Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: qvXiNfFaDLcP3lnmY8cfqbvOyYog+EOQaN+OTOTICo0=
Subject key identifier: 4A:BA:4B:27:32:B7:65:1D:1A:A1:24:DF:3B:44:78:B8:71:42:4E:53
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 01976515EF16F9AB6B3660E2DD3681CEEA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1391
Signing time: Thu 12 Jun 2025 17:00:25 +0000
Manifest this update: Thu 12 Jun 2025 17:00:25 +0000
Manifest next update: Fri 13 Jun 2025 17:00:25 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: 7F88+MTRzuy5B9QTCJYvo63APXIGDBH5iq5QHYzBUOQ=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:15:ef:16:f9:ab:6b:36:60:e2:dd:36:81:ce:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 12 17:00:25 2025 GMT
Not After : Jun 13 17:00:25 2025 GMT
Subject: CN=4aba4b2732b7651d1aa124df3b4478b871424e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:73:1e:27:dc:e2:6f:12:c1:51:60:cc:a7:
f9:1a:c1:a0:80:de:c7:05:e0:c8:6e:fb:0e:d7:30:
3d:d3:f0:12:21:ce:e7:83:73:ee:ee:39:e8:24:2f:
1b:6c:9d:92:d8:71:aa:11:9b:7f:2f:50:4f:b1:6c:
7f:08:ac:72:2b:bd:64:6e:cf:07:7e:ec:ed:61:da:
09:66:54:c4:eb:bf:01:fc:a5:82:7d:ee:61:1c:19:
b0:d7:43:af:dd:0d:59:16:dc:fc:8b:50:db:ed:93:
5b:35:d6:6f:42:0b:b4:cc:fc:e0:f8:16:8f:3c:cf:
c6:d8:d2:b9:bd:d7:a5:9d:7b:44:bb:f5:fc:60:47:
ad:8c:31:24:a6:93:10:98:72:b4:08:94:30:c9:69:
a7:5f:14:81:77:96:e0:19:10:a3:1a:10:29:67:1a:
70:1d:c7:b3:69:c9:49:b0:e7:b9:e6:bf:e1:c7:75:
1e:f5:53:71:04:4b:b0:98:d2:6e:96:9f:bd:e6:a6:
aa:b9:11:2f:e7:aa:be:4d:72:85:e2:95:c6:33:64:
77:b3:f6:ea:b6:78:7e:bc:81:13:4c:70:4c:b3:60:
c4:13:c5:b5:74:71:ef:9b:2b:84:92:91:c1:b0:5e:
ed:5b:bb:29:a7:80:91:a4:10:a8:78:72:92:26:5b:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:4B:27:32:B7:65:1D:1A:A1:24:DF:3B:44:78:B8:71:42:4E:53
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:8b:fb:fa:ab:ce:4e:ba:e6:0c:ec:d0:6f:5f:30:9e:22:
c6:ae:17:47:71:47:c3:5a:e4:70:64:60:1d:33:32:1b:17:f0:
8a:db:d7:c8:cf:91:df:ca:2c:f2:36:cb:08:7d:de:48:5a:3e:
91:83:c5:ae:5f:27:57:3a:ad:46:e2:8f:b3:b1:7a:69:bc:ec:
09:b4:bc:a4:45:21:ed:57:7f:46:80:39:a5:38:58:e1:5b:11:
64:40:18:c0:26:36:0a:d1:a7:c6:79:42:da:36:40:9f:c9:99:
21:d2:18:46:f5:92:a9:1a:74:33:64:cc:87:95:40:61:5d:95:
88:76:ac:7e:a7:c5:b3:a6:f1:0f:cd:6c:8e:4a:77:b3:3f:21:
11:47:6f:db:71:57:6c:d2:03:97:5d:3a:04:b5:87:13:a0:a3:
c7:99:84:d7:e2:21:cf:32:c0:0d:17:e5:df:6d:07:e1:7d:db:
06:ea:69:f0:b8:13:5e:c7:1b:89:f8:52:f3:b9:11:eb:ca:64:
c2:ad:e2:39:0a:65:bc:2d:05:f5:dc:ac:4e:9f:5f:66:75:65:
6b:36:e1:eb:f5:af:4b:32:2d:95:52:c7:6d:c8:5f:dc:f0:01:
94:65:c3:a9:1b:1f:e0:f0:ed:42:76:f7:ba:1b:14:f5:af:fa:
3d:25:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:43:51 2025 by rpki-client