Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: 4j0lChAYSPnjLus1G7G84KzboPY2RHXs5cO83jIdT54=
Subject key identifier: C4:BA:73:63:7F:E0:EC:BA:D1:E3:F7:AE:A1:AE:79:41:51:91:20:55
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01974AE8A6A228AC3610F60BDD85923B22B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1284
Signing time: Sat 07 Jun 2025 15:00:50 +0000
Manifest this update: Sat 07 Jun 2025 15:00:50 +0000
Manifest next update: Sun 08 Jun 2025 15:00:50 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: Vn8s1l+aLUjYYF8RgIcmIl7y1he9pN4K2GHGhwh+w5k=)
2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:a6:a2:28:ac:36:10:f6:0b:dd:85:92:3b:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jun 7 15:00:50 2025 GMT
Not After : Jun 8 15:00:50 2025 GMT
Subject: CN=c4ba73637fe0ecbad1e3f7aea1ae794151912055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:95:8c:e4:6e:a1:5d:57:e6:5e:ca:be:34:
31:ee:f0:c8:b2:db:92:9e:85:90:1c:9f:71:e5:f4:
e5:ba:b2:4c:80:c4:ba:2f:81:45:36:e0:c1:00:4a:
65:35:80:35:77:66:40:04:01:f1:f9:2e:29:bf:c2:
cf:91:dd:a3:7e:63:e0:ca:b6:e5:21:a6:91:a4:73:
36:d4:60:96:e4:36:02:5a:79:34:d0:7d:72:8b:69:
b4:21:9b:d8:e1:b4:d5:46:9c:d0:72:be:2b:6c:4c:
22:7d:c2:7c:a7:77:43:73:0d:42:a1:21:d2:f4:37:
63:51:50:da:16:ee:62:b4:c0:0d:02:b6:c4:36:b6:
57:e5:e3:f7:2a:c1:32:e3:43:9d:32:57:9e:7e:78:
61:27:bc:13:4f:79:e2:83:3a:d2:50:b7:f1:04:5b:
80:8b:4a:28:36:4b:ba:52:ca:6e:29:03:5c:87:a3:
73:a8:5c:dc:3a:d9:93:10:e9:f9:29:24:22:5a:48:
60:b8:b5:50:4a:c1:20:d5:38:ab:47:fb:93:44:66:
ad:eb:e7:ab:43:2f:fc:ff:cf:9a:91:62:ce:84:26:
8d:58:f2:3e:cd:fb:7c:6e:c7:bd:19:50:aa:5e:62:
bf:25:a4:2a:43:39:3c:a9:2f:f1:d1:65:5d:ad:a3:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BA:73:63:7F:E0:EC:BA:D1:E3:F7:AE:A1:AE:79:41:51:91:20:55
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:c0:03:4a:82:b4:36:c6:62:0b:af:15:42:8a:d5:e0:4d:
b0:ef:90:f2:da:10:e3:e8:04:6c:88:41:26:ed:06:20:b6:3e:
22:23:eb:b6:f8:79:67:45:26:6d:46:0f:6d:3d:64:9f:97:2c:
84:89:7d:1f:4a:45:f4:a0:c6:44:fa:49:a7:26:12:08:89:d2:
2a:9a:d8:78:8d:ad:59:6a:08:9d:c0:de:1c:d0:3d:48:11:5f:
6c:3a:e7:7c:34:76:71:4a:6f:69:2a:13:2f:1c:cc:2c:6b:19:
40:79:b4:17:b1:c2:77:f0:50:0d:d1:b3:d0:b3:7d:13:31:29:
1d:39:c9:3a:1e:50:89:53:80:c6:bf:56:7a:5f:41:56:d2:24:
51:6f:89:ca:72:3a:79:79:26:f9:49:27:e1:52:26:0e:55:91:
34:04:89:cf:4b:f5:8c:93:d1:46:70:37:13:c7:79:eb:4b:a8:
e8:bc:d6:0e:fe:9a:26:ca:4a:71:e0:6d:4b:f2:0e:fb:6e:43:
a5:6d:de:4a:f7:db:d6:29:64:6a:aa:0c:4e:cc:be:1f:cf:96:
5d:3a:80:83:00:98:f9:f7:fa:06:ef:bd:71:50:73:6b:1f:ee:
6f:45:34:db:d8:9f:d6:fb:b8:f8:45:3c:ac:f0:b2:34:6d:95:
5b:92:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:55 2025 by rpki-client