Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: gasrP14JufhNvhvXERjG/0labf6Ya5JupwbTFiH2xhU=
Subject key identifier: 2A:51:59:05:B7:71:95:45:1E:90:ED:AB:19:33:7A:31:B4:F3:52:0B
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 0197D6D01B989523AB33207159F9F6B56855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 08A6
Signing time: Fri 04 Jul 2025 19:00:52 +0000
Manifest this update: Fri 04 Jul 2025 19:00:52 +0000
Manifest next update: Sat 05 Jul 2025 19:00:52 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: MCKI3WZFOcdZ6zZJmWgIHB2CmvBG2GH7uBKs/4UJUcI=)
2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:d0:1b:98:95:23:ab:33:20:71:59:f9:f6:b5:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Jul 4 19:00:52 2025 GMT
Not After : Jul 5 19:00:52 2025 GMT
Subject: CN=2a515905b77195451e90edab19337a31b4f3520b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:73:32:8c:9f:42:07:74:5c:37:f1:b1:5c:
6e:d4:0e:de:60:a1:9e:e3:50:ae:c4:b3:b5:0f:66:
f6:51:69:3f:dc:09:d2:5b:07:5a:3c:f8:6c:35:68:
57:58:3a:f1:0c:2e:48:57:e7:c4:0e:3c:b4:c5:ad:
43:6a:78:14:ff:5d:2d:8b:fb:ad:a3:33:42:6d:1d:
6e:36:35:32:34:43:d1:32:1c:da:95:47:50:c7:c8:
4d:3c:bd:5b:be:27:30:68:f9:38:94:96:07:e6:22:
4a:fb:75:d0:86:24:da:02:76:89:6f:21:8d:d9:4c:
14:cb:36:96:e7:58:a2:91:61:9a:06:64:00:d1:cd:
e4:69:51:8a:09:19:24:69:b7:d0:e6:3d:c0:19:63:
ec:f7:96:8b:f4:1b:29:ba:77:88:c8:31:42:85:87:
62:d4:38:f1:b2:48:3f:28:b9:c4:d4:f0:a0:28:e9:
40:3c:d8:33:ae:a3:9e:01:f7:d7:62:69:21:82:66:
24:f6:b0:75:44:41:45:e4:27:32:42:84:ed:c9:e0:
3c:7c:a2:46:06:d3:1a:20:fc:fa:8f:8d:23:4d:e1:
88:f1:97:14:1c:6f:a5:20:f8:3b:52:71:86:cf:22:
ca:d9:eb:08:a0:a4:7e:16:f8:1d:3f:fa:f4:9f:96:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:59:05:B7:71:95:45:1E:90:ED:AB:19:33:7A:31:B4:F3:52:0B
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:47:70:18:43:15:76:7b:ae:c1:8e:fb:4c:2b:0d:0a:29:
5b:50:ab:7a:4c:ab:05:8c:6c:36:2e:52:b7:f5:59:21:dd:b1:
74:9f:d6:f4:5a:97:17:0e:6a:01:a9:a0:4a:46:f4:64:70:f9:
37:bb:73:c6:f3:6c:31:b2:73:56:17:18:d0:4e:94:58:9d:9e:
26:3e:ae:94:d5:ba:40:a6:4d:a4:05:3d:d9:e2:de:6c:3c:dc:
08:20:8e:a5:11:43:b9:8b:ab:71:1b:f2:50:db:ab:98:26:1c:
e2:ef:b6:bf:87:cb:31:d0:e4:e8:69:3c:9f:12:45:e2:93:32:
1c:8d:06:85:31:70:fc:52:d3:9a:81:15:18:3a:b1:2e:04:39:
50:40:98:ba:ab:38:4b:d8:e1:b4:0f:a3:64:10:12:93:6a:81:
db:1f:88:26:ce:79:cf:24:c6:d5:de:a2:39:96:dc:e2:24:5e:
e6:14:68:6e:43:4c:5c:23:f8:f3:a4:9c:66:9a:b5:9a:15:65:
00:90:ca:b6:ef:52:d1:4c:18:cd:fd:38:f4:19:c3:31:d7:86:
a4:91:5d:a1:4c:59:41:c7:2f:50:7c:a3:56:d4:50:e7:d9:a2:
f2:2d:d8:a9:e2:a4:d7:28:47:d0:3b:72:00:e6:12:c4:f1:77:
af:55:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:37:32 2025 by rpki-client