Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: Q7z5VitckgxPDysnjkrsaz3yooOAVHQqFu4qRYyHOn8=
Subject key identifier: B4:74:A6:09:57:A7:2D:61:5A:FA:3E:E1:35:09:95:AD:2A:C3:B9:58
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01975158BCBED28CBB2061E35FB8D78AEBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0431
Signing time: Sun 08 Jun 2025 21:00:59 +0000
Manifest this update: Sun 08 Jun 2025 21:00:59 +0000
Manifest next update: Mon 09 Jun 2025 21:00:59 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: lovgZSC/O8k4NIqqXbnVIoeiR2HWStOmsbm0x5+1aPU=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:bc:be:d2:8c:bb:20:61:e3:5f:b8:d7:8a:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Jun 8 21:00:59 2025 GMT
Not After : Jun 9 21:00:59 2025 GMT
Subject: CN=b474a60957a72d615afa3ee1350995ad2ac3b958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:63:8d:8c:a2:9b:ae:b1:50:ac:64:47:82:
57:a1:6e:da:a1:8b:c3:4a:39:4c:f2:0f:ea:19:6b:
61:27:52:8f:8b:b0:ab:c6:48:39:ba:64:17:3b:c3:
55:e4:93:5e:7e:f7:d6:41:fc:5a:4a:78:f8:b9:24:
23:1b:38:8d:8f:f3:99:ff:12:58:d1:a1:06:79:00:
0a:fa:7b:e6:00:4a:fb:63:10:73:e5:03:4d:ee:34:
d6:8a:36:43:4f:1d:90:42:23:7f:29:d2:ff:98:fb:
14:1d:12:7d:77:ca:74:2c:f8:93:2f:ea:2b:e7:a4:
f2:17:87:46:d2:37:95:dd:22:74:34:73:84:c9:8b:
d9:e4:95:e5:c5:60:73:61:85:83:76:12:be:6f:b0:
92:f4:d0:f9:d9:61:e7:3c:9f:a2:18:10:6b:24:55:
92:24:10:b8:27:a7:84:b9:11:f4:97:65:4e:fa:2d:
a9:a9:cb:fd:e8:a8:22:d4:4c:92:55:0f:60:e1:15:
d0:c6:b4:40:7e:3b:77:5b:65:4a:4c:fb:3f:ee:61:
d9:d6:06:1a:75:2e:a8:8d:75:81:e8:76:11:71:85:
92:3e:b4:f9:a3:db:81:8d:31:89:49:20:25:ed:e0:
6f:1f:6f:9e:4e:52:62:fb:29:d8:61:ea:dd:d4:e1:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:A6:09:57:A7:2D:61:5A:FA:3E:E1:35:09:95:AD:2A:C3:B9:58
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cc:05:ef:36:e5:89:03:86:46:8d:97:59:96:4d:7b:c7:e0:
33:1d:22:85:15:19:bf:21:c4:39:2d:58:c1:6f:b1:f6:e8:08:
38:6f:23:b7:5e:c4:b3:34:8f:d5:7b:b7:f6:8e:bf:16:a3:34:
0f:ca:71:51:ab:05:6d:5b:97:7b:c6:ad:0f:05:b1:40:a0:60:
b1:0d:55:19:bb:99:e3:57:aa:a9:16:f6:68:7a:c9:e5:fe:65:
dd:4b:19:50:6e:bc:e1:ba:66:cc:7f:22:0e:91:8e:9e:3a:cb:
33:32:d0:43:fd:2b:f7:06:85:1f:1d:d0:f7:ae:46:94:17:43:
46:cb:70:66:32:9e:8c:50:5b:c7:6f:55:bf:2b:0c:95:dc:72:
85:0d:ff:37:7b:25:a8:7d:60:64:b1:ac:0e:ad:6e:96:f9:0c:
d3:90:76:4d:52:b3:a4:b1:74:cd:1c:78:58:50:68:45:62:43:
5e:08:c1:b9:75:cc:92:18:12:b4:b7:50:2c:71:41:33:64:59:
61:4f:3c:5f:7c:79:4f:55:0e:6a:0b:47:72:65:a3:57:72:1a:
bc:53:2b:f8:f0:73:18:b9:cb:41:f2:11:e4:05:7f:9d:15:80:
b3:51:57:3a:41:5c:10:4f:ee:97:09:e6:1d:c3:0d:80:ed:6f:
f9:c6:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:20 2025 by rpki-client