Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: YON83HX1dJXfp4E53h3UG67y/6Ew6VaXlco+xS0d/Jw=
Subject key identifier: 81:87:7E:4F:51:0F:37:B5:68:DD:98:62:F7:B1:0F:3B:D8:B1:42:1A
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 019755A3327C79FD58E336FF8232E282867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1389
Signing time: Mon 09 Jun 2025 17:00:48 +0000
Manifest this update: Mon 09 Jun 2025 17:00:48 +0000
Manifest next update: Tue 10 Jun 2025 17:00:48 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: +jDIcc3wz04sg8f1Dea01ZUc5PDNm+7v5h5EcpH0h8Q=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:32:7c:79:fd:58:e3:36:ff:82:32:e2:82:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 9 17:00:48 2025 GMT
Not After : Jun 10 17:00:48 2025 GMT
Subject: CN=81877e4f510f37b568dd9862f7b10f3bd8b1421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:8d:ad:0f:97:08:53:67:3d:f3:05:57:96:
8a:72:c6:d9:05:f1:24:76:d8:8e:d0:e4:ac:fd:ad:
cb:f1:d8:52:ce:5f:25:8f:9f:7f:f5:5a:db:8b:ef:
f4:3a:2c:ee:b9:f8:07:09:93:95:81:39:d8:cb:7f:
79:88:21:1b:05:16:2f:94:cd:47:b0:43:53:21:31:
08:7d:f8:dd:3a:17:0a:33:4c:fe:a1:1d:dd:00:c3:
bc:04:0f:a8:a3:1c:8c:d1:f2:a0:71:c9:d0:a0:24:
95:7c:23:4e:ca:2d:45:5a:b7:c1:cd:19:b6:dc:2c:
a7:47:3d:03:9f:cf:2c:54:13:5e:32:3d:28:5c:b3:
21:30:8d:47:d7:3e:24:53:b6:36:6b:18:87:99:77:
07:dd:23:07:91:aa:66:17:dd:3e:f0:cb:e4:6a:fb:
2a:e9:28:2e:c6:2d:a0:39:01:08:32:4c:ec:1b:fc:
59:f3:36:64:65:dd:ee:e0:b0:32:45:ad:3a:20:ec:
1b:d5:93:68:13:c2:0b:0b:32:f8:38:4b:bc:92:e9:
b6:06:8b:89:31:c2:6e:5f:a9:d4:15:13:7f:66:0b:
ea:a3:de:14:57:b5:40:d8:89:d8:a3:a4:4f:23:10:
17:e3:01:94:85:95:ad:8c:f4:ff:d4:81:ef:8a:dc:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:87:7E:4F:51:0F:37:B5:68:DD:98:62:F7:B1:0F:3B:D8:B1:42:1A
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:27:1c:2e:4d:ab:56:d2:cf:e5:77:aa:a8:d3:98:da:fd:a0:
86:1a:48:e3:2f:ed:69:48:65:df:e9:7c:61:26:e1:65:d7:1a:
02:e1:0d:54:b0:2c:dc:fd:82:0b:95:b7:ff:d7:52:61:9b:97:
71:77:0d:5b:2f:b5:33:35:dc:d2:aa:a1:88:02:11:44:5f:65:
dd:5e:7d:20:7a:71:92:60:76:33:fb:73:c6:d3:ab:a2:3e:d9:
d5:ca:44:c5:0f:04:54:78:19:99:b4:be:47:ca:87:92:27:51:
16:dc:a1:a5:f2:d8:c7:9d:c0:26:cc:a1:f9:5d:98:21:a2:13:
bc:91:56:f9:95:a6:fa:ce:36:57:40:ee:fa:82:37:cf:20:76:
92:00:59:13:fd:e5:29:0e:e8:ce:98:c7:e3:f6:91:64:a7:f8:
80:1c:80:d4:b4:2f:b6:c3:1d:29:cb:9c:c0:73:48:b9:4a:6e:
5a:da:16:4a:96:29:17:da:0f:25:9a:eb:7c:dc:73:d9:56:02:
a2:a7:43:25:ad:d0:a3:a9:7a:cb:bb:c6:22:af:ab:d3:7a:fe:
70:5c:c0:51:be:99:fd:1e:74:d6:2f:df:e8:5a:2a:fc:57:ee:
ab:d2:bc:da:78:5e:6f:41:d5:d9:fb:c2:c6:38:e9:3f:a0:0a:
6d:e9:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:42:40 2025 by rpki-client