Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: MwRbVdOPaHGUM2ZaBTYHvKHqkTZR7WmgaH0MadpLs+s=
Subject key identifier: B4:33:53:43:EB:71:CC:A6:8C:FB:35:5F:F2:CF:AA:06:AD:85:86:00
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 019761392304C0950ED87F29FA5622A082CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 138F
Signing time: Wed 11 Jun 2025 23:00:23 +0000
Manifest this update: Wed 11 Jun 2025 23:00:23 +0000
Manifest next update: Thu 12 Jun 2025 23:00:23 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: 9qJ3xZw98ZTT2B2Pi+y1efjBo5WetjI4CS9k+L6yL/w=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:23:04:c0:95:0e:d8:7f:29:fa:56:22:a0:82:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 11 23:00:23 2025 GMT
Not After : Jun 12 23:00:23 2025 GMT
Subject: CN=b4335343eb71cca68cfb355ff2cfaa06ad858600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:09:a7:4a:15:44:41:1d:43:66:8e:f3:95:
88:e4:eb:db:d6:95:50:d3:21:0c:a4:37:db:4c:26:
0e:f4:44:34:dd:d7:54:50:7c:e8:3a:b1:d0:9a:ba:
43:26:ef:11:a2:32:0a:e8:bb:c5:ae:87:66:38:8f:
f1:45:28:a3:47:17:bf:72:c4:c0:dc:9c:c9:7c:21:
99:cc:42:3a:30:35:52:2d:24:2d:dd:0a:c3:65:89:
73:09:5e:53:2d:0a:3a:08:77:3e:3a:37:3c:ce:ba:
10:d1:9e:57:b3:a6:78:72:7f:8f:9b:24:4b:45:1c:
dd:e4:2e:ef:19:be:c6:e2:bc:a7:26:de:b7:71:af:
6e:2a:25:a7:c4:91:79:78:3d:1d:ee:d5:f5:2b:e7:
62:3b:60:d5:bb:fb:db:f1:2a:f1:fc:8d:4e:6b:bd:
6a:dc:91:00:cc:86:67:18:6d:ce:4b:4a:66:01:f0:
5a:23:8b:53:90:d6:51:e8:c6:7d:c8:7d:e1:c4:3a:
d6:e6:a9:d8:fa:b2:4a:f1:5f:43:ad:dd:eb:ab:82:
d3:9e:ce:3f:e6:46:63:f4:51:b7:73:03:bc:32:cd:
0f:b8:9b:36:cf:12:05:76:ee:f9:39:91:46:a2:57:
0c:7a:0a:b3:47:4d:b6:bc:e5:d0:a4:32:65:c1:9e:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:53:43:EB:71:CC:A6:8C:FB:35:5F:F2:CF:AA:06:AD:85:86:00
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ce:f1:6a:b7:64:1d:2a:f4:3b:29:63:e4:a1:90:d3:79:88:
2f:ce:08:26:e6:21:8d:65:0a:da:f9:5e:84:91:f3:e8:18:87:
64:eb:13:e1:c4:0d:56:db:15:57:69:d2:60:aa:67:9f:25:68:
42:4e:38:d5:09:04:c8:5b:f0:0e:21:be:30:d7:b8:08:58:13:
69:e0:4d:15:3f:21:c6:a6:c5:25:9b:00:9e:6d:ae:b1:ac:73:
e9:6f:de:cb:44:8d:61:c1:25:da:81:ed:02:83:27:a1:63:11:
2f:c3:ab:21:af:39:18:19:e3:85:21:e7:d5:93:11:11:94:1d:
8e:8d:44:f6:3e:03:2c:30:52:71:4b:f0:c1:d5:96:8d:6c:49:
91:e7:f0:9e:ab:e5:c5:66:f4:e9:96:d4:cc:0a:45:0d:4c:a7:
f1:f1:fb:aa:3f:fb:88:81:a6:42:64:e4:ee:41:41:bd:59:d0:
01:ff:19:d2:f9:f4:d0:52:d1:73:83:fd:36:97:5e:e5:76:7a:
fb:43:aa:8e:aa:7c:bb:f5:7c:01:19:9e:82:71:8c:61:f9:96:
10:ea:d6:ea:3e:91:cd:fc:09:de:f3:04:1a:fe:cf:eb:29:e7:
18:7f:49:73:bf:8d:64:17:60:de:f4:ab:42:e3:62:90:09:d4:
19:44:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:30:14 2025 by rpki-client