Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: kJUMT51/pJrvIdI3vvYu5SWdNQ8hC8JNnEMpAtLDhKk=
Subject key identifier: BA:01:9E:6D:E3:5B:A7:CB:5A:E7:70:2D:AA:F0:E0:C5:5C:3E:A4:A8
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 01974D4495B6E6C6ACAB8305988BAA8B4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 02:00:29 +0000
Manifest this update: Sun 08 Jun 2025 02:00:29 +0000
Manifest next update: Mon 09 Jun 2025 02:00:29 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: +UA++zwjifLss1+sG6YOHPOdoM0IKMKq7E7TCcdDPZ8=)
2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:95:b6:e6:c6:ac:ab:83:05:98:8b:aa:8b:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Jun 8 02:00:29 2025 GMT
Not After : Jun 9 02:00:29 2025 GMT
Subject: CN=ba019e6de35ba7cb5ae7702daaf0e0c55c3ea4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:0b:c2:51:88:a7:30:2c:47:56:55:6a:96:
54:f4:40:10:90:44:6c:2b:36:e1:2b:b2:0e:4b:8e:
0c:51:82:c3:fb:d0:03:53:44:5a:9d:67:40:37:bb:
8c:3d:06:ed:2e:56:69:5b:af:db:38:13:d6:b5:f0:
b1:18:b8:6b:d7:d8:26:79:7b:3b:27:31:b0:4d:91:
5d:03:b3:e9:b2:e1:4a:95:01:e4:f2:76:58:94:69:
ab:ec:f3:08:a0:f2:19:fe:22:06:35:05:66:90:f3:
14:5c:41:5a:b2:58:e9:63:ae:7d:4f:14:73:1f:5a:
97:f2:45:36:fb:8d:95:3b:17:0a:09:86:73:ba:23:
8e:16:18:6e:54:5c:c3:e6:2e:a5:4a:68:bf:4d:73:
35:f6:f2:23:46:dd:ec:4c:4a:d2:c0:ed:b8:17:f4:
0b:4d:cd:37:74:ab:e6:cc:c8:0e:9b:9e:29:a6:3b:
23:2c:a3:40:a9:d9:08:be:2d:1f:f9:ab:45:31:b1:
d4:94:f4:c3:13:9f:34:f6:bc:47:2d:5f:61:f4:be:
03:d2:f9:48:74:29:d3:dc:86:bb:28:7d:e1:db:17:
ae:59:a2:9e:64:1d:00:fb:ed:ef:02:60:43:54:9e:
16:59:a9:44:ef:df:08:99:e5:a3:06:c5:84:ef:73:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:9E:6D:E3:5B:A7:CB:5A:E7:70:2D:AA:F0:E0:C5:5C:3E:A4:A8
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:40:ca:7f:8f:27:5f:38:5c:f3:90:43:78:19:40:7f:de:
cf:85:75:7b:7c:62:cf:76:e3:42:04:ae:5c:7a:ab:01:27:b9:
5e:24:cd:0d:6f:6e:8a:d1:c3:69:0a:bc:21:d2:f9:87:b5:e1:
7b:99:01:eb:c8:de:c7:1b:e2:27:8e:e5:5a:ac:f1:43:4a:95:
2a:ec:40:5d:74:46:84:36:67:6d:c7:25:6d:a8:20:91:4e:c9:
2d:b5:9d:02:e5:e2:87:bc:cf:fc:18:18:5f:9f:48:75:02:29:
a0:ea:ef:d4:ad:42:90:c5:8e:cc:e7:28:08:c2:83:5b:74:c4:
06:c3:53:f5:dc:ae:61:c6:1a:54:fd:80:3a:5b:18:0f:63:9f:
26:53:39:d3:42:ce:bb:9a:2e:02:05:bc:2e:d5:49:4a:3d:56:
e4:61:46:47:e9:cd:b7:fc:13:22:db:eb:92:53:51:df:1f:3b:
41:eb:ed:95:28:2b:bb:81:50:3f:4f:ba:87:5b:78:79:4f:d9:
29:30:ad:e3:60:9e:1a:2c:27:d0:67:ec:27:61:8e:b4:79:37:
46:91:ac:e8:3f:a2:ba:68:f5:40:6d:62:86:cc:9c:38:b8:fc:
46:d2:27:02:92:bc:2b:34:cb:20:f2:3c:b3:f8:7a:bc:a2:b4:
b3:e0:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:22:34 2025 by rpki-client