4e:3e:dd:95:a8:62:9a:1c:29:64:5e:1c:78:8e:8c:
f7:b6:a4:4e:51:1f:cf:d5:a6:d7:3e:8c:98:37:19:01:38:33:
48:fe:bb:ce:89:e9:31:e6:37:ad:e7:a4:71:6a:0f:f9:fc:bc:
33:1b:14:b3:b2:da:a6:e5:1f:3c:8d:76:bd:3b:1c:22:89:f9:
aa:eb:18:cc:19:c6:66:f9:28:55:1b:f9:4a:51:dd:0e:be:e1:
59:d5:3d:9d:d5:4b:4c:73:a7:34:38:24:c9:14:15:aa:51:fe:
80:99:c1:c2:ea:d0:06:6b:cc:da:31:b1:31:1d:91:63:b0:b9:
c8:d0:62:01:ec:56:98:b7:18:68:45:2f:4e:05:9b:7a:c2:2e:
ea:6d:17:ee:db:39:91:a9:2d:af:15:51:d9:90:a6:07:c0:b7:
44:7d:b1:69:e5:4e:c8:5b:13:a7:91:e7:09:0a:49:6c:99:60:
24:e3:f2:49:b6:28:bb:23:4e:69:40:71:4a:32:a8:5b:f8:77:
00:e0:f6:24:37:0d:f2:32:98:85:3c:b9:43:61:c3:8c:85:14:
6c:a4:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:45 2025 by rpki-client