Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: nvPOAmmbg9BGWwlPA//qUFzha7YvcGwxZRhgE4AWnDU=
Subject key identifier: 89:02:E3:66:B5:53:78:4A:3D:67:B6:1D:50:EC:3E:0D:33:F0:45:24
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 019747B0CC7D296049C6B9163C51DC1E16B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 027B
Signing time: Sat 07 Jun 2025 00:00:58 +0000
Manifest this update: Sat 07 Jun 2025 00:00:58 +0000
Manifest next update: Sun 08 Jun 2025 00:00:58 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: ekExLU18ZPnOyEeBqRz7hC992rQiyFaKjRY84O92z04=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:cc:7d:29:60:49:c6:b9:16:3c:51:dc:1e:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Jun 7 00:00:58 2025 GMT
Not After : Jun 8 00:00:58 2025 GMT
Subject: CN=8902e366b553784a3d67b61d50ec3e0d33f04524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:31:48:95:ac:76:47:b5:f3:9a:e0:9d:98:
0d:90:1b:b8:df:82:68:44:51:f0:25:94:d5:de:85:
82:d4:35:6c:73:5e:5e:f1:97:d5:41:45:9f:10:37:
0b:81:c3:4f:13:fd:c5:8c:18:bb:be:8d:2a:36:54:
6b:24:a6:88:5c:ff:57:82:55:f1:18:c4:ab:92:ba:
7f:ca:db:67:7a:d8:d9:d2:8b:eb:6e:40:4b:dd:45:
d7:2f:5b:24:11:5c:78:b9:87:5e:ca:aa:ff:46:ce:
10:4e:fa:4d:15:87:46:92:c9:e2:e5:d1:29:7a:e3:
66:f1:d6:30:bb:2a:39:ec:24:da:7c:72:58:c8:36:
df:45:a9:78:59:b8:41:1c:5b:9f:1a:68:df:5b:17:
f4:91:cb:97:22:3b:64:5b:11:89:56:d4:0d:19:ec:
82:7b:76:6a:50:b2:ac:5f:ff:3b:24:2a:b9:58:d7:
c3:52:e6:98:cd:db:6f:91:d4:e6:0c:86:48:b2:fb:
bd:9f:21:74:ad:19:d7:ee:21:21:2e:2d:96:8e:4b:
74:06:03:7d:e6:b0:7f:5b:a4:92:dc:15:45:7d:6b:
68:e5:29:ed:db:c5:65:d8:5f:2d:a3:b6:21:90:16:
4f:24:cd:f5:1c:5f:34:bb:56:0d:b3:a1:ba:e0:0d:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:E3:66:B5:53:78:4A:3D:67:B6:1D:50:EC:3E:0D:33:F0:45:24
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:22:07:1e:ab:f3:bb:40:c5:bb:8c:fb:bb:0a:37:35:44:77:
af:2d:94:93:f4:61:19:6e:94:2a:ac:38:8d:83:39:84:00:33:
e0:f9:38:03:3a:23:0e:81:3a:3f:6d:e1:01:40:0d:89:3b:46:
21:10:26:7b:d7:79:f7:5a:06:7e:6d:0f:0c:92:f4:64:af:5f:
03:10:8f:c7:5b:47:7c:44:6a:75:bf:ae:1d:68:61:6d:8a:91:
8f:0e:3d:14:6c:8c:18:31:03:56:39:4a:61:1d:63:7b:b4:a3:
66:a6:06:d8:ca:f1:56:02:fe:bb:8b:45:7c:f1:12:e5:7f:d3:
c6:38:bc:1f:57:9d:d7:32:ff:7d:3e:93:c8:51:9d:be:60:1b:
ff:3b:43:af:b9:72:4e:d1:96:f7:cf:a3:ba:52:e0:e0:55:82:
a3:6e:a8:33:fd:41:0d:ec:61:13:8f:ac:d7:ae:b5:e1:50:78:
ec:46:ad:70:4d:dd:96:17:ee:cf:cc:9a:47:ff:f8:f0:07:62:
9d:8b:49:42:39:1f:0a:3f:8c:2a:cd:cd:a6:e7:22:2c:23:d1:
1a:1a:0e:ad:cd:8b:72:dd:f1:88:f0:85:81:fe:b0:e2:ab:e0:
9b:81:56:84:cc:d6:a9:e1:28:23:51:4b:36:97:d1:c9:f4:0b:
e1:f5:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:57 2025 by rpki-client