Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: y4BDlD/qRd6svo5yU73eVZgq5pq+L3dF8scIVt+QWk0=
Subject key identifier: 96:4D:18:4D:A1:BA:05:16:23:85:4D:F0:30:2C:17:94:B6:3E:AE:5D
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019748C313815E0D08F05B2169D432C391EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 0FED
Signing time: Sat 07 Jun 2025 05:00:33 +0000
Manifest this update: Sat 07 Jun 2025 05:00:33 +0000
Manifest next update: Sun 08 Jun 2025 05:00:33 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: 94N5fnY38YEm65rldxBL5ab+pGgM/bP7bdCzDmnMUD8=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:13:81:5e:0d:08:f0:5b:21:69:d4:32:c3:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Jun 7 05:00:33 2025 GMT
Not After : Jun 8 05:00:33 2025 GMT
Subject: CN=964d184da1ba051623854df0302c1794b63eae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:c2:f5:22:fd:9f:f1:9c:2d:9a:6c:62:f0:
0f:de:eb:c6:66:47:af:a7:91:6f:6a:93:a6:c7:43:
c3:85:28:18:f6:be:59:ee:1b:c1:e4:f6:93:a2:5c:
0a:6c:b2:64:c9:47:76:93:ec:a7:47:98:2e:e2:f0:
15:5c:a5:32:3a:60:34:28:2f:ef:b3:0a:d6:98:74:
00:0c:7a:01:95:7d:d6:4c:02:7d:fa:9e:de:c9:6c:
92:6c:63:3c:4b:51:8a:8b:73:3b:57:2e:fb:33:32:
01:9f:3c:e1:bb:af:d9:ce:61:16:fb:68:ac:98:88:
ee:15:cd:2a:fa:06:d5:a8:57:c9:ec:6b:f0:5f:87:
7d:aa:27:dd:45:f5:9b:a5:9b:ff:ae:c1:e2:82:b3:
cb:7d:d0:27:ba:73:52:78:1a:20:ad:71:89:f9:16:
cb:2c:19:95:bf:5b:33:5d:11:74:e3:a2:34:09:37:
f2:81:75:6b:91:6a:b5:1d:37:c2:be:fd:a5:13:c4:
48:47:eb:f1:e8:84:05:df:d7:53:a6:65:7f:1f:8d:
24:7a:0d:b4:c2:e5:8b:6e:61:66:15:c7:50:53:c9:
04:cd:93:aa:27:8d:24:0a:87:d2:51:3d:ab:3a:44:
b6:c6:fa:e7:5a:64:25:8e:47:09:16:ca:1d:0b:5c:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:18:4D:A1:BA:05:16:23:85:4D:F0:30:2C:17:94:B6:3E:AE:5D
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f0:6b:fd:1b:2b:48:cc:b8:7e:4a:4e:d0:1a:28:02:70:4b:
63:b1:21:6f:e0:cd:4b:a3:c9:76:9b:ac:d7:17:6b:87:fb:61:
ea:b2:7c:9c:7a:dd:9d:25:7b:99:6c:6c:a5:22:fd:cd:35:36:
60:ea:05:6c:7b:4c:97:02:ff:ef:fc:39:ba:c4:a6:c4:e9:25:
0d:6b:5b:d1:09:4d:17:21:2e:00:94:00:7e:2c:0b:0a:6e:87:
49:d6:96:fb:6d:14:dd:e0:0f:8b:18:62:a0:a3:e3:65:e8:60:
12:06:39:e6:b3:53:fd:f0:84:14:29:9d:7a:5a:35:3d:21:d3:
2e:62:36:bb:16:57:48:f8:48:35:c3:f9:42:2e:31:65:9a:17:
1e:e6:52:ab:85:96:6f:9e:b9:3b:ca:ce:59:fb:93:a4:19:03:
5e:aa:77:56:ac:67:9f:86:1f:3c:61:d9:e4:c4:b3:ca:d1:8e:
a9:21:c6:3e:67:d8:45:3a:4b:84:45:1f:96:87:90:b1:48:0d:
ef:3b:14:e3:ba:b1:5c:1d:f0:ca:7f:e4:19:a2:da:47:33:33:
b5:b5:83:ba:d1:4f:5e:8a:36:32:5a:1f:38:7b:db:13:37:19:
3e:f7:94:13:59:92:e4:54:79:64:40:03:ba:33:71:8c:2e:b6:
19:d0:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:14 2025 by rpki-client