Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: BgG/ZUvByKt2biA8UKCDD6Ib/xifwzfCmiR1OWjLP4k=
Subject key identifier: 22:C0:F7:42:BB:6B:49:AE:91:CE:F2:39:98:C5:6D:88:3F:78:E8:F2
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 01974F32E2645C5900BD0544C01DE9946CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1445
Signing time: Sun 08 Jun 2025 11:00:24 +0000
Manifest this update: Sun 08 Jun 2025 11:00:24 +0000
Manifest next update: Mon 09 Jun 2025 11:00:24 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: ouuNL6RxQ+LHy2ic1+9RduAKVfKqipHrMyc1a5Imdh8=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:e2:64:5c:59:00:bd:05:44:c0:1d:e9:94:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jun 8 11:00:24 2025 GMT
Not After : Jun 9 11:00:24 2025 GMT
Subject: CN=22c0f742bb6b49ae91cef23998c56d883f78e8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:4a:b5:a6:cd:ca:2e:e6:dd:5d:72:06:55:
a3:25:7f:dc:08:3c:cf:e3:a3:be:42:b3:f4:c4:13:
e4:e1:25:9d:09:6f:83:df:74:e4:d0:88:7b:74:b7:
ed:a4:43:80:72:2e:51:c1:c0:a3:b3:95:d3:fd:9c:
4e:ad:f2:15:1a:d6:dc:ba:23:d6:4f:3d:a6:67:40:
50:88:c3:cf:52:1b:76:14:a9:f5:d6:ff:3e:10:f8:
fc:59:2f:a0:d2:98:c4:26:33:c6:f2:25:4e:00:ce:
f2:4f:52:87:a2:90:ce:73:8d:a3:a9:38:16:21:8c:
ed:f9:07:ad:aa:c1:c1:10:39:98:60:27:ea:d6:c4:
45:a9:d5:db:39:b1:b7:e3:b1:43:ad:3d:9e:03:a3:
22:2c:96:2c:c0:c0:b2:55:a5:ec:49:c0:8b:2a:0b:
5b:05:ef:b1:56:4c:5a:10:ec:e9:25:75:ec:12:70:
84:eb:cd:ac:1f:a0:e3:a8:84:80:30:0b:4f:1e:79:
cd:9c:02:d9:13:cd:27:68:42:d8:3c:1b:c1:f1:40:
6b:cd:b5:cc:51:c0:be:6d:4b:f8:61:8b:46:ca:5b:
60:01:47:03:80:3f:3f:b4:10:aa:f1:f4:5a:71:de:
ae:28:5d:c9:c8:73:91:4f:0c:89:6b:2b:5a:c3:7d:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:F7:42:BB:6B:49:AE:91:CE:F2:39:98:C5:6D:88:3F:78:E8:F2
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:8b:f4:a1:09:45:e5:dc:a6:c6:ff:b3:c0:fb:26:f3:55:
de:85:80:5a:84:bd:05:0b:2d:31:11:ca:8d:27:0f:d8:0d:24:
91:7e:9e:0f:3f:54:56:f9:38:ed:de:e7:62:a7:c2:2f:0e:b4:
c6:46:1a:6c:82:ae:7a:63:ab:4f:18:04:69:49:06:e0:d1:bf:
ab:7b:a4:46:0e:03:3f:67:f4:c4:89:a7:68:aa:b9:50:ad:1e:
bc:45:d1:28:e4:6f:12:b8:da:03:a4:e2:4b:a8:7f:11:70:dd:
4b:bf:9b:e2:d9:76:d4:e4:f4:ed:53:29:d1:ad:ab:a7:de:dc:
70:51:0f:e6:92:0a:95:e7:a7:95:08:c8:c0:26:5b:68:6b:0e:
f8:db:d7:59:e0:e9:9e:45:77:b2:d7:cb:79:73:9c:0c:14:0b:
15:3c:6e:21:54:dd:e6:4d:87:db:d1:fb:a9:74:c3:a5:31:a0:
35:3d:c5:4c:42:7a:60:08:78:40:e2:a9:92:1a:f6:35:5d:0e:
2f:84:11:e0:a2:01:e3:5f:88:da:c9:00:73:3b:a3:c7:a3:ce:
fd:d8:1c:61:bb:0d:8c:f1:d4:fc:b7:4f:b5:fb:5f:4d:ee:51:
b1:4e:6f:b0:12:02:b8:df:c5:9e:48:28:bd:7b:3c:c9:1e:74:
93:a3:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:08 2025 by rpki-client