Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: +RLkWoxk1yFOfkGuXe+gMZ2lDPITCGdpnI83Y3+ZXqs=
Subject key identifier: 09:89:EB:42:16:02:51:EF:69:D9:A2:78:03:EC:C9:77:8A:3D:EC:B8
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 0197470BEA1E7B47AC44BC5CA8D2AD8855DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 21:00:52 +0000
Manifest this update: Fri 06 Jun 2025 21:00:52 +0000
Manifest next update: Sat 07 Jun 2025 21:00:52 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: Fcm+YflfXanfl1/o6GnSwsBL4vrY1qyVTlXKu2GpOLc=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ea:1e:7b:47:ac:44:bc:5c:a8:d2:ad:88:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jun 6 21:00:52 2025 GMT
Not After : Jun 7 21:00:52 2025 GMT
Subject: CN=0989eb42160251ef69d9a27803ecc9778a3decb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:d3:2c:5d:1f:15:e1:dc:5e:8d:83:12:94:
38:11:24:3b:65:31:04:93:0e:14:78:fd:9d:37:e2:
79:b2:08:39:0e:8c:ad:0a:4d:97:26:74:e6:41:61:
86:ca:1c:7c:02:e7:40:6c:66:c5:26:42:03:46:86:
15:3f:7c:bd:df:c2:37:34:38:2d:09:2e:b0:b7:22:
c0:96:56:21:3a:dd:69:b6:f2:48:d6:55:2a:7c:49:
cc:78:da:af:f5:c3:0a:2e:1c:b5:ae:46:26:16:7b:
5b:e6:65:52:56:14:52:c9:d2:ed:32:82:0b:eb:34:
fe:2f:c0:89:5d:4d:85:82:87:a6:b2:79:07:df:0c:
44:12:ef:50:52:ae:dc:79:d3:42:fa:40:79:b9:e5:
f9:f8:16:a0:68:f7:78:e9:e4:f5:5a:47:c0:2b:22:
e1:1f:7b:a6:06:e2:ed:8a:c3:5e:ec:92:07:f5:bc:
92:d3:6b:1f:b7:c0:9e:36:68:1d:7b:3f:53:52:70:
1f:01:28:6b:29:74:b6:fe:79:f6:ef:68:1d:f5:8c:
47:0a:c6:05:0b:43:9c:f3:fc:68:df:3b:72:5e:61:
c2:3c:06:1a:07:89:f1:20:5d:9c:92:32:e2:a6:ad:
f3:27:d8:5b:00:a1:02:fc:52:d5:af:41:ba:b0:4b:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:EB:42:16:02:51:EF:69:D9:A2:78:03:EC:C9:77:8A:3D:EC:B8
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:27:58:48:be:80:44:98:13:db:6e:f9:67:71:a7:6c:28:2d:
22:bf:9a:36:12:a5:a1:25:97:67:ee:30:2e:3b:fc:06:60:68:
93:72:32:8d:f0:82:20:ea:8b:65:8d:ee:15:87:01:ca:9e:7d:
0f:a3:42:50:92:a9:b7:e0:86:df:c4:dd:4b:24:3d:e7:48:6c:
13:08:75:b5:20:9d:6f:0d:3f:f4:18:e5:3c:d0:f3:3d:c1:3d:
9f:46:3e:92:c1:aa:10:10:62:29:bf:58:e6:69:4a:3f:4b:ad:
45:e2:80:aa:52:31:05:27:74:61:01:9a:2a:07:2a:e1:4f:44:
25:f6:92:7f:85:62:b7:d2:d2:e6:49:08:d0:1e:75:a4:d4:41:
fc:c9:e8:ff:6d:77:c3:fc:fb:53:b1:37:00:96:6f:a2:b6:bb:
df:66:a1:5b:66:83:50:f1:e4:fa:24:06:6c:c8:05:e4:9d:ca:
e3:08:a3:e0:22:4e:52:24:d2:93:26:fe:c8:52:a0:ec:e2:30:
c9:74:6b:7a:71:46:b1:2d:a6:ff:f3:a6:81:a2:49:17:e4:20:
f3:61:0f:7c:94:a7:ce:3c:15:4a:ce:ac:df:05:1f:16:45:6b:
d5:eb:ae:e8:bf:47:c9:a4:d3:13:17:8d:9d:72:31:0d:a7:3b:
c8:af:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:01 2025 by rpki-client