
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
File: 2pI54JrODG8f9md4PBV5e-JBJ2k.mft (raw, json)
Hash identifier: UJRCvA9z698aePOIQZJuxkkZUt8A9cLGVIa0XDekU8Q=
Subject key identifier: AA:81:29:64:53:84:8E:06:39:81:E9:79:2F:47:5C:9D:52:87:71:47
Authority key identifier: DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69
Certificate issuer: /CN=da9239e09ace0c6f1ff667783c15797be2412769
Certificate serial: 01992CD969FA882D3A615DD080D623520150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
Manifest number: 06
Signing time: Tue 09 Sep 2025 05:01:09 +0000
Manifest this update: Tue 09 Sep 2025 05:01:09 +0000
Manifest next update: Wed 10 Sep 2025 05:01:09 +0000
Files and hashes: 1: 2pI54JrODG8f9md4PBV5e-JBJ2k.crl (hash: OIDaVcTbxmmhwysmoUYScNXA+gBgtZs9yLGnoDRy1V4=)
2: mgz999836P_dFSI6qSezWUaAkyY.roa (hash: zI6mWUBDAi8QqaY3DJvGDg/o4D+XEGIiFJk9IKHzEFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:69:fa:88:2d:3a:61:5d:d0:80:d6:23:52:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9239e09ace0c6f1ff667783c15797be2412769
Validity
Not Before: Sep 9 05:01:09 2025 GMT
Not After : Sep 10 05:01:09 2025 GMT
Subject: CN=aa81296453848e063981e9792f475c9d52877147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:90:8e:44:ff:29:40:49:70:5f:c5:7c:29:
f2:75:13:a5:cd:9f:04:88:34:25:5b:d7:ae:e2:23:
3d:9f:2f:b6:24:8f:f7:bc:9b:44:ba:0c:c9:20:91:
df:78:98:a7:88:d4:64:84:af:a6:5f:da:04:32:2c:
88:8a:f5:a1:f9:89:d8:74:30:5e:2c:29:32:9e:4d:
9d:94:90:0e:b8:14:7b:7d:2f:57:d0:7f:7a:ea:7a:
26:08:f8:b8:d8:5c:b4:16:39:16:4f:69:9e:fd:82:
a6:37:fd:73:10:67:60:50:0f:73:cb:c1:38:e3:b6:
c5:aa:81:72:43:1c:8e:88:dd:f0:ff:50:0e:2d:26:
b1:50:c1:2a:f4:89:16:99:1f:34:9d:93:f1:ca:b9:
1b:72:af:62:f6:df:d0:cb:b5:eb:94:1f:28:68:92:
ac:25:bc:0e:a3:4a:94:3a:ed:3a:21:04:9c:f2:70:
bf:8a:ff:03:bb:28:74:72:a3:f2:b2:9d:e2:e1:cd:
1d:81:89:47:fc:bf:a9:0c:c5:70:19:e0:c8:d0:bb:
91:02:a0:68:07:98:5b:b3:94:3d:bd:b1:dd:6c:c0:
72:b1:5a:de:41:78:02:2a:2d:50:cc:00:89:62:34:
67:07:59:f6:37:7d:e4:a7:12:fd:f3:19:b7:0e:d1:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:29:64:53:84:8E:06:39:81:E9:79:2F:47:5C:9D:52:87:71:47
X509v3 Authority Key Identifier:
keyid:DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b5:e2:59:e5:e3:51:8b:60:98:44:8b:0f:ab:da:02:5d:94:
f8:9b:8e:5c:e8:28:64:25:3e:27:bd:73:87:3d:c8:8a:c4:49:
5b:91:d3:f3:8a:c3:6b:12:12:67:85:69:b2:95:15:8e:c5:33:
c6:2c:80:ef:55:e3:3b:e2:73:76:fe:7b:60:4b:12:48:17:39:
ff:e7:23:80:5e:2f:03:3e:65:af:5a:df:4d:58:b1:e1:d8:78:
9e:d5:66:17:ed:01:8b:b3:2e:b3:62:ee:7a:ae:5f:22:e8:63:
28:df:b4:7f:20:c5:95:25:2f:bd:c0:06:eb:0f:e4:a2:d0:8d:
6f:7f:44:e9:77:3b:a0:3e:b0:2d:61:f0:6c:32:d7:cc:80:0a:
b8:ac:0a:92:fb:04:09:9f:6a:fc:1f:ab:b9:c5:e8:07:8c:35:
19:35:d3:0c:86:29:68:64:cd:19:e2:07:e8:2f:76:27:3a:9e:
f0:68:d0:ce:aa:8c:46:e7:46:be:83:d3:f9:05:28:59:fb:90:
ab:9a:f6:94:ed:4b:2e:c9:c8:1d:fb:33:49:4e:15:d7:fe:dc:
76:10:34:f6:43:22:84:29:c7:28:b7:7a:19:15:d4:d9:49:0c:
fa:aa:cd:6a:85:3b:1d:92:ad:62:85:c4:2d:73:5c:15:8a:4f:
39:fc:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:03:29 2025 by rpki-client